This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/CD58C016F98011F0A50135134F6F56BC.roa
File: CD58C016F98011F0A50135134F6F56BC.roa (raw, json)
Hash identifier: WgbBegcXtuLajd68s6jhkFjYtGrfcRJvzcXwpj9KLWg=
Subject key identifier: D0:E1:A8:9C:B9:87:6E:4D:1B:75:D2:58:18:83:42:C2:A6:4F:03:E4
Certificate issuer: /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial: 03
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/CD58C016F98011F0A50135134F6F56BC.roa
Signing time: Sun 25 Jan 2026 00:00:04 +0000
ROA not before: Sun 25 Jan 2026 00:00:04 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 4766
IP address blocks: 151.158.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Validity
Not Before: Jan 25 00:00:04 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69755d04-f7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:91:d2:61:19:ae:e6:18:96:f1:c4:cd:4e:
2f:b2:e8:91:64:b7:8f:5b:6b:23:cc:97:dc:82:69:
72:51:e2:42:1b:d7:25:7a:65:6c:57:d4:b1:55:fc:
3e:5e:fa:0b:9a:b8:a6:8d:9d:cc:9b:8e:25:cd:04:
d4:24:c2:21:69:1d:4d:4e:48:81:8d:66:2c:76:25:
ac:b4:01:9b:42:cb:20:a3:b2:6b:6b:5c:29:f7:a5:
c8:99:9e:94:6e:fb:1d:7e:a4:99:10:c1:76:a0:9b:
da:17:f2:00:49:7d:02:40:bb:a9:30:f6:c7:e0:bb:
e0:6a:8f:5d:7c:80:76:b3:d4:13:9d:4e:f7:11:04:
e0:1e:1d:4b:c1:2c:2f:36:e3:70:92:6a:fb:9f:5f:
f0:4c:b2:95:81:f6:69:d1:db:19:07:56:d0:0c:81:
31:59:c3:01:50:5a:a0:1e:6a:a9:6b:82:e9:f6:82:
6e:33:45:84:1b:44:1a:77:de:e0:b8:8a:41:da:c4:
92:ba:a0:53:64:e7:bd:68:cc:37:5f:1a:47:3e:d8:
a9:86:86:ca:53:c1:0b:15:04:1e:1e:fe:eb:23:0d:
92:77:aa:78:7a:b7:9b:8d:17:23:86:4a:1e:80:f0:
87:37:4f:c7:f2:c9:72:1d:6c:e3:5e:c9:61:1a:50:
ae:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E1:A8:9C:B9:87:6E:4D:1B:75:D2:58:18:83:42:C2:A6:4F:03:E4
X509v3 Authority Key Identifier:
keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/CD58C016F98011F0A50135134F6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.0.0/24
Signature Algorithm: sha256WithRSAEncryption
73:77:10:aa:bf:28:7b:5d:f6:ba:3d:e3:69:17:2c:ad:7e:c4:
17:6e:a6:68:b1:51:36:1d:8d:c3:d1:f5:29:44:72:08:0e:75:
2b:59:ae:d7:51:6f:cb:b2:c9:ae:7f:2c:3b:15:ee:56:85:8c:
f2:4c:4e:25:16:98:ae:39:a0:64:23:ba:c0:17:86:e5:5d:7a:
ca:ce:fc:83:aa:cf:9c:82:88:02:90:4a:a0:8f:5b:82:a3:86:
c2:25:53:4e:7d:56:2a:71:36:ce:4b:46:e2:ad:93:3b:53:06:
db:29:98:0f:8d:c1:ee:47:6b:87:55:ae:fb:82:0b:56:73:7d:
fb:9f:35:04:43:48:76:fc:9b:64:39:cf:b1:44:c9:af:81:a6:
f2:18:c8:16:cf:8c:0a:48:8d:a2:c6:0a:87:c2:6f:03:be:b0:
ee:43:67:2b:68:12:f5:df:6d:75:50:68:2d:e7:e6:11:01:aa:
98:af:b0:be:f3:18:c0:e4:0a:e5:fe:4d:75:5c:94:b0:67:32:
0a:82:22:e6:c2:89:b7:39:6c:60:07:ab:e1:d4:6a:14:94:08:
08:40:9b:a1:3d:18:9c:0e:b2:4b:fa:96:ac:7b:7f:28:df:e7:
f5:98:67:a4:de:09:27:22:b1:99:42:9e:04:fb:bc:ad:af:42:
f0:66:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:16 2026 by rpki-client