This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/E6F0F39214CE11EA9E740182C4F9AE02.roa
File: E6F0F39214CE11EA9E740182C4F9AE02.roa (raw, json)
Hash identifier: q0g05GgKYjCwgrzaPkpBrbZSSk5mmMAzTCuEcNwRvwI=
Subject key identifier: CD:5E:82:D0:57:97:D6:21:4B:EC:CC:17:0A:66:41:EB:C7:C9:8C:E2
Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
Certificate serial: 0DCD
Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/E6F0F39214CE11EA9E740182C4F9AE02.roa
Signing time: Wed 14 Jan 2026 18:14:54 +0000
ROA not before: Wed 14 Jan 2026 18:14:54 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 4637
IP address blocks: 134.159.0.0/16 maxlen: 24
192.154.16.0/24 maxlen: 24
192.154.24.0/23 maxlen: 23
192.154.24.0/24 maxlen: 24
192.154.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3533 (0xdcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
Validity
Not Before: Jan 14 18:14:54 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6967dd1e-34ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:84:4c:82:16:6f:f4:42:07:57:bf:86:e2:
b9:bc:56:6e:fb:6b:7a:cd:87:08:14:b1:8f:c8:ea:
09:e4:30:6e:7d:50:2e:a0:21:fd:0c:ab:04:2f:53:
8c:60:fc:b8:14:64:73:6c:39:f8:3f:88:3a:c0:b1:
d6:d5:9f:0c:2f:6b:ae:dd:52:0e:fd:10:b7:d7:49:
61:d2:53:61:a2:8c:e7:9d:ac:13:66:4b:eb:5c:21:
f9:09:e5:b9:c8:57:65:10:ec:3a:05:80:4c:00:46:
57:9d:56:39:f1:83:89:af:25:67:83:d7:b6:72:d9:
13:59:ce:83:b5:3c:d2:3f:8f:dd:bd:bc:38:85:dc:
ae:b1:bf:cc:40:2b:43:9c:09:44:1f:02:e5:9e:03:
7b:60:ac:0a:ee:c3:aa:ee:d4:ce:b1:50:ac:25:95:
a6:0a:28:74:ab:07:94:fa:0f:1d:40:63:09:a7:6f:
97:ab:de:8e:77:fb:3a:b8:f5:5a:f3:07:88:20:e8:
8c:36:bb:b2:52:c8:b6:e3:d2:f8:c1:c0:2b:88:59:
b4:23:f4:c9:8d:c0:fa:d5:64:b3:dc:fa:97:fd:86:
da:43:19:34:e0:25:c8:4d:bd:52:a5:76:92:48:83:
3a:12:33:19:92:f6:35:06:a6:db:03:46:29:4f:06:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:82:D0:57:97:D6:21:4B:EC:CC:17:0A:66:41:EB:C7:C9:8C:E2
X509v3 Authority Key Identifier:
keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/E6F0F39214CE11EA9E740182C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.159.0.0/16
192.154.16.0/24
192.154.24.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:20:98:ce:8d:b1:f8:cb:ce:fc:53:4a:ce:4c:c8:91:a2:c3:
90:df:5c:22:a9:a1:ba:5b:8b:b1:d1:46:76:97:e2:b0:f2:ba:
15:1f:71:f3:0c:79:46:f7:e3:7a:9e:ef:16:ad:de:c9:d4:c4:
63:9f:a7:99:c3:f1:a5:60:bc:0b:a9:09:9e:10:30:ab:93:b8:
11:66:85:62:90:77:69:ab:70:80:1f:ee:e0:a0:b5:9a:11:18:
e1:46:7f:b5:09:24:89:73:a1:01:19:8d:41:83:2f:df:62:22:
12:21:3d:c9:73:e8:cf:85:a5:27:64:2b:ce:83:f3:3f:56:3e:
63:bc:c1:0b:c1:ea:38:c9:e4:bb:b8:35:a3:c9:46:b6:96:65:
43:eb:17:3b:3f:ad:4b:71:8e:35:a7:db:77:ef:6c:5e:7a:ef:
47:9c:56:58:da:07:01:d4:ec:ca:67:be:4c:09:90:55:4a:2b:
a6:67:6a:3a:76:b1:7d:f1:da:31:05:73:08:f2:46:34:28:80:
e5:18:0e:28:1c:b2:f5:4f:36:5e:c5:28:19:e6:9f:b5:14:c8:
50:ce:91:2c:75:6c:76:11:24:26:9a:1a:c6:47:c2:58:9c:0b:
4a:a2:3a:06:d2:10:5c:4b:99:ca:9c:ef:fe:16:18:64:87:11:
b1:fc:b6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:19:38 2026 by rpki-client