This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/B33F9CDEF66C11F08DE294936F6F56BC.roa
File: B33F9CDEF66C11F08DE294936F6F56BC.roa (raw, json)
Hash identifier: K2f/EZGtODYHk6zyOZDSL87V9QlgCG7RgpjvsIRWLU0=
Subject key identifier: 48:A7:4A:0F:45:D2:B2:A2:4D:20:F8:E2:13:AB:F2:92:82:03:E0:28
Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial: 0795
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/B33F9CDEF66C11F08DE294936F6F56BC.roa
Signing time: Wed 21 Jan 2026 01:58:38 +0000
ROA not before: Wed 21 Jan 2026 01:58:38 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 213618
IP address blocks: 2401:b480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Validity
Not Before: Jan 21 01:58:38 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=697032cd-c396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:74:ee:45:75:14:1f:e1:11:06:0f:c4:79:
be:02:fb:fa:b8:ba:67:f5:dd:1d:c1:1d:a0:10:af:
8b:fe:c5:a8:cf:8b:20:ed:37:6b:70:80:e0:6a:3b:
7c:ea:c1:a2:55:2a:49:d4:9f:61:f4:b7:80:a4:eb:
eb:e9:77:f8:92:72:f3:d8:6f:e4:24:84:ee:18:c8:
42:97:13:d3:be:6b:7a:b1:c6:87:2f:09:91:ae:5c:
46:5e:1e:b6:55:e2:1c:89:8e:5d:38:11:19:23:38:
74:0d:b6:8b:e1:15:53:4e:ff:c8:9f:62:fc:5d:bd:
69:e1:15:09:42:72:75:03:83:ee:1b:ea:90:69:21:
95:e4:47:c8:75:12:fc:36:60:9b:4c:35:ff:78:5a:
a1:fb:84:e8:49:b6:83:9c:df:be:1b:88:83:06:eb:
24:61:62:10:02:a7:f4:9a:c0:16:e1:66:01:d4:90:
20:d9:62:63:2a:c7:69:ce:c3:fc:80:67:0d:71:e6:
72:68:45:cf:a3:bb:e0:78:70:e0:cd:c7:d3:ca:8c:
3f:c4:68:e9:b9:bb:b4:42:4d:10:78:74:fe:a9:ad:
67:4f:8f:44:9a:12:8d:98:fa:b4:49:21:13:22:17:
c2:ad:4f:53:02:3c:e7:03:7e:1b:80:31:cd:d3:e6:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A7:4A:0F:45:D2:B2:A2:4D:20:F8:E2:13:AB:F2:92:82:03:E0:28
X509v3 Authority Key Identifier:
keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/B33F9CDEF66C11F08DE294936F6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b480::/32
Signature Algorithm: sha256WithRSAEncryption
44:57:f5:49:11:35:4a:2c:9f:d2:67:6e:84:b0:dc:7b:f6:93:
4a:e6:c8:8b:76:a3:64:81:7e:4e:81:0d:5a:c3:ce:a5:7f:f0:
5c:69:1c:50:1e:ae:53:dd:c3:ca:14:e7:55:56:8e:a7:d7:9a:
4e:73:9d:c2:d3:ee:93:a3:87:f2:c8:15:b4:1c:68:56:11:eb:
87:c3:21:df:af:7f:16:53:b3:0b:ae:5e:ce:45:35:ee:b3:73:
14:3f:1c:6c:50:1b:86:a4:38:fd:62:d6:5c:21:69:ef:e8:70:
09:6d:9f:b6:b1:13:42:b8:2a:36:c6:a0:83:1b:4f:45:19:e7:
21:11:e4:9a:1b:ee:1a:c7:61:56:e6:6a:26:fd:9b:9e:ec:3f:
f3:e2:b1:6c:06:39:c5:dd:bb:36:0a:67:c7:c0:af:c4:de:f3:
7a:de:b4:ba:16:9d:7a:9b:a3:b1:29:6e:07:c8:d7:00:f6:c5:
40:f0:57:4d:a4:93:06:a7:38:d9:56:44:ee:14:c4:d3:b4:46:
ed:63:23:37:f8:95:89:29:8b:4a:ee:f0:f6:31:6d:42:2d:98:
63:9c:bc:a6:82:b2:30:b0:0c:d3:5d:e8:ba:f2:0d:0a:93:7d:
f7:d0:3f:34:4a:db:69:25:28:80:47:47:9e:3a:f6:92:f1:02:
29:a4:e5:27
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVDRTcxMTAvBgNVBAUTKDc3MzcwQkMwNzMwNUQxOURCREFDQ0U0QkY3MjA5RTFF
QjZENDBFMzMwHhcNMjYwMTIxMDE1ODM4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTcwMzJjZC1jMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1op07kV1FB/hEQYPxHm+Avv6uLpn9d0dwR2gEK+L/sWoz4sg7TdrcIDgajt8
6sGiVSpJ1J9h9LeApOvr6Xf4knLz2G/kJITuGMhClxPTvmt6scaHLwmRrlxGXh62
VeIciY5dOBEZIzh0DbaL4RVTTv/In2L8Xb1p4RUJQnJ1A4PuG+qQaSGV5EfIdRL8
NmCbTDX/eFqh+4ToSbaDnN++G4iDBuskYWIQAqf0msAW4WYB1JAg2WJjKsdpzsP8
gGcNceZyaEXPo7vgeHDgzcfTyow/xGjpubu0Qk0QeHT+qa1nT49EmhKNmPq0SSET
IhfCrU9TAjznA34bgDHN0+bMmwIDAQABo4ICljCCApIwHQYDVR0OBBYEFEinSg9F
0rKiTSD44hOr8pKCA+AoMB8GA1UdIwQYMBaAFHc3C8BzBdGdvazOS/cgnh621A4z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUNFNy81RTA1REJBNDVG
QUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBaMjlyTTVMOXlDZUhyYlVE
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R6Y0x3SE1GMFoyOXJNNUw5eUNlSHJiVURqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVDRTcvNUUwNURCQTQ1RkFDMTFFQjg0OTQ0NTJGQzRGOUFFMDIvQjMzRjlDREVG
NjZDMTFGMDhERTI5NDkzNkY2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkAbSAMA0GCSqGSIb3DQEBCwUAA4IBAQBEV/VJETVKLJ/S
Z26EsNx79pNK5siLdqNkgX5OgQ1aw86lf/BcaRxQHq5T3cPKFOdVVo6n15pOc53C
0+6To4fyyBW0HGhWEeuHwyHfr38WU7MLrl7ORTXus3MUPxxsUBuGpDj9YtZcIWnv
6HAJbZ+2sRNCuCo2xqCDG09FGechEeSaG+4ax2FW5mom/Zue7D/z4rFsBjnF3bs2
CmfHwK/E3vN63rS6Fp16m6OxKW4HyNcA9sVA8FdNpJMGpzjZVkTuFMTTtEbtYyM3
+JWJKYtK7vD2MW1CLZhjnLymgrIwsAzTXei68g0Kk3330D80SttpJSiAR0eeOvaS
8QIppOUn
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:15:42 2026 by rpki-client