This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/19B0BAAE1CE611EBB543881CC4F9AE02.roa File: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (raw, json) Hash identifier: O4ifFOc81fDMLSySd7Uu6xiGT3cNLLcxIESYfvptWZs= Subject key identifier: 66:F0:58:33:AB:93:46:1F:35:F8:4D:23:CA:DE:CC:29:D1:33:C8:29 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 08F1 Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/19B0BAAE1CE611EBB543881CC4F9AE02.roa Signing time: Thu 22 Jan 2026 18:15:01 +0000 ROA not before: Thu 22 Jan 2026 18:15:01 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 14630 IP address blocks: 206.209.76.0/24 maxlen: 24 206.209.77.0/24 maxlen: 24 206.209.78.0/24 maxlen: 24 206.209.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Jan 22 18:15:01 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69726925-78f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:c8:c0:bc:05:11:2d:1f:f3:69:74:85:fc: ed:d2:f8:97:5a:d6:f5:09:5a:8e:97:d1:1f:45:83: 14:f6:26:e4:cb:55:af:3f:2d:c4:81:ad:45:2c:eb: f9:6d:e7:59:2b:49:05:1b:3c:58:3d:48:82:4a:64: a1:2b:9e:16:43:4e:f8:e8:ba:b0:54:ba:1c:5f:bc: dd:d6:c1:e9:15:a0:3f:c8:38:5b:24:12:de:a9:9e: b9:bd:59:73:86:b9:91:81:bd:2f:a0:05:d5:ca:63: d1:70:e0:fc:5a:93:89:1c:90:98:12:89:40:22:e7: 85:ce:54:c1:82:91:f0:43:21:ad:5c:04:a7:f5:55: 44:a9:0e:5f:39:3d:df:88:fb:73:79:50:be:30:fb: 88:94:59:cd:6a:72:9f:51:f2:7c:c0:ea:74:27:e2: 0f:3c:4e:1c:64:6d:6d:13:bf:c6:b8:a2:c9:02:a4: 14:b0:df:5b:1f:2e:0c:3f:40:2a:54:3f:1b:71:af: 6e:85:3b:49:81:a3:7d:5c:00:6d:8a:c2:d4:01:0b: 15:26:17:2c:6e:9e:cf:e1:fb:53:9e:42:d6:7d:91: c5:4b:07:6a:6f:52:8e:ac:c4:5a:40:1f:a0:b3:6a: e6:26:b4:38:84:6d:8e:79:3e:a7:1c:67:18:28:90: 4d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F0:58:33:AB:93:46:1F:35:F8:4D:23:CA:DE:CC:29:D1:33:C8:29 X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/19B0BAAE1CE611EBB543881CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 206.209.76.0/22 Signature Algorithm: sha256WithRSAEncryption 92:b1:34:3f:83:56:c5:8f:e7:27:b2:57:ee:eb:76:b8:c9:62: b6:50:8a:0a:06:23:9f:4e:06:99:4b:ff:d8:78:a5:cb:d9:8e: b5:f7:94:1e:d3:f9:70:58:bd:ca:82:10:df:f2:b3:3e:27:70: b7:dd:4c:de:b8:34:03:cd:3d:c3:09:d1:8a:0e:39:18:f7:79: a2:b8:77:bd:67:79:ac:09:b3:98:c5:24:fa:16:19:9c:5a:dd: 63:4d:e5:a2:7c:0f:fe:e5:20:e4:06:49:63:51:c6:f7:b0:dd: 27:64:04:46:57:fe:c5:f2:84:68:7f:f0:bb:81:6a:5e:41:e3: e6:ba:f9:78:f2:47:fb:7a:ba:22:2d:75:36:a7:5c:ba:c1:af: c9:98:2f:92:58:61:f1:b0:76:3e:f5:05:f1:3d:ce:6f:f9:a0: 0b:f5:ac:08:e2:7e:d2:f6:dc:a6:ac:ea:ca:b6:15:8c:28:56: d5:d5:2e:8b:56:51:fe:c6:31:a0:f3:86:f2:12:07:d7:b1:af: 81:cb:2f:74:f3:82:4f:13:4c:3f:60:15:b2:74:2e:72:10:34: cf:dc:95:36:aa:8f:41:a6:68:9a:d1:53:41:e2:13:16:91:c2: 89:ec:9e:e2:47:3d:d1:0e:b9:51:75:b1:78:ef:8f:b7:3f:83: 84:d3:d0:28 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjYwMTIyMTgxNTAxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTcyNjkyNS03OGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7zIwLwFES0f82l0hfzt0viXWtb1CVqOl9EfRYMU9ibky1WvPy3Ega1FLOv5 bedZK0kFGzxYPUiCSmShK54WQ0746LqwVLocX7zd1sHpFaA/yDhbJBLeqZ65vVlz hrmRgb0voAXVymPRcOD8WpOJHJCYEolAIueFzlTBgpHwQyGtXASn9VVEqQ5fOT3f iPtzeVC+MPuIlFnNanKfUfJ8wOp0J+IPPE4cZG1tE7/GuKLJAqQUsN9bHy4MP0Aq VD8bca9uhTtJgaN9XABtisLUAQsVJhcsbp7P4ftTnkLWfZHFSwdqb1KOrMRaQB+g s2rmJrQ4hG2OeT6nHGcYKJBNnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGbwWDOr k0YfNfhNI8rezCnRM8gpMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5QTYvRTRFREFDMThDQjFBMTFFQTg3Q0Q1NTQ0QzRGOUFFMDIvMTlCMEJBQUUx Q0U2MTFFQkI1NDM4ODFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALO0UwwDQYJKoZIhvcNAQELBQADggEBAJKxND+DVsWP5yey V+7rdrjJYrZQigoGI59OBplL/9h4pcvZjrX3lB7T+XBYvcqCEN/ysz4ncLfdTN64 NAPNPcMJ0YoOORj3eaK4d71neawJs5jFJPoWGZxa3WNN5aJ8D/7lIOQGSWNRxvew 3SdkBEZX/sXyhGh/8LuBal5B4+a6+XjyR/t6uiItdTanXLrBr8mYL5JYYfGwdj71 BfE9zm/5oAv1rAjiftL23Kas6sq2FYwoVtXVLotWUf7GMaDzhvISB9exr4HLL3Tz gk8TTD9gFbJ0LnIQNM/clTaqj0GmaJrRU0HiExaRwonsnuJHPdEOuVF1sXjvj7c/ g4TT0Cg= -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:36 2026 by rpki-client