This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/ECB0C56845B211EFBCC09A1AC4F9AE02.roa
File: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (raw, json)
Hash identifier: UpIAy5XzLGpRbUle85RmmJykvGWG7TnveQfe0j0IKLQ=
Subject key identifier: 9C:71:CF:F8:B4:8D:AE:74:94:F0:4C:D1:82:40:63:32:AB:1A:C7:A0
Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Certificate serial: 011A
Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/ECB0C56845B211EFBCC09A1AC4F9AE02.roa
Signing time: Tue 13 Jan 2026 04:23:35 +0000
ROA not before: Tue 13 Jan 2026 04:23:35 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152317
IP address blocks: 157.10.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Validity
Not Before: Jan 13 04:23:35 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6965c8c7-97aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:dd:7c:76:55:a0:73:a9:6a:4c:98:17:bf:
5e:c8:94:fe:90:c6:72:7d:62:cf:db:0d:07:dc:fd:
33:a3:d8:3e:d6:9a:97:d1:1f:22:b2:f7:14:99:c5:
fc:c9:b5:5a:a3:f9:d6:32:69:d9:20:9b:a0:83:3b:
c6:56:da:b5:a2:97:fa:1b:c8:42:97:be:de:74:16:
66:07:53:93:3c:3f:95:08:44:cc:47:d5:f0:18:d4:
d6:cb:9a:7f:de:fc:45:3b:b8:43:08:db:a9:fc:05:
cb:4f:bc:d0:d5:d2:23:aa:73:61:fd:14:3f:eb:9a:
b8:ae:1a:c9:67:ab:1b:3d:15:27:85:3f:d9:f5:ad:
44:6f:26:6d:67:3b:5e:e8:22:1b:a3:10:5d:6e:26:
20:75:52:a0:51:3e:02:f7:aa:ea:96:f9:f7:b2:50:
5a:88:72:7e:b3:d7:da:28:18:4e:25:f5:ee:c8:16:
37:eb:c0:86:ca:ab:7a:17:00:59:18:b8:13:05:11:
38:40:b1:39:03:0c:f7:a8:f0:67:1c:60:17:cb:50:
00:b0:79:92:90:f4:b8:6a:56:6d:10:8b:92:57:0c:
0c:7e:6c:7b:fe:39:74:ae:19:6e:04:ac:c9:71:c7:
c3:ee:52:2f:d6:40:12:1c:5e:0e:5b:24:28:77:55:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:71:CF:F8:B4:8D:AE:74:94:F0:4C:D1:82:40:63:32:AB:1A:C7:A0
X509v3 Authority Key Identifier:
keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/ECB0C56845B211EFBCC09A1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.128.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:eb:e3:72:06:bb:68:26:8f:21:af:af:e3:c6:c8:98:02:4d:
84:bb:12:8d:e5:9f:dd:d2:a3:ad:a3:64:ac:92:19:11:f1:d1:
e8:89:b1:8b:c4:e9:46:10:35:c3:2e:ba:0d:8a:a5:38:6b:99:
32:de:42:f3:c7:a7:77:6e:15:18:d1:7c:9f:bb:e0:a3:a4:cb:
32:eb:b7:2c:f4:de:57:6d:ea:30:0b:61:e1:88:82:3d:71:46:
ff:70:1b:e3:32:f2:88:bc:cc:e6:db:a6:ec:c4:2f:45:b6:4f:
27:f5:6b:22:6e:1f:18:b5:f9:fa:fa:7a:db:3e:64:6f:8a:57:
3d:6b:83:40:a2:80:de:02:93:4a:ae:c7:ba:cc:fb:12:17:f8:
7b:2a:0a:9c:cf:31:22:39:59:76:3f:7e:3d:b8:43:75:2c:cb:
a0:03:56:66:ba:3a:84:f4:ba:93:0e:4c:c8:c9:34:83:38:cc:
93:09:ad:6f:6a:e8:63:f4:03:94:ef:27:c1:98:90:12:66:58:
bd:f8:fe:f7:ff:31:af:61:eb:59:8e:bb:72:9c:78:3b:1e:12:
5e:d2:6e:97:10:71:17:e3:2c:26:e5:4e:00:58:b8:10:a2:f2:
83:cd:f1:9d:7d:6a:93:d5:10:e3:05:2d:7c:47:96:fd:da:8a:
b5:09:53:99
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5
OEQ0RUJEMUQwHhcNMjYwMTEzMDQyMzM1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTY1YzhjNy05N2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs2XdfHZVoHOpakyYF79eyJT+kMZyfWLP2w0H3P0zo9g+1pqX0R8isvcUmcX8
ybVao/nWMmnZIJuggzvGVtq1opf6G8hCl77edBZmB1OTPD+VCETMR9XwGNTWy5p/
3vxFO7hDCNup/AXLT7zQ1dIjqnNh/RQ/65q4rhrJZ6sbPRUnhT/Z9a1EbyZtZzte
6CIboxBdbiYgdVKgUT4C96rqlvn3slBaiHJ+s9faKBhOJfXuyBY368CGyqt6FwBZ
GLgTBRE4QLE5Awz3qPBnHGAXy1AAsHmSkPS4alZtEIuSVwwMfmx7/jl0rhluBKzJ
ccfD7lIv1kASHF4OWyQod1VDVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJxxz/i0
ja50lPBM0YJAYzKrGsegMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1
QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REFDQTcvNTE3RTZFNEM0NUIyMTFFRkE1REY2RDE5QzRGOUFFMDIvRUNCMEM1Njg0
NUIyMTFFRkJDQzA5QTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGdCoAwDQYJKoZIhvcNAQELBQADggEBAA7r43IGu2gmjyGv
r+PGyJgCTYS7Eo3ln93So62jZKySGRHx0eiJsYvE6UYQNcMuug2KpThrmTLeQvPH
p3duFRjRfJ+74KOkyzLrtyz03ldt6jALYeGIgj1xRv9wG+My8oi8zObbpuzEL0W2
Tyf1ayJuHxi1+fr6ets+ZG+KVz1rg0CigN4Ck0qux7rM+xIX+HsqCpzPMSI5WXY/
fj24Q3Usy6ADVma6OoT0upMOTMjJNIM4zJMJrW9q6GP0A5TvJ8GYkBJmWL34/vf/
Ma9h61mOu3KceDseEl7SbpcQcRfjLCblTgBYuBCi8oPN8Z19apPVEOMFLXxHlv3a
irUJU5k=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:09:11 2026 by rpki-client