This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B3B97C46510311EDA562C34DC4F9AE02.roa
File: B3B97C46510311EDA562C34DC4F9AE02.roa (raw, json)
Hash identifier: qzofNUlRYnUmE3DAbm+DwF+S6nTkElm21Xng43rE3AE=
Subject key identifier: 57:8E:5F:69:EC:80:1C:CC:CC:AA:E4:39:09:11:04:BD:8A:F5:3D:79
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0FB3
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B3B97C46510311EDA562C34DC4F9AE02.roa
Signing time: Wed 14 Jan 2026 18:15:14 +0000
ROA not before: Wed 14 Jan 2026 18:15:14 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 58460
IP address blocks: 202.42.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4019 (0xfb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jan 14 18:15:14 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6967dd32-c564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:35:73:fd:88:20:2b:75:fc:51:26:14:e6:
18:50:3a:07:de:6c:30:33:48:73:30:75:7c:3b:d7:
e8:e9:ac:56:a2:02:d2:07:0a:54:fd:4f:be:bb:90:
e8:c1:43:72:07:81:2f:92:06:6b:95:98:fc:82:da:
25:0d:81:0f:aa:dc:98:90:61:4c:61:ce:6a:8c:3f:
22:45:97:22:cf:a8:26:f2:bf:5f:66:fb:14:49:6c:
33:66:3a:24:0e:3c:2c:de:e8:f3:01:9b:92:ef:fe:
b5:b7:62:dc:a9:41:f6:63:09:7e:3d:e9:f7:bd:0d:
85:e4:47:7f:8e:35:9a:09:74:3c:58:29:bf:4d:bb:
0b:cf:b5:ee:15:4a:10:34:f2:42:e8:f9:59:6b:12:
7b:4f:9e:0f:79:b7:8e:d5:b8:4d:4b:90:da:0a:b5:
cc:71:fd:7a:d2:05:22:06:1d:d7:5f:2a:f0:de:e5:
81:df:24:ec:23:65:67:b0:c7:28:e8:78:be:df:1e:
75:6d:48:1a:f1:21:b0:70:bb:f1:9c:ea:48:70:66:
28:53:8d:52:9f:68:cb:c1:bc:e5:2d:39:b8:44:0a:
88:8c:ab:11:49:51:92:73:8a:d1:73:5d:42:dc:1d:
48:59:92:2d:91:6a:a3:5a:7d:b2:39:fa:35:8b:97:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:5F:69:EC:80:1C:CC:CC:AA:E4:39:09:11:04:BD:8A:F5:3D:79
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B3B97C46510311EDA562C34DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.42.184.0/22
Signature Algorithm: sha256WithRSAEncryption
07:d7:73:e5:a6:d8:3b:21:10:43:bd:e2:17:54:a8:1a:3a:4d:
b2:82:4e:cb:7d:bc:42:dd:a7:a2:67:06:f1:36:2a:2a:62:17:
55:fb:ae:0c:43:78:88:db:0e:1e:6d:d4:3b:35:94:5a:46:e7:
7f:dc:a9:4b:f8:73:91:f9:d8:1b:4e:68:91:e1:a5:5a:42:69:
cb:dd:c4:50:19:d4:c8:33:54:88:ae:da:f3:fb:78:7c:36:9a:
b0:fa:e7:65:ef:dd:72:7f:86:c0:9c:e4:77:53:96:a3:a5:39:
82:ff:97:33:bc:d1:4d:32:b7:58:3d:04:6a:e4:f0:97:fb:d9:
66:d5:d8:a6:3d:25:02:a7:3a:14:bf:d2:f7:77:f1:9b:08:4b:
43:f1:2f:c4:f5:cd:10:46:ea:d9:42:b2:cb:83:59:01:3c:07:
84:3a:e2:ac:d5:92:2e:27:b8:75:f1:c5:93:3a:41:2d:c0:a3:
bc:34:71:64:3d:39:62:2a:53:a1:c9:c8:1b:6a:84:cb:17:1a:
3f:ea:e0:e1:de:87:cc:a7:1a:22:ea:6d:2d:dd:d4:67:92:5d:
5f:95:74:f3:ae:1d:2a:99:c4:f6:69:bc:28:ee:71:02:cc:92:
7c:66:d3:62:f7:6a:0a:d2:34:a7:56:85:8f:3b:c0:4a:48:d1:
b3:82:fb:da
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB
RDNBRUZFQzgwHhcNMjYwMTE0MTgxNTE0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTY3ZGQzMi1jNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmys1c/2IICt1/FEmFOYYUDoH3mwwM0hzMHV8O9fo6axWogLSBwpU/U++u5Do
wUNyB4EvkgZrlZj8gtolDYEPqtyYkGFMYc5qjD8iRZciz6gm8r9fZvsUSWwzZjok
Djws3ujzAZuS7/61t2LcqUH2Ywl+Pen3vQ2F5Ed/jjWaCXQ8WCm/TbsLz7XuFUoQ
NPJC6PlZaxJ7T54PebeO1bhNS5DaCrXMcf160gUiBh3XXyrw3uWB3yTsI2VnsMco
6Hi+3x51bUga8SGwcLvxnOpIcGYoU41Sn2jLwbzlLTm4RAqIjKsRSVGSc4rRc11C
3B1IWZItkWqjWn2yOfo1i5dgvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFeOX2ns
gBzMzKrkOQkRBL2K9T15MB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4
Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvQjNCOTdDNDY1
MTAzMTFFREE1NjJDMzREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALKKrgwDQYJKoZIhvcNAQELBQADggEBAAfXc+Wm2DshEEO9
4hdUqBo6TbKCTst9vELdp6JnBvE2KipiF1X7rgxDeIjbDh5t1Ds1lFpG53/cqUv4
c5H52BtOaJHhpVpCacvdxFAZ1MgzVIiu2vP7eHw2mrD652Xv3XJ/hsCc5HdTlqOl
OYL/lzO80U0yt1g9BGrk8Jf72WbV2KY9JQKnOhS/0vd38ZsIS0PxL8T1zRBG6tlC
ssuDWQE8B4Q64qzVki4nuHXxxZM6QS3Ao7w0cWQ9OWIqU6HJyBtqhMsXGj/q4OHe
h8ynGiLqbS3d1GeSXV+VdPOuHSqZxPZpvCjucQLMknxm02L3agrSNKdWhY87wEpI
0bOC+9o=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:49 2026 by rpki-client