This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa File: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (raw, json) Hash identifier: /vXiQXlJ2XjoaoqlCYxK4Jmfq/xVFyS/orb3vso2mww= Subject key identifier: C6:F6:E9:87:EE:08:21:E6:11:DE:69:89:20:C6:D0:5C:B0:AA:46:26 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0FA4 Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa Signing time: Wed 14 Jan 2026 18:14:59 +0000 ROA not before: Wed 14 Jan 2026 18:14:59 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 151326 IP address blocks: 220.232.135.0/24 maxlen: 24 220.232.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4004 (0xfa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Jan 14 18:14:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6967dd23-7961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:38:d2:43:6e:a9:e9:16:13:7c:2c:d2:8d: 06:5e:83:0e:2e:6a:2b:f1:a4:27:11:54:63:c2:15: d7:a4:31:35:3a:4f:8b:ca:ed:ed:fe:e3:fb:48:99: 23:f5:7b:5c:37:70:ba:63:ef:4d:b4:77:8f:99:fd: ae:47:7d:a1:19:4c:5d:44:97:5e:ee:c2:a1:ea:2c: 7f:b1:8a:c9:2a:f1:32:cf:c4:d3:55:5d:39:2f:40: 1e:cb:bb:31:04:12:b2:3a:4b:f1:9f:cb:0d:73:2d: f7:d3:1c:e2:80:6e:aa:2b:05:70:fe:9d:3d:b0:6a: f8:d4:92:53:30:54:eb:2b:cf:ab:34:16:9f:2d:d5: 6f:76:3f:61:e2:0a:c0:25:52:42:59:3f:dc:15:d9: e4:dc:3f:b0:78:f3:aa:30:0d:ae:15:1e:0a:77:ae: 62:78:16:9e:c1:1c:90:44:1b:01:a3:21:69:72:5d: 2d:f5:bc:9b:a0:df:85:9e:83:0b:7d:fa:0c:73:42: e1:15:9b:2f:07:f5:eb:8d:aa:1b:42:78:18:64:bc: 5d:fb:09:c4:93:41:e2:27:e3:b4:5f:14:0a:89:b8: 34:68:8d:4c:23:44:2c:8f:f2:b4:fc:74:ef:26:35: 2f:fb:ad:0e:3c:c3:ce:a9:3f:d4:c8:34:86:d7:00: 58:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F6:E9:87:EE:08:21:E6:11:DE:69:89:20:C6:D0:5C:B0:AA:46:26 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.232.135.0/24 220.232.158.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:5d:75:1d:bd:f9:60:19:6b:08:b9:e2:31:78:a9:cc:66:77: bd:ac:34:95:a6:d1:23:2f:62:f8:0d:c4:6b:76:de:ba:46:82: 82:1f:c4:05:a4:00:65:56:ad:f5:78:e3:da:f3:bc:06:ff:cc: a4:e9:ec:bf:bc:b1:37:1d:72:d5:d2:ef:7a:e1:bd:b7:1d:70: 2e:62:dd:02:6f:7a:d6:ad:af:31:e3:1f:8a:3e:23:0a:22:33: 34:25:21:27:31:b9:32:40:b3:0a:5f:ef:54:c0:14:4e:9b:b2: 35:e8:7c:a9:61:81:ae:8c:f0:c7:d9:87:ce:9c:84:d6:29:00: ba:ed:f1:04:c3:dc:7d:be:03:14:eb:67:d6:8d:8e:86:c9:1c: 9e:1d:1d:e3:bd:3d:7f:47:f0:ca:33:84:90:b0:8c:af:fa:78: de:f9:6a:4c:35:69:c9:62:9b:a4:cd:a1:e5:2e:bd:ea:6f:a9: ea:7f:47:73:9d:d5:33:60:e2:d7:0a:56:80:23:a5:5a:9e:ef: 0b:5e:e1:65:95:c7:9a:78:8f:89:52:55:2d:3d:04:dc:c3:b0: e9:e6:6c:80:aa:ea:c8:75:9b:d6:79:17:b0:13:ea:f8:60:74: 6b:53:10:f7:1d:ac:0c:1f:a8:a6:9c:a4:8e:44:16:e3:ae:9a: 69:10:5a:f5 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICD6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjYwMTE0MTgxNDU5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY3ZGQyMy03OTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiE40kNuqekWE3ws0o0GXoMOLmor8aQnEVRjwhXXpDE1Ok+Lyu3t/uP7SJkj 9XtcN3C6Y+9NtHePmf2uR32hGUxdRJde7sKh6ix/sYrJKvEyz8TTVV05L0Aey7sx BBKyOkvxn8sNcy330xzigG6qKwVw/p09sGr41JJTMFTrK8+rNBafLdVvdj9h4grA JVJCWT/cFdnk3D+wePOqMA2uFR4Kd65ieBaewRyQRBsBoyFpcl0t9byboN+FnoML ffoMc0LhFZsvB/XrjaobQngYZLxd+wnEk0HiJ+O0XxQKibg0aI1MI0Qsj/K0/HTv JjUv+60OPMPOqT/UyDSG1wBYowIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMb26Yfu CCHmEd5piSDG0FywqkYmMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvOEM5RkZFNEMw RjJGMTFFRTg1QzI2QzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADc6IcDBADc6J4wDQYJKoZIhvcNAQELBQADggEBAE5ddR29 +WAZawi54jF4qcxmd72sNJWm0SMvYvgNxGt23rpGgoIfxAWkAGVWrfV449rzvAb/ zKTp7L+8sTcdctXS73rhvbcdcC5i3QJvetatrzHjH4o+IwoiMzQlIScxuTJAswpf 71TAFE6bsjXofKlhga6M8MfZh86chNYpALrt8QTD3H2+AxTrZ9aNjobJHJ4dHeO9 PX9H8MozhJCwjK/6eN75akw1aclim6TNoeUuvepvqep/R3Od1TNg4tcKVoAjpVqe 7wte4WWVx5p4j4lSVS09BNzDsOnmbICq6sh1m9Z5F7AT6vhgdGtTEPcdrAwfqKac pI5EFuOummkQWvU= -----END CERTIFICATE-----Generated at Sun Jan 25 10:35:10 2026 by rpki-client