This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/2EA5BC6EE71811F0B23E26476E6F56BC.roa File: 2EA5BC6EE71811F0B23E26476E6F56BC.roa (raw, json) Hash identifier: GE8oEOwRGzTm0bPnnJMgKhwDLA8B5OVvdk+Gs9j6Cg4= Subject key identifier: 5D:00:24:3C:29:99:BF:50:26:A7:AE:D7:23:DA:3F:32:4E:A0:72:FB Certificate issuer: /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Certificate serial: D9 Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/2EA5BC6EE71811F0B23E26476E6F56BC.roa Signing time: Thu 01 Jan 2026 13:45:50 +0000 ROA not before: Thu 01 Jan 2026 13:45:50 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133894 IP address blocks: 160.191.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Validity Not Before: Jan 1 13:45:50 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69567a8e-37ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c8:ac:7c:65:44:65:f9:71:ec:bc:ce:31:ca: fb:81:82:87:22:d5:04:a5:68:e7:24:13:1f:78:32: 4b:d8:0f:54:59:3b:3a:da:ec:05:a9:8e:f7:02:4e: ba:6e:ff:55:ba:e0:85:bb:8d:29:0e:e6:38:84:d5: cb:a5:68:08:a5:99:0a:97:3a:e9:df:91:8f:91:30: 1d:c8:5c:c2:86:36:97:67:18:eb:72:a9:fa:43:fb: 21:8d:bb:0d:6a:de:12:af:8a:53:74:7a:52:33:b6: 7a:09:81:ac:00:32:35:42:32:45:14:f8:a2:5d:ae: f9:3d:fd:e1:4f:d7:89:3a:a2:36:5b:b1:59:15:df: 3b:2e:5b:f9:7a:87:0d:fe:fb:0c:4e:51:a1:b1:c6: a7:e3:c2:ca:78:72:26:20:19:b7:de:9b:61:cb:e2: 56:9e:27:c0:be:e9:cb:29:69:90:74:a4:3e:48:df: 47:0e:a5:50:ea:d9:53:ad:55:b0:80:b3:4e:de:1d: 37:28:a0:16:27:1c:16:0c:1f:91:1f:01:ff:ac:5d: 10:ae:01:24:3a:ef:26:a4:7f:44:9b:b1:b5:da:58: 00:9e:ab:ef:37:e0:b6:83:bc:8d:80:11:c3:bd:b7: 0f:ba:78:32:ad:da:60:16:9a:b9:2b:f8:d3:42:05: 91:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:00:24:3C:29:99:BF:50:26:A7:AE:D7:23:DA:3F:32:4E:A0:72:FB X509v3 Authority Key Identifier: keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/2EA5BC6EE71811F0B23E26476E6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.140.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:12:ea:64:d0:f8:90:b3:a2:fc:c5:1b:0e:51:c1:80:92:50: ca:c3:0c:e2:a3:f2:b4:c6:3c:b0:52:19:0e:de:49:61:0c:77: 99:f6:7d:89:66:e4:60:c4:19:21:b3:0f:e8:d3:d2:62:b5:b6: a0:09:54:2e:a4:57:f2:02:7c:12:15:eb:f1:ab:f1:57:25:4d: fd:f4:ac:d0:95:49:69:89:3d:cd:1b:72:53:e1:81:dd:a3:3f: 2b:4f:35:bd:e4:b1:5f:92:e8:fa:25:5d:bd:50:45:63:22:17: c4:e0:82:de:d5:bc:a0:29:37:88:73:46:40:29:83:06:1d:71: 5a:20:43:06:6b:fe:40:68:59:6c:be:30:85:10:c4:3b:82:dd: cd:26:bc:83:5e:2e:05:0b:dc:81:22:7e:05:5a:d4:2d:90:47: fb:6b:55:1f:27:35:0e:37:7d:20:56:d0:88:42:09:02:3c:98: d8:a2:02:3b:2c:b3:4c:60:f0:34:06:24:68:be:a2:cd:a8:6c: 75:ca:f2:60:06:cc:98:44:0e:f2:f0:b8:de:6e:58:65:40:29: ba:37:b2:86:c1:c8:d9:25:c7:6f:ed:b9:29:29:91:8b:59:df: 90:54:3f:7d:ee:d7:59:74:7c:d1:78:cb:d2:2b:4f:47:9e:e3: 3a:3b:25:55 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERBQzUxMTAvBgNVBAUTKDQ3MDFDRjJEMjgyMDA5RDZDNkVBRjQ1NTZGQjBEQzFC MEQ1NTU3RUYwHhcNMjYwMTAxMTM0NTUwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU2N2E4ZS0zN2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cisfGVEZflx7LzOMcr7gYKHItUEpWjnJBMfeDJL2A9UWTs62uwFqY73Ak66 bv9VuuCFu40pDuY4hNXLpWgIpZkKlzrp35GPkTAdyFzChjaXZxjrcqn6Q/shjbsN at4Sr4pTdHpSM7Z6CYGsADI1QjJFFPiiXa75Pf3hT9eJOqI2W7FZFd87Llv5eocN /vsMTlGhscan48LKeHImIBm33pthy+JWnifAvunLKWmQdKQ+SN9HDqVQ6tlTrVWw gLNO3h03KKAWJxwWDB+RHwH/rF0QrgEkOu8mpH9Em7G12lgAnqvvN+C2g7yNgBHD vbcPungyrdpgFpq5K/jTQgWRwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF0AJDwp mb9QJqeu1yPaPzJOoHL7MB8GA1UdIwQYMBaAFEcBzy0oIAnWxur0VW+w3BsNVVfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REFDNS9DMzk1ODJDMEFC REExMUVGQTFDMTRFNzZDNEY5QUUwMi9Sd0hQTFNnZ0NkYkc2dlJWYjdEY0d3MVZW LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J3SFBMU2dnQ2RiRzZ2UlZiN0RjR3cxVlYtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OERBQzUvQzM5NTgyQzBBQkRBMTFFRkExQzE0RTc2QzRGOUFFMDIvMkVBNUJDNkVF NzE4MTFGMEIyM0UyNjQ3NkU2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgv4wwDQYJKoZIhvcNAQELBQADggEBACwS6mTQ+JCzovzF Gw5RwYCSUMrDDOKj8rTGPLBSGQ7eSWEMd5n2fYlm5GDEGSGzD+jT0mK1tqAJVC6k V/ICfBIV6/Gr8VclTf30rNCVSWmJPc0bclPhgd2jPytPNb3ksV+S6PolXb1QRWMi F8Tggt7VvKApN4hzRkApgwYdcVogQwZr/kBoWWy+MIUQxDuC3c0mvINeLgUL3IEi fgVa1C2QR/trVR8nNQ43fSBW0IhCCQI8mNiiAjsss0xg8DQGJGi+os2obHXK8mAG zJhEDvLwuN5uWGVAKbo3sobByNklx2/tuSkpkYtZ35BUP33u11l0fNF4y9IrT0ee 4zo7JVU= -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:31 2026 by rpki-client