This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/C006CA2248B311EFB8A4C178C4F9AE02.roa File: C006CA2248B311EFB8A4C178C4F9AE02.roa (raw, json) Hash identifier: 1k+DPnjydS+lvRw/G8jeg7WbhFQjl+RH2V9DxNLBk8g= Subject key identifier: 8A:AF:54:A4:27:5E:47:27:A6:BE:3A:7E:BC:24:BE:D6:3D:B7:0A:43 Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Certificate serial: 012E Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/C006CA2248B311EFB8A4C178C4F9AE02.roa Signing time: Sat 17 Jan 2026 05:47:43 +0000 ROA not before: Sat 17 Jan 2026 05:47:43 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 36224 IP address blocks: 192.8.33.0/24 maxlen: 24 192.8.188.0/24 maxlen: 24 192.8.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Validity Not Before: Jan 17 05:47:43 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=696b227e-0ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:60:7d:9b:c3:db:1a:16:9d:1b:b4:d9:32:db: f9:31:79:fb:65:74:c9:a3:0c:94:ba:47:6c:34:64: 3d:d2:3b:dd:8f:1e:8d:4a:41:2f:6d:6e:8f:92:48: fb:95:c8:48:0b:7a:3e:ad:1c:9a:f4:21:f5:29:df: 97:ca:f4:1f:55:5a:8b:3f:d9:b6:23:8a:1b:d1:c3: 45:78:33:f1:b9:99:0a:87:96:30:64:9a:d4:5f:e5: 16:94:85:cd:88:30:e6:57:20:52:d9:1d:fd:15:1e: ef:4a:d0:a6:d5:24:59:d0:fe:38:86:c0:86:20:85: f0:80:df:27:61:b1:dd:3c:bd:f3:3d:ac:8a:c7:2f: 6e:20:1d:d3:67:46:60:ea:e5:36:7c:f1:9c:77:a8: ba:3a:be:c2:97:f7:10:53:10:f2:a9:8d:bb:2d:2f: 34:28:a7:34:68:7c:3c:f2:17:c4:f2:e9:13:11:dd: a6:4c:85:68:cc:31:8f:32:07:32:85:b2:03:8c:96: 86:65:98:b8:38:4b:9b:9e:c8:66:65:ed:f7:f1:2e: 71:93:f6:35:94:82:a8:80:be:88:9c:6d:4a:52:55: 84:3a:4f:b1:0e:07:87:ab:3b:4e:26:53:1b:5d:e4: b6:e7:b1:91:ca:bb:4d:7e:1b:c4:c9:ed:8f:34:d5: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AF:54:A4:27:5E:47:27:A6:BE:3A:7E:BC:24:BE:D6:3D:B7:0A:43 X509v3 Authority Key Identifier: keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/C006CA2248B311EFB8A4C178C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.8.33.0/24 192.8.188.0/24 192.8.238.0/24 Signature Algorithm: sha256WithRSAEncryption 63:31:63:33:9f:26:d8:05:11:d7:cc:f9:da:7e:6f:ff:16:f5: 46:d9:a5:06:e8:0a:96:52:28:e9:d3:96:8b:b2:32:75:d6:81: 12:26:1f:bc:bc:0b:03:1e:93:28:92:14:09:b9:6c:a9:ae:97: 32:70:47:ac:f2:07:14:55:ff:e3:a5:9a:35:2e:80:1b:82:2f: 1f:fb:e6:5a:2d:eb:20:ba:d1:61:74:4b:a6:7e:06:5b:ab:a7: d0:b4:0b:4c:39:87:ae:1e:6d:33:d1:17:ae:1c:67:81:97:a6: 15:df:74:7a:32:4c:0c:ba:d5:41:6c:18:55:c2:50:fb:d5:4f: e0:30:2f:ad:5c:3a:30:dc:9d:c8:ab:cb:b9:a4:d2:80:58:f9: dd:5d:1d:e5:40:71:4e:da:63:95:6e:85:2c:0c:a7:d2:2a:e1: 97:59:c5:2e:1c:86:80:2f:71:50:42:e2:ea:33:58:83:2e:69: 83:c8:46:47:9b:8d:73:d5:c5:f6:84:bd:b3:8d:66:4a:d5:6b: ca:bc:dc:db:1a:04:b1:da:9a:64:78:5f:ad:07:a3:fe:40:cb: d1:c7:b0:2f:8b:74:91:d7:8e:27:2d:75:35:02:07:a2:a1:02: 59:19:d8:b7:ce:57:ba:ac:80:64:3e:97:aa:2c:a3:ae:9a:d5: 1d:b3:3c:87 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw RjAzQkY3QzYwHhcNMjYwMTE3MDU0NzQzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZiMjI3ZS0wZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GB9m8PbGhadG7TZMtv5MXn7ZXTJowyUukdsNGQ90jvdjx6NSkEvbW6Pkkj7 lchIC3o+rRya9CH1Kd+XyvQfVVqLP9m2I4ob0cNFeDPxuZkKh5YwZJrUX+UWlIXN iDDmVyBS2R39FR7vStCm1SRZ0P44hsCGIIXwgN8nYbHdPL3zPayKxy9uIB3TZ0Zg 6uU2fPGcd6i6Or7Cl/cQUxDyqY27LS80KKc0aHw88hfE8ukTEd2mTIVozDGPMgcy hbIDjJaGZZi4OEubnshmZe338S5xk/Y1lIKogL6InG1KUlWEOk+xDgeHqztOJlMb XeS257GRyrtNfhvEye2PNNWFAwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIqvVKQn Xkcnpr46frwkvtY9twpDMB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5 OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc4MkYvNkQyMDc1RjY0MDcwMTFFRkJEQTlENjZGQzRGOUFFMDIvQzAwNkNBMjI0 OEIzMTFFRkI4QTRDMTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBADACCEDBADACLwDBADACO4wDQYJKoZIhvcNAQELBQADggEB AGMxYzOfJtgFEdfM+dp+b/8W9UbZpQboCpZSKOnTlouyMnXWgRImH7y8CwMekyiS FAm5bKmulzJwR6zyBxRV/+OlmjUugBuCLx/75lot6yC60WF0S6Z+Blurp9C0C0w5 h64ebTPRF64cZ4GXphXfdHoyTAy61UFsGFXCUPvVT+AwL61cOjDcnciry7mk0oBY +d1dHeVAcU7aY5VuhSwMp9Iq4ZdZxS4choAvcVBC4uozWIMuaYPIRkebjXPVxfaE vbONZkrVa8q83NsaBLHammR4X60Ho/5Ay9HHsC+LdJHXjictdTUCB6KhAlkZ2LfO V7qsgGQ+l6oso66a1R2zPIc= -----END CERTIFICATE-----Generated at Sun Jan 25 21:46:46 2026 by rpki-client