This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B589332C498611EF90B46962C4F9AE02.roa File: B589332C498611EF90B46962C4F9AE02.roa (raw, json) Hash identifier: 7w9wF8XsqdQtTLhDlS6/cW8MDP0hFJjk/GVvhd+vl1Y= Subject key identifier: 9C:CA:91:BF:32:5C:DE:86:B0:B1:25:AD:FD:2D:74:CC:F5:E9:AE:49 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 05D4 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B589332C498611EF90B46962C4F9AE02.roa Signing time: Fri 02 Jan 2026 23:18:48 +0000 ROA not before: Fri 02 Jan 2026 23:18:48 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137409 IP address blocks: 43.226.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jan 2 23:18:48 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69585257-d642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:bf:56:eb:65:d0:90:b1:e8:69:ad:cc:ec: 2d:6a:5b:1e:3c:1d:6e:69:69:bd:6a:57:45:8e:b0: 79:cd:82:99:34:14:fe:c0:6e:a3:a7:90:50:92:81: 71:8e:3c:07:fa:c5:92:27:47:43:1f:39:02:33:48: 1f:d7:d2:62:de:a3:76:f2:b5:79:86:74:26:1b:fc: 65:c7:29:4c:e8:39:c6:a4:7a:a3:e7:1a:c4:15:ca: e3:8c:d1:2d:f2:f3:ab:1f:5b:4a:b3:e3:5b:dc:fa: 2d:fd:9f:98:77:e7:f4:e5:cd:2a:77:b8:a4:04:79: fd:8b:93:3a:51:e8:0a:fa:9e:c7:92:fd:5e:3b:07: 51:b1:1d:14:a9:75:3f:de:e2:c2:6e:56:9e:e1:09: f5:23:46:bb:8a:b9:2f:b6:ce:96:47:b5:7d:b8:d0: b7:9d:f4:95:2e:c8:6d:28:09:7c:85:60:23:f6:26: a4:14:06:ce:d8:a8:a8:9a:63:d8:30:0b:8d:c8:31: 87:9f:52:3d:cc:d8:6b:78:9c:00:0c:25:6a:e6:24: 37:db:19:7b:a0:dc:0c:fe:38:f5:de:5d:21:fb:fa: 75:d7:63:c2:e5:47:17:61:05:e6:4f:5d:3d:1a:fb: f9:6f:a6:ac:e5:5b:ed:f6:62:11:83:e7:f6:d6:e0: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CA:91:BF:32:5C:DE:86:B0:B1:25:AD:FD:2D:74:CC:F5:E9:AE:49 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B589332C498611EF90B46962C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.229.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:21:83:b7:4e:55:e1:4c:04:aa:7e:19:a7:80:a1:f9:78:3e: e7:2e:51:da:9e:92:05:a6:6e:f8:ee:d0:97:55:a5:54:ad:6e: a5:e4:b1:9e:54:5e:8b:4a:00:b8:f5:cc:60:17:bd:6c:54:fb: 5f:88:61:c9:f3:a3:50:e3:30:8b:ca:57:de:a9:ac:8b:3d:29: 6d:91:87:6c:ed:0b:91:53:3e:e2:44:eb:da:1f:4d:3f:43:be: 81:3a:51:58:63:f9:54:8d:16:b5:f0:bb:c8:11:73:0e:34:ad: f3:4f:fc:cf:11:cd:da:bb:6a:ab:d9:2d:02:73:ab:24:0b:56: 8e:9d:0e:95:75:54:27:13:c2:d2:01:fa:df:a1:ff:b0:71:3c: a4:26:e0:a4:3f:91:27:47:bb:1b:8d:89:b3:3e:be:f4:9c:da: 6e:41:40:a6:01:bf:84:16:8c:77:be:9d:a6:cc:21:09:83:46: 0a:ec:c5:da:cd:74:59:bc:87:1b:43:75:1a:68:09:f6:e9:8e: 6c:50:0f:ed:2a:bd:63:00:66:ed:8c:c6:88:c7:f3:24:15:d1: 63:eb:1f:66:c6:bb:32:68:0a:85:3c:aa:84:11:a9:bb:5d:98: b1:eb:e3:7e:76:cc:c1:71:aa:66:ca:cb:a6:de:3c:d5:be:90: 29:8c:3f:54 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjYwMTAyMjMxODQ4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU4NTI1Ny1kNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2f2/Vutl0JCx6GmtzOwtalsePB1uaWm9aldFjrB5zYKZNBT+wG6jp5BQkoFx jjwH+sWSJ0dDHzkCM0gf19Ji3qN28rV5hnQmG/xlxylM6DnGpHqj5xrEFcrjjNEt 8vOrH1tKs+Nb3Pot/Z+Yd+f05c0qd7ikBHn9i5M6UegK+p7Hkv1eOwdRsR0UqXU/ 3uLCblae4Qn1I0a7irkvts6WR7V9uNC3nfSVLshtKAl8hWAj9iakFAbO2KiommPY MAuNyDGHn1I9zNhreJwADCVq5iQ32xl7oNwM/jj13l0h+/p112PC5UcXYQXmT109 Gvv5b6as5Vvt9mIRg+f21uA+pwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJzKkb8y XN6GsLElrf0tdMz16a5JMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvQjU4OTMzMkM0 OTg2MTFFRjkwQjQ2OTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr4uUwDQYJKoZIhvcNAQELBQADggEBAI8hg7dOVeFMBKp+ GaeAofl4PucuUdqekgWmbvju0JdVpVStbqXksZ5UXotKALj1zGAXvWxU+1+IYcnz o1DjMIvKV96prIs9KW2Rh2ztC5FTPuJE69ofTT9DvoE6UVhj+VSNFrXwu8gRcw40 rfNP/M8Rzdq7aqvZLQJzqyQLVo6dDpV1VCcTwtIB+t+h/7BxPKQm4KQ/kSdHuxuN ibM+vvSc2m5BQKYBv4QWjHe+nabMIQmDRgrsxdrNdFm8hxtDdRpoCfbpjmxQD+0q vWMAZu2MxojH8yQV0WPrH2bGuzJoCoU8qoQRqbtdmLHr4352zMFxqmbKy6bePNW+ kCmMP1Q= -----END CERTIFICATE-----Generated at Sun Jan 25 14:23:41 2026 by rpki-client