This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/1DD57A04F78B11F0BC0D2DF44C6F56BC.roa File: 1DD57A04F78B11F0BC0D2DF44C6F56BC.roa (raw, json) Hash identifier: ASZSMgEyRk+uF/0CnaaZsrnHg4FBUtMY7u7DBa5MeBw= Subject key identifier: 2D:9F:DE:6E:B1:95:02:4D:22:61:3C:14:FC:2C:5D:A4:3E:98:B4:28 Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Certificate serial: 0554 Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/1DD57A04F78B11F0BC0D2DF44C6F56BC.roa Signing time: Thu 22 Jan 2026 12:08:52 +0000 ROA not before: Thu 22 Jan 2026 12:08:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150589 IP address blocks: 151.158.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Validity Not Before: Jan 22 12:08:52 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69721354-a97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:8a:66:4c:ff:45:48:06:05:7e:06:2c:17: ad:1c:9a:fc:36:06:0d:6c:7b:d3:d4:b9:ab:13:66: 3e:61:4d:85:f0:f8:62:99:f2:d3:59:04:fd:46:4e: e1:da:e4:cf:8e:43:34:60:27:ed:28:d9:91:b5:07: d7:f2:8d:97:df:7d:14:1f:2b:29:ff:6a:37:b6:17: 0e:04:82:e9:5b:4d:7d:b1:13:ad:09:11:7e:7c:ed: b9:16:45:e3:d3:5b:2f:5b:d8:5b:46:fa:9a:1d:e7: c2:4a:4b:bc:27:af:47:d5:82:c8:c5:6d:38:90:86: 08:98:36:ad:18:89:1e:a7:9e:b3:5f:e3:a8:ec:a2: f6:8d:1f:6c:8b:8b:6d:a3:d3:13:ce:1a:cb:75:49: da:0a:e1:92:d7:9e:c5:44:57:6c:90:cb:e7:c4:59: 39:42:ba:a3:fe:81:a4:22:9e:1b:cf:79:02:ed:db: bc:31:cf:35:25:1b:7b:bd:b8:fd:b6:55:aa:03:55: c5:d5:0c:b4:7d:b8:25:6e:96:90:a5:79:90:b1:96: ee:d7:a1:6f:01:d0:30:18:a5:96:ef:08:4c:23:0c: 7f:1a:90:bd:76:10:31:a5:9c:9a:0d:df:c9:80:29: 50:d7:38:d1:8a:38:e6:64:b7:63:32:3a:e3:f3:cb: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9F:DE:6E:B1:95:02:4D:22:61:3C:14:FC:2C:5D:A4:3E:98:B4:28 X509v3 Authority Key Identifier: keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/1DD57A04F78B11F0BC0D2DF44C6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 151.158.32.0/23 Signature Algorithm: sha256WithRSAEncryption 33:0a:a2:9c:d1:89:c6:c7:b1:ce:a8:f9:dd:9c:29:d5:0b:45: ec:7a:01:5d:1e:70:c9:21:08:f2:8e:8e:2b:aa:e7:01:89:9f: 4b:13:03:c5:57:1d:ea:77:06:17:85:57:6c:3f:fd:6b:a7:3a: e8:ad:84:b9:16:48:55:9f:1b:44:b6:90:50:eb:d8:4d:35:32: b8:a1:f7:f1:96:76:b2:46:be:99:4a:c5:e4:58:4d:c3:99:bc: 8d:db:2f:79:f4:4c:37:ba:2e:5a:45:3c:f4:32:c2:ab:95:80: c1:c8:14:e1:2d:76:d5:09:0b:c3:66:62:8e:06:19:c8:70:f8: ff:1d:f9:ff:21:c8:dc:02:15:73:68:a5:ac:9c:cf:58:fc:ee: 37:c4:62:6b:70:67:92:7f:93:9a:a8:0f:fb:c4:95:59:af:97: 12:05:a5:87:06:68:6a:3e:8e:af:8f:df:52:9e:13:75:88:ad: b3:ff:a4:71:bd:d2:11:7f:89:3f:41:07:1f:23:3b:78:fd:76: 78:8d:fa:3c:af:d3:12:04:ad:31:9a:dd:fd:42:5b:e8:9f:e8: 12:b1:9b:ad:2c:cb:65:fb:d8:c9:f1:c7:2d:8d:c6:2e:b5:2a: 2b:b5:34:f6:f7:9c:81:4a:69:ca:37:14:9e:13:47:e2:2b:2f: 2d:ff:da:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy NUUxRkQzOEEwHhcNMjYwMTIyMTIwODUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTcyMTM1NC1hOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLaKZkz/RUgGBX4GLBetHJr8NgYNbHvT1LmrE2Y+YU2F8PhimfLTWQT9Rk7h 2uTPjkM0YCftKNmRtQfX8o2X330UHysp/2o3thcOBILpW019sROtCRF+fO25FkXj 01svW9hbRvqaHefCSku8J69H1YLIxW04kIYImDatGIkep56zX+Oo7KL2jR9si4tt o9MTzhrLdUnaCuGS157FRFdskMvnxFk5Qrqj/oGkIp4bz3kC7du8Mc81JRt7vbj9 tlWqA1XF1Qy0fbglbpaQpXmQsZbu16FvAdAwGKWW7whMIwx/GpC9dhAxpZyaDd/J gClQ1zjRijjmZLdjMjrj88tVbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC2f3m6x lQJNImE8FPwsXaQ+mLQoMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvMURENTdBMDRG NzhCMTFGMEJDMEQyREY0NEM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGXniAwDQYJKoZIhvcNAQELBQADggEBADMKopzRicbHsc6o +d2cKdULRex6AV0ecMkhCPKOjiuq5wGJn0sTA8VXHep3BheFV2w//WunOuithLkW SFWfG0S2kFDr2E01Mrih9/GWdrJGvplKxeRYTcOZvI3bL3n0TDe6LlpFPPQywquV gMHIFOEtdtUJC8NmYo4GGchw+P8d+f8hyNwCFXNopaycz1j87jfEYmtwZ5J/k5qo D/vElVmvlxIFpYcGaGo+jq+P31KeE3WIrbP/pHG90hF/iT9BBx8jO3j9dniN+jyv 0xIErTGa3f1CW+if6BKxm60sy2X72Mnxxy2Nxi61Kiu1NPb3nIFKaco3FJ4TR+Ir Ly3/2h0= -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:05 2026 by rpki-client