This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/0A576F089A4C11EEBD557E12C4F9AE02.roa
File: 0A576F089A4C11EEBD557E12C4F9AE02.roa (raw, json)
Hash identifier: DEN1WpJkF7KEBPtyWLNA539o6YV36ND+eTTHH4uvqCU=
Subject key identifier: 25:24:EE:3E:DE:28:51:54:33:03:1A:10:6F:11:38:0E:AD:B1:AE:20
Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700
Certificate serial: 0189
Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/0A576F089A4C11EEBD557E12C4F9AE02.roa
Signing time: Fri 09 Jan 2026 03:23:41 +0000
ROA not before: Fri 09 Jan 2026 03:23:41 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152168
IP address blocks: 36.50.104.0/24 maxlen: 24
36.50.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl
rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700
Validity
Not Before: Jan 9 03:23:41 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=696074bd-3e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:e2:8f:a6:fc:6b:a9:90:01:ca:1d:0e:42:
c6:3e:bf:9c:20:fd:e8:19:ad:21:e2:b8:8f:dd:6b:
f3:a4:f7:96:8d:a3:b0:07:7d:3c:31:f2:90:14:24:
b8:2a:58:9b:c2:8a:3b:26:8a:6f:fa:13:2a:ea:14:
4c:69:85:58:7c:a8:9f:06:9e:8f:ca:c9:ff:70:10:
49:1e:c2:6d:3b:7c:bc:f3:3a:f5:0b:59:bd:78:5a:
50:79:a1:38:45:74:56:3c:4c:c6:ce:9e:84:6b:35:
e8:36:a3:55:2d:fc:0f:e3:b2:80:0b:9a:50:53:26:
5d:42:01:6f:23:63:26:ec:56:46:b6:d8:f3:c8:25:
a1:0b:ee:48:46:09:01:d6:f5:a3:ac:a6:b0:22:da:
f7:81:f5:57:df:b7:b7:97:c7:2f:5c:4d:ac:e3:7a:
f2:85:dd:50:6a:25:e1:dd:ff:6f:a5:4c:7a:21:0a:
9d:01:a5:8b:2d:67:d1:1b:c7:d0:da:91:db:a3:ec:
e7:cb:e6:1f:11:ee:1a:62:df:cc:41:ce:93:61:99:
10:a6:18:db:76:3d:99:a6:8c:32:7b:0f:b8:69:31:
9a:fe:04:4d:15:da:71:66:ce:70:bb:ec:27:36:44:
f2:22:89:49:40:ac:ed:b1:f5:90:83:58:83:73:63:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:24:EE:3E:DE:28:51:54:33:03:1A:10:6F:11:38:0E:AD:B1:AE:20
X509v3 Authority Key Identifier:
keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/0A576F089A4C11EEBD557E12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.104.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:41:dd:d1:d2:3f:a4:7b:c3:64:0a:70:9b:d1:3b:16:0d:17:
fb:c2:d7:e5:9a:1e:ef:a5:42:9c:fb:06:6b:9f:00:da:95:52:
10:c5:ab:69:dc:c3:0f:c2:e0:dd:98:90:8b:94:41:99:52:5a:
0b:d5:e2:95:0a:0f:93:c3:7c:ec:ec:7b:7e:77:1f:eb:e9:d4:
f7:1a:d3:1a:d2:8a:14:f1:09:25:71:c5:9c:0b:34:28:60:af:
7a:18:67:1f:5c:06:3d:01:66:fb:72:04:d4:2d:fd:09:13:02:
49:e9:e2:31:c9:f6:f0:ce:eb:f3:de:18:95:d8:61:85:a2:08:
89:04:34:b8:a0:46:32:00:d0:6d:dd:9d:53:e0:b5:da:fd:f0:
aa:4b:3d:ba:51:87:0d:46:c4:24:a3:48:2e:99:f5:6f:ac:73:
f5:74:b1:9c:9b:f3:28:2c:5b:70:08:3f:a2:00:c4:a7:53:71:
e3:41:6f:f8:a8:b2:44:d4:b1:e2:0d:84:ff:2d:8f:c0:12:98:
55:ac:d9:2b:b3:a6:c7:5b:65:60:f8:c7:4b:8f:4f:78:62:df:
1c:c1:6e:cb:59:af:ba:c0:f1:16:ac:50:d7:a4:c0:5e:12:55:
64:69:7a:5f:50:31:96:e0:fc:4a:d3:61:6b:c5:4e:f9:5c:bd:
d0:9e:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:44:07 2026 by rpki-client