This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/1B2031C645B911EFB15BD970C4F9AE02.roa File: 1B2031C645B911EFB15BD970C4F9AE02.roa (raw, json) Hash identifier: JdlW3zfugXT1nnN8YoMVEFmQcr0trjuADjjwBtb4laU= Subject key identifier: 4A:C0:24:75:63:9E:E3:D0:44:ED:B9:FB:39:86:61:0A:E1:B0:EB:CA Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 011E Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/1B2031C645B911EFB15BD970C4F9AE02.roa Signing time: Tue 13 Jan 2026 04:24:09 +0000 ROA not before: Tue 13 Jan 2026 04:24:09 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152317 IP address blocks: 157.10.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Jan 13 04:24:09 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6965c8e9-24db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:00:36:33:6a:3c:54:ae:25:ff:e3:60:76: 26:60:f0:ba:0d:b6:11:c9:a8:7b:3a:a8:55:43:67: f2:2d:b6:c7:4e:98:3a:2c:3e:76:f5:ac:1a:30:cf: c9:3f:f5:ba:01:0d:e4:b0:e3:fc:df:64:86:3e:6d: 39:bb:52:96:4b:08:4e:7f:dd:85:84:8a:bf:02:35: 5a:b7:2e:f9:23:81:5d:b3:e0:14:22:d8:42:8e:61: e5:ea:cd:22:68:cf:85:79:4c:dc:3e:d2:97:3e:90: 48:aa:07:46:18:6f:2d:d5:0c:31:67:5b:9d:cd:3b: af:31:48:b3:3f:13:ca:78:01:81:95:85:bf:e7:cc: 27:e7:f8:ff:4a:ed:b7:af:a6:7f:83:e5:41:94:1b: 05:19:90:34:51:f8:01:4b:1e:5d:1d:32:ce:26:0d: 3d:87:cf:80:f6:4d:33:3f:15:3f:b8:b2:49:24:44: 66:7d:e2:4c:25:14:46:99:bd:4a:51:ed:5e:94:6c: 79:45:e3:2e:90:27:32:aa:ef:9c:6b:95:79:b3:5e: 62:14:37:e7:b8:ff:2d:8e:6b:e9:09:ab:95:ef:1f: 50:5f:30:fd:7a:b9:87:2f:57:45:0d:14:6d:f2:be: 0a:4c:7c:4a:9c:65:fb:26:12:03:42:eb:3b:02:3d: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C0:24:75:63:9E:E3:D0:44:ED:B9:FB:39:86:61:0A:E1:B0:EB:CA X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/1B2031C645B911EFB15BD970C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.144.0/23 Signature Algorithm: sha256WithRSAEncryption 85:a3:cb:f1:42:24:7c:bc:ae:11:27:82:d3:d8:bb:68:ce:f1: 70:51:dd:a3:5e:8f:35:4d:ca:85:71:3a:3e:b2:c3:f9:dc:cc: bf:4f:b9:43:f8:cb:0f:15:94:df:bb:ef:0b:1c:33:75:7b:8c: af:a5:be:f4:d6:6d:24:1a:c2:b7:7a:02:8f:83:06:35:3a:6c: 2d:04:52:ff:ed:7b:59:23:b5:65:4d:dc:6c:68:0c:57:68:00: 49:cb:f7:1d:49:59:39:79:12:db:1b:14:ee:10:61:ed:55:3b: 4e:40:53:2d:fe:a3:99:74:b5:15:f9:16:ec:64:79:ef:72:96: 75:98:94:b6:4b:43:67:62:b9:a3:50:ee:60:81:40:a9:5f:e6: 88:bc:52:e8:c3:15:8c:f9:fb:1a:0d:87:f2:29:0a:34:e2:11: 51:48:37:11:13:b4:4c:a8:1d:eb:e2:e3:47:a0:c0:e7:2a:64: e1:97:b1:e7:ed:8f:68:d1:5c:62:3c:a7:d9:43:e9:d4:5c:01: 9e:10:59:4e:f7:31:e9:40:b8:11:34:4d:6f:05:ff:60:fb:74: 04:3e:f9:5d:0c:bd:3d:c8:b1:8b:bb:a5:c5:1a:b0:82:ef:5e: 97:f1:d9:fa:9e:8b:b8:1c:66:7b:21:55:14:bd:41:5e:28:41: 42:b6:e2:f6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjYwMTEzMDQyNDA5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY1YzhlOS0yNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVYANjNqPFSuJf/jYHYmYPC6DbYRyah7OqhVQ2fyLbbHTpg6LD529awaMM/J P/W6AQ3ksOP832SGPm05u1KWSwhOf92FhIq/AjVaty75I4Fds+AUIthCjmHl6s0i aM+FeUzcPtKXPpBIqgdGGG8t1QwxZ1udzTuvMUizPxPKeAGBlYW/58wn5/j/Su23 r6Z/g+VBlBsFGZA0UfgBSx5dHTLOJg09h8+A9k0zPxU/uLJJJERmfeJMJRRGmb1K Ue1elGx5ReMukCcyqu+ca5V5s15iFDfnuP8tjmvpCauV7x9QXzD9ermHL1dFDRRt 8r4KTHxKnGX7JhIDQus7Aj2NHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFErAJHVj nuPQRO25+zmGYQrhsOvKMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThENUIvN0NDOEYxOUU0NUI3MTFFRkE2REZEMDMyQzRGOUFFMDIvMUIyMDMxQzY0 NUI5MTFFRkIxNUJEOTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCpAwDQYJKoZIhvcNAQELBQADggEBAIWjy/FCJHy8rhEn gtPYu2jO8XBR3aNejzVNyoVxOj6yw/nczL9PuUP4yw8VlN+77wscM3V7jK+lvvTW bSQawrd6Ao+DBjU6bC0EUv/te1kjtWVN3GxoDFdoAEnL9x1JWTl5EtsbFO4QYe1V O05AUy3+o5l0tRX5Fuxkee9ylnWYlLZLQ2diuaNQ7mCBQKlf5oi8UujDFYz5+xoN h/IpCjTiEVFINxETtEyoHevi40egwOcqZOGXseftj2jRXGI8p9lD6dRcAZ4QWU73 MelAuBE0TW8F/2D7dAQ++V0MvT3IsYu7pcUasILvXpfx2fqei7gcZnshVRS9QV4o QUK24vY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:32:59 2026 by rpki-client