This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/56AAA41CE2BF11EFBAC5A282C4F9AE02.roa File: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (raw, json) Hash identifier: REd5n9ojLIIJvlk71OgJyuH2KKoqE6St2Z433Eqsv2Y= Subject key identifier: 58:0A:E4:C2:15:B5:E2:A2:64:87:1C:F5:01:18:BA:63:D7:8C:7D:0D Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0A14 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/56AAA41CE2BF11EFBAC5A282C4F9AE02.roa Signing time: Sun 04 Jan 2026 20:16:13 +0000 ROA not before: Sun 04 Jan 2026 20:16:13 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 17557 IP address blocks: 43.225.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2580 (0xa14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Jan 4 20:16:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=695aca8d-d330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:d3:41:8f:0e:e0:a8:05:24:22:08:00:10: 7c:4b:00:13:11:96:d4:06:bb:05:1a:c5:26:21:8c: a6:3f:e7:13:d4:04:0f:05:7e:1b:b4:32:b8:e7:08: 71:1b:e3:15:1a:0e:28:0f:e7:2d:08:63:dc:a7:fc: 5f:1e:ab:fe:95:3f:cd:a2:9e:84:71:90:2d:7b:00: 8f:b9:da:f0:fe:8a:31:95:e7:12:72:5a:a9:59:17: 32:fb:12:a7:00:47:c0:0a:52:fc:6c:3e:8c:ac:d1: 5e:58:2c:93:ed:63:c6:66:5b:e7:75:07:ae:11:4a: 98:d1:72:13:01:54:28:4e:64:a3:6a:07:68:1a:2c: 32:d1:a5:45:9f:0b:1a:45:79:47:eb:57:f1:b6:8f: 96:92:6f:e5:3b:2a:8a:36:2a:32:d2:2a:e9:0f:c5: 0a:5a:24:21:7c:b4:a9:e6:ad:57:53:39:c1:3d:d0: 1e:73:32:b3:64:9a:8f:33:fb:66:7b:c6:a1:3e:08: 34:10:10:ed:5b:b3:05:e8:9f:2c:ee:ac:d8:d1:f2: 9f:cb:ea:fb:a0:d6:78:ca:ea:9a:14:95:f5:05:c0: 92:11:08:84:f3:f6:d0:d4:1f:4f:a1:57:bc:66:bd: 79:03:b7:b6:27:41:f7:0d:b0:28:0f:07:48:7e:ee: 65:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0A:E4:C2:15:B5:E2:A2:64:87:1C:F5:01:18:BA:63:D7:8C:7D:0D X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/56AAA41CE2BF11EFBAC5A282C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.98.0/24 Signature Algorithm: sha256WithRSAEncryption a0:8b:87:77:07:a3:01:07:13:23:86:5e:dc:94:b6:32:f9:61: 33:68:94:bd:15:93:dd:e8:e1:af:b3:6b:96:dc:f5:b9:45:f8: 13:ae:85:db:43:ba:1c:53:ea:95:d1:80:4b:04:b5:bb:05:a9: 66:e3:b6:80:0e:3e:a1:df:49:8b:62:c0:d4:66:cd:bb:b2:c9: fa:ba:67:c2:95:9c:60:23:f0:9b:fe:20:e5:f5:bb:bf:c7:f1: 72:83:9e:9c:8f:1c:34:ce:61:be:80:b0:e0:c5:4d:2a:c9:aa: ed:25:32:c5:ff:00:cb:e1:84:32:4c:ec:03:49:f9:64:58:e2: a9:4e:70:41:23:37:c8:4c:86:c3:36:5d:42:f2:85:da:e6:06: 0b:5d:68:f7:59:a9:f8:6d:9c:34:2f:b5:07:f5:93:bf:56:ee: 5f:09:c5:2f:bf:46:43:5b:c3:b3:0f:ed:9c:d6:b5:50:eb:82: 78:6b:31:0a:b4:b5:3c:e9:d8:1f:41:a5:98:43:95:29:4e:db: 34:57:4b:bd:d8:e8:ac:ee:f1:0a:73:b9:e2:7c:20:13:96:7b: 03:2a:61:46:bf:dc:c6:c5:fe:3e:85:8f:0b:9b:aa:46:73:29: e7:81:84:f7:94:34:fa:2f:39:e8:f9:e7:a3:f2:22:ca:24:f0: 78:6c:50:7d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICChQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjYwMTA0MjAxNjEzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVhY2E4ZC1kMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdPTQY8O4KgFJCIIABB8SwATEZbUBrsFGsUmIYymP+cT1AQPBX4btDK45whx G+MVGg4oD+ctCGPcp/xfHqv+lT/Nop6EcZAtewCPudrw/ooxlecSclqpWRcy+xKn AEfAClL8bD6MrNFeWCyT7WPGZlvndQeuEUqY0XITAVQoTmSjagdoGiwy0aVFnwsa RXlH61fxto+Wkm/lOyqKNioy0irpD8UKWiQhfLSp5q1XUznBPdAeczKzZJqPM/tm e8ahPgg0EBDtW7MF6J8s7qzY0fKfy+r7oNZ4yuqaFJX1BcCSEQiE8/bQ1B9PoVe8 Zr15A7e2J0H3DbAoDwdIfu5lxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFgK5MIV teKiZIcc9QEYumPXjH0NMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFBMTQvRjdFODY0NDY4RkJDMTFFQUE4QzMxMjdCQzRGOUFFMDIvNTZBQUE0MUNF MkJGMTFFRkJBQzVBMjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr4WIwDQYJKoZIhvcNAQELBQADggEBAKCLh3cHowEHEyOG XtyUtjL5YTNolL0Vk93o4a+za5bc9blF+BOuhdtDuhxT6pXRgEsEtbsFqWbjtoAO PqHfSYtiwNRmzbuyyfq6Z8KVnGAj8Jv+IOX1u7/H8XKDnpyPHDTOYb6AsODFTSrJ qu0lMsX/AMvhhDJM7ANJ+WRY4qlOcEEjN8hMhsM2XULyhdrmBgtdaPdZqfhtnDQv tQf1k79W7l8JxS+/RkNbw7MP7ZzWtVDrgnhrMQq0tTzp2B9BpZhDlSlO2zRXS73Y 6Kzu8QpzueJ8IBOWewMqYUa/3MbF/j6FjwubqkZzKeeBhPeUNPovOej556PyIsok 8HhsUH0= -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:12 2026 by rpki-client