This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/B1532E06F5FC11F08D6378D9536F56BC.roa
File: B1532E06F5FC11F08D6378D9536F56BC.roa (raw, json)
Hash identifier: BHvIKED2uaqPZAP51ZvoMUdC+nOEbdcjH/lTTza7+wg=
Subject key identifier: 3C:26:8B:61:44:3D:4C:00:8A:0E:75:4C:2E:84:0C:FD:E6:61:A3:84
Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
Certificate serial: C7
Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/B1532E06F5FC11F08D6378D9536F56BC.roa
Signing time: Tue 20 Jan 2026 12:36:50 +0000
ROA not before: Tue 20 Jan 2026 12:36:50 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 58062
IP address blocks: 2001:df4:e140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl
rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
Validity
Not Before: Jan 20 12:36:50 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=696f76e2-c509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1f:64:0a:cc:88:89:dc:6f:bf:e5:df:31:73:
b1:2d:24:06:e0:ab:16:28:2f:fc:c2:9a:e6:04:50:
82:32:cf:6c:95:d7:8b:1c:2b:f0:da:b0:1c:55:3f:
2c:a9:47:35:48:d0:e1:38:3e:a3:d6:58:0b:37:f9:
48:97:d9:f6:51:7d:f3:f2:5b:23:09:46:bf:ef:f0:
c5:88:8e:cc:b8:b1:26:a3:9c:51:1e:40:39:f5:38:
65:c7:46:b4:19:de:bf:5f:0c:1a:a2:50:36:10:ed:
78:0a:63:b6:45:d8:8b:0e:61:c5:6c:f2:50:bf:1d:
9c:6e:cd:38:5d:0a:1b:82:db:6b:69:9f:b0:41:f0:
d4:f9:d6:4f:1e:b0:a0:03:9f:bf:2a:0a:19:75:c0:
60:e7:ec:61:e5:71:65:dc:f0:cc:53:ae:b4:ae:f6:
98:28:ed:a7:19:03:9b:61:bd:49:bb:fb:ff:8c:a1:
94:8b:00:b5:6c:60:7a:bb:d8:01:c7:d2:7a:8c:8b:
04:5d:34:da:68:c8:87:f7:e6:7b:43:ef:1d:91:4f:
7e:7a:b8:7a:ee:12:ee:79:98:d0:c0:2e:50:e8:f2:
d9:fa:14:f1:24:1b:df:7f:43:4d:c0:6b:9a:f1:58:
5d:54:bf:92:23:0b:4e:03:7a:c9:94:60:cc:ef:91:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:26:8B:61:44:3D:4C:00:8A:0E:75:4C:2E:84:0C:FD:E6:61:A3:84
X509v3 Authority Key Identifier:
keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/B1532E06F5FC11F08D6378D9536F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:e140::/48
Signature Algorithm: sha256WithRSAEncryption
bf:17:5d:30:00:86:1f:37:43:33:14:8d:86:e6:34:71:52:9b:
ea:3a:1d:d8:e4:de:5e:d5:58:0d:49:c9:78:03:02:1f:6c:57:
aa:7c:e8:3b:c2:31:6b:bf:e0:69:d5:64:98:44:ae:3f:10:b7:
69:8a:37:04:76:3f:85:b0:ad:6e:f6:d3:b4:d1:3f:6f:f4:b6:
71:86:e7:d6:99:9f:6d:0e:d2:56:52:22:b0:ff:b8:d5:f2:9e:
da:77:e3:37:9d:4b:62:7e:ed:cf:60:9b:17:d4:0c:05:d7:55:
58:6a:74:fe:9e:a3:17:b2:e3:55:97:da:76:a8:31:55:e1:8f:
21:f1:0a:fc:e6:76:6f:d0:7b:33:65:73:84:a2:7d:89:50:7d:
f8:c6:e3:1e:ac:6b:0c:13:f4:56:c4:05:c4:7c:4c:41:f0:a7:
fe:da:2a:31:c9:24:31:06:51:74:9b:eb:31:5e:11:04:7a:e4:
5f:00:85:a8:05:f0:7d:db:c1:b6:7f:ff:9f:b2:32:af:23:3b:
88:74:a8:a2:df:60:bc:62:3c:d1:16:73:ae:39:f4:b5:11:de:
f0:77:51:72:6e:6f:01:6d:bd:22:8d:a9:59:c7:f0:c2:4b:b5:
fd:3f:ba:bc:4c:a3:17:70:7a:a0:f2:bf:50:7d:f4:8e:b7:9a:
ef:f1:94:7b
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1
Q0YzODcxODYwHhcNMjYwMTIwMTIzNjUwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZmNzZlMi1jNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8B9kCsyIidxvv+XfMXOxLSQG4KsWKC/8wprmBFCCMs9sldeLHCvw2rAcVT8s
qUc1SNDhOD6j1lgLN/lIl9n2UX3z8lsjCUa/7/DFiI7MuLEmo5xRHkA59Thlx0a0
Gd6/XwwaolA2EO14CmO2RdiLDmHFbPJQvx2cbs04XQobgttraZ+wQfDU+dZPHrCg
A5+/KgoZdcBg5+xh5XFl3PDMU660rvaYKO2nGQObYb1Ju/v/jKGUiwC1bGB6u9gB
x9J6jIsEXTTaaMiH9+Z7Q+8dkU9+erh67hLueZjQwC5Q6PLZ+hTxJBvff0NNwGua
8VhdVL+SIwtOA3rJlGDM75G+gwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDwmi2FE
PUwAig51TC6EDP3mYaOEMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw
MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODdCQUMvQzZBRDNFMEFEMDJDMTFFRkI1NTg0OTE1QzRGOUFFMDIvQjE1MzJFMDZG
NUZDMTFGMDhENjM3OEQ5NTM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ304UAwDQYJKoZIhvcNAQELBQADggEBAL8XXTAAhh83
QzMUjYbmNHFSm+o6Hdjk3l7VWA1JyXgDAh9sV6p86DvCMWu/4GnVZJhErj8Qt2mK
NwR2P4WwrW7207TRP2/0tnGG59aZn20O0lZSIrD/uNXyntp34zedS2J+7c9gmxfU
DAXXVVhqdP6eoxey41WX2naoMVXhjyHxCvzmdm/QezNlc4SifYlQffjG4x6sawwT
9FbEBcR8TEHwp/7aKjHJJDEGUXSb6zFeEQR65F8AhagF8H3bwbZ//5+yMq8jO4h0
qKLfYLxiPNEWc6459LUR3vB3UXJubwFtvSKNqVnH8MJLtf0/urxMoxdweqDyv1B9
9I63mu/xlHs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:03:13 2026 by rpki-client