This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3A5A84F8CB7111EBA9EEF440C4F9AE02.roa File: 3A5A84F8CB7111EBA9EEF440C4F9AE02.roa (raw, json) Hash identifier: gogrAGTq/ykGhVaNrMTatrWlz9qs3Xp20k79SBgW8QI= Subject key identifier: 7E:2E:84:7F:2A:A8:35:8C:9A:25:66:E3:5F:4D:79:BD:14:EA:86:A0 Certificate issuer: /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Certificate serial: 0C77 Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3A5A84F8CB7111EBA9EEF440C4F9AE02.roa Signing time: Thu 08 Jan 2026 18:15:32 +0000 ROA not before: Thu 08 Jan 2026 18:15:32 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 8739 IP address blocks: 116.251.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3191 (0xc77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Validity Not Before: Jan 8 18:15:32 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=695ff444-532d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:7b:c4:1b:de:31:26:d7:aa:32:66:91:68: c6:81:a6:18:9f:a9:81:30:e6:90:8d:61:1d:68:57: e1:5b:cd:7e:7e:cd:84:45:4c:99:f4:a8:71:80:07: b7:25:de:5c:29:91:11:2a:ad:b9:3c:69:cb:4e:42: 2d:07:38:1a:c9:ca:a7:bd:1a:73:b5:b5:50:a0:12: b7:b6:bb:b9:5a:9a:b3:4d:c1:a4:c9:13:62:d7:2a: c2:67:79:5d:b7:22:92:30:58:00:4d:2f:2b:b1:69: 11:ef:99:39:f5:0d:09:12:02:f8:3f:5e:f5:15:6b: 2b:5b:cc:63:58:47:63:29:c2:89:8d:da:98:45:72: fd:49:ef:71:c1:16:37:20:e1:8a:92:b1:74:50:94: 77:1a:c0:8c:1f:7e:f1:b3:b4:3a:9d:ad:32:e5:19: a1:2f:1a:8a:58:73:3a:04:1b:4d:d7:b4:44:a9:9a: df:2e:02:9a:9b:c8:2f:7e:ad:5a:8b:01:61:bd:07: c3:90:c0:29:b6:6b:9b:16:c6:d2:ec:37:6c:d1:d0: c0:02:a2:8f:6b:e9:1a:1f:77:78:85:ed:0e:ad:e8: 0a:24:15:40:9f:bb:96:dd:f7:4b:22:37:13:1a:96: 55:38:11:b1:6b:72:09:48:0d:85:ad:1f:87:7d:40: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2E:84:7F:2A:A8:35:8C:9A:25:66:E3:5F:4D:79:BD:14:EA:86:A0 X509v3 Authority Key Identifier: keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3A5A84F8CB7111EBA9EEF440C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.251.204.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:42:0f:18:4b:ac:f1:36:60:a6:1f:d2:8f:ad:44:78:e9:31: 2e:f0:78:e3:f7:b9:aa:11:be:a7:c7:31:4c:70:44:ba:c0:b0: 5e:37:78:16:ff:ac:93:19:1c:f2:ee:55:e0:5a:00:e8:55:f8: 36:ed:c9:e2:c2:72:48:fd:53:c3:21:a0:7d:a0:2c:d6:ec:bb: bd:d0:62:e4:ad:79:38:b7:2b:2a:51:69:58:94:68:bf:ed:5d: 5a:82:75:d8:ca:2b:5d:e5:63:1b:08:8a:b5:4f:87:05:d2:bd: 1f:58:8a:24:f6:b9:36:e6:ed:30:b5:5b:27:5f:ca:4c:58:13: 1a:5d:99:25:76:5d:ab:e2:95:22:ff:ec:b4:a6:8e:ad:05:f5: 24:aa:af:c8:a5:3b:8d:3a:6d:3d:07:19:f3:71:b2:8c:8c:1a: 5a:57:9e:29:d4:16:61:6e:22:bf:72:fd:43:1e:31:f5:e9:7b: 35:ca:8b:83:be:9f:a2:ac:f8:31:c4:22:de:23:60:62:b0:29: fa:dc:51:2c:33:88:44:41:e5:9c:2f:5d:fe:ce:66:43:5b:38: c0:86:cb:3d:dc:69:b7:49:f0:f0:e3:52:8d:9b:81:59:b1:5b: aa:a9:c5:58:5f:fe:df:5f:4b:75:0f:9c:5a:32:7c:cd:d2:1c: 38:bd:5a:0c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFDOEVENDREOUNC MjU1N0Y0M0YwHhcNMjYwMTA4MTgxNTMyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVmZjQ0NC01MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/N7xBveMSbXqjJmkWjGgaYYn6mBMOaQjWEdaFfhW81+fs2ERUyZ9KhxgAe3 Jd5cKZERKq25PGnLTkItBzgaycqnvRpztbVQoBK3tru5WpqzTcGkyRNi1yrCZ3ld tyKSMFgATS8rsWkR75k59Q0JEgL4P171FWsrW8xjWEdjKcKJjdqYRXL9Se9xwRY3 IOGKkrF0UJR3GsCMH37xs7Q6na0y5RmhLxqKWHM6BBtN17REqZrfLgKam8gvfq1a iwFhvQfDkMAptmubFsbS7Dds0dDAAqKPa+kaH3d4he0OregKJBVAn7uW3fdLIjcT GpZVOBGxa3IJSA2FrR+HfUDkmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFH4uhH8q qDWMmiVm419Neb0U6oagMB8GA1UdIwQYMBaAFN8lNITc5SxBN8vRyO1E2cslV/Q/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC9EMzEzMDY3NjE4 NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExFRTN5OUhJN1VUWnl5Vlg5 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5VTBoTnpsTEVFM3k5SEk3VVRaeXlWWDlEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg1NjgvRDMxMzA2NzYxODU3MTFFQTk4NjM0MTVFQzRGOUFFMDIvM0E1QTg0RjhD QjcxMTFFQkE5RUVGNDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ0+8wwDQYJKoZIhvcNAQELBQADggEBAHxCDxhLrPE2YKYf 0o+tRHjpMS7weOP3uaoRvqfHMUxwRLrAsF43eBb/rJMZHPLuVeBaAOhV+DbtyeLC ckj9U8MhoH2gLNbsu73QYuSteTi3KypRaViUaL/tXVqCddjKK13lYxsIirVPhwXS vR9YiiT2uTbm7TC1WydfykxYExpdmSV2XavilSL/7LSmjq0F9SSqr8ilO406bT0H GfNxsoyMGlpXninUFmFuIr9y/UMeMfXpezXKi4O+n6Ks+DHEIt4jYGKwKfrcUSwz iERB5ZwvXf7OZkNbOMCGyz3cabdJ8PDjUo2bgVmxW6qpxVhf/t9fS3UPnFoyfM3S HDi9Wgw= -----END CERTIFICATE-----Generated at Sun Jan 11 18:18:25 2026 by rpki-client