This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/2E3A7CDCECB411F0B6919987656F56BC.roa
File: 2E3A7CDCECB411F0B6919987656F56BC.roa (raw, json)
Hash identifier: fjxN8wbj/Fp3lEhazGggKd04goFlzE+40eucHtcjVaY=
Subject key identifier: 94:26:0D:6F:21:D5:C2:A9:9D:77:23:49:B2:11:F7:D5:B2:CD:A0:F8
Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial: 11D1
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/2E3A7CDCECB411F0B6919987656F56BC.roa
Signing time: Thu 08 Jan 2026 17:05:06 +0000
ROA not before: Thu 08 Jan 2026 17:05:06 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 153038
IP address blocks: 220.152.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4561 (0x11d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Validity
Not Before: Jan 8 17:05:06 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=695fe3c2-9046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:f7:73:5e:64:79:0f:1d:3e:a6:01:7c:f1:
22:3f:14:e1:0d:10:20:d5:a2:db:b4:26:91:91:78:
b9:18:16:8b:43:8e:21:40:81:b9:c8:3c:15:ed:7a:
05:ea:02:14:2b:dc:0b:02:95:f9:ba:8c:db:57:fc:
4e:52:af:db:3a:f9:c2:5d:e2:a5:77:f3:99:37:ef:
4e:a7:80:1d:71:c0:1c:e4:e7:c8:1e:18:44:cb:9c:
b1:0c:f1:fc:a1:26:8b:f8:80:fc:97:3a:87:76:27:
74:c0:39:23:37:96:be:c2:3b:76:c3:84:74:03:08:
fb:28:cb:3c:9d:4f:33:3c:2e:6b:60:c6:63:27:5d:
0f:f2:f8:3f:31:40:8d:32:c1:39:8c:35:11:3e:40:
c1:c1:84:55:6a:eb:aa:58:9b:1e:20:ae:94:25:72:
c1:8e:38:e9:98:0e:ca:96:f1:a2:64:07:b3:0e:8c:
cb:fa:1e:09:f9:13:52:7a:6d:18:0e:bc:58:de:01:
27:1f:ef:1c:11:d5:ae:e2:29:dd:5c:8a:6e:2d:5a:
22:83:8c:9b:b3:4f:53:93:e6:ae:85:55:78:c8:73:
07:f4:7c:ca:c5:cd:61:14:14:9b:1b:31:d3:51:aa:
68:a0:e1:ce:df:fd:82:98:1a:4e:6f:0b:55:d6:2f:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:26:0D:6F:21:D5:C2:A9:9D:77:23:49:B2:11:F7:D5:B2:CD:A0:F8
X509v3 Authority Key Identifier:
keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/2E3A7CDCECB411F0B6919987656F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.152.113.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d1:7c:cb:f7:a1:59:34:af:54:bd:6d:f7:62:26:9b:17:7a:
fc:f6:75:e2:fa:b3:9b:db:87:f6:79:9f:ca:21:0c:9a:25:f4:
af:2f:03:e4:f3:ac:7b:46:62:bd:fe:d1:08:62:c8:e5:c8:48:
db:84:4e:8b:da:0c:f5:6a:57:02:9a:e7:03:a9:6e:ce:c9:60:
91:1e:87:57:0e:59:29:e1:15:b9:9e:44:2c:80:30:0d:e2:87:
95:74:55:bc:96:c8:ce:ca:02:13:90:05:f9:f4:d9:92:3e:36:
82:1b:3a:04:67:89:69:89:a8:33:7e:3f:52:5c:fa:94:fe:d1:
9e:f8:a7:08:ab:be:89:06:97:11:af:b1:d6:93:1a:e6:43:33:
c4:1e:d9:b2:3f:d5:c1:90:d5:d0:40:0a:2a:e6:c9:08:23:fb:
a6:e8:d9:e6:31:ee:c9:be:2e:9d:a7:03:31:67:2d:fe:c1:e6:
7a:05:13:42:c7:65:d9:dc:84:a8:ec:a2:12:6e:91:35:bd:b8:
b7:e6:90:3a:9a:c4:86:b2:4f:09:9e:16:f6:47:e1:b4:6b:37:
ac:f9:59:9a:e7:14:01:c0:c8:5b:80:8e:b9:b8:7d:20:f1:8f:
53:17:99:cb:5a:1d:68:05:24:27:3b:34:c6:06:c3:b6:68:94:
d0:cf:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:39 2026 by rpki-client