This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa File: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (raw, json) Hash identifier: JeIvajlxzjQj5CfJDRwUxxGvNaX9uDFrrx5zQ5EFSS8= Subject key identifier: DF:DB:68:E0:A1:14:3E:D4:98:65:3D:09:78:F3:49:48:CB:F1:87:51 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: C5 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa Signing time: Thu 15 Jan 2026 06:24:07 +0000 ROA not before: Thu 15 Jan 2026 06:24:07 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 153478 IP address blocks: 161.248.90.0/23 maxlen: 23 161.248.90.0/24 maxlen: 24 161.248.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Validity Not Before: Jan 15 06:24:07 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69688807-1def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:37:b6:07:2e:5f:61:c5:ed:89:65:ed:a1: d2:e8:c4:81:58:8f:d9:26:91:d1:78:8a:1b:4b:86: b7:c4:18:ca:bb:f6:68:95:ed:d9:4f:10:51:52:ba: a0:6a:2c:b6:b4:ef:30:54:ee:bb:bf:6d:6e:07:43: 1b:80:ff:be:47:16:1f:ca:f4:ad:95:f4:42:d0:3c: 21:29:2d:07:70:9a:62:3c:59:c4:03:18:aa:06:e5: 8b:26:30:50:e5:61:86:bf:db:40:75:b7:1b:16:85: 5f:87:b3:df:a6:65:e3:a4:b8:70:db:38:7e:c3:48: 8f:21:5b:a5:b8:85:fa:b0:28:fe:63:49:f5:d3:f0: b8:82:26:3e:7a:b1:d6:0f:8c:5a:03:b7:b4:00:72: 01:4f:46:6b:03:ae:22:0b:f3:21:1c:1c:7d:af:ff: f2:5a:52:a4:cd:a0:00:f1:be:a8:5f:8e:72:21:e4: e0:c3:bf:3d:1d:33:59:6c:e1:2a:76:8a:d6:f9:9b: fa:bd:8e:23:f9:47:da:be:7f:92:17:cf:3e:f6:98: 12:2c:0c:99:3f:eb:c0:3c:5f:ac:5c:f7:b2:6a:d8: 41:56:73:47:e0:63:21:81:9f:e9:0f:73:c3:56:98: 75:24:fe:0b:ea:d6:33:99:7f:ac:86:2e:4d:44:5e: cd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DB:68:E0:A1:14:3E:D4:98:65:3D:09:78:F3:49:48:CB:F1:87:51 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.90.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:87:2a:f5:a5:73:21:7f:00:58:55:0d:8e:3f:0d:fa:a1:40: bf:4c:4e:30:41:ec:79:e7:91:b7:0f:97:9f:cf:9e:b7:b7:32: a6:29:9f:3b:d0:83:d6:2a:65:8d:ea:e5:3b:6b:4b:88:2b:7a: f9:4f:96:63:b8:81:7b:47:2b:8b:0d:7a:83:53:1c:4a:72:c5: ca:e7:89:d4:8d:f0:a1:8c:93:c7:33:3e:7b:d6:02:e0:7d:b7: 3b:c8:c7:38:bf:9b:5d:61:d9:64:fc:75:9c:c4:45:3e:78:3f: 59:d1:e9:ad:7d:43:19:92:dd:5d:88:7b:b0:70:1b:e3:2b:f5: 40:a4:73:ff:b5:81:df:b9:96:b2:ba:7f:7c:09:72:68:8a:e2: a9:23:89:bc:7b:b7:82:90:76:da:f3:05:9d:d0:5b:1b:dc:20: d7:6c:8c:24:0d:f9:e6:d8:9a:22:79:92:a6:06:57:17:39:e1: 8d:d7:b0:a3:0c:0e:19:bf:63:a8:f4:96:95:fe:a1:d5:a4:a9: df:f5:2b:9f:7e:56:67:e2:69:93:89:c4:aa:e6:77:71:e4:c8: f2:30:2b:94:eb:83:de:b2:2f:a6:9a:b6:fe:e4:1d:61:08:ed: 41:90:97:d7:e9:16:a7:8c:ef:2d:aa:04:80:13:28:41:33:fe: 82:59:cd:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTY4NTQxMTAvBgNVBAUTKDhCMzQ3MUI5MEI3QTVCQzc2Q0UzRkMwOUFDQUM4OTI4 RUI0RDgxNzkwHhcNMjYwMTE1MDYyNDA3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY4ODgwNy0xZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1S03tgcuX2HF7Yll7aHS6MSBWI/ZJpHReIobS4a3xBjKu/Zole3ZTxBRUrqg aiy2tO8wVO67v21uB0MbgP++RxYfyvStlfRC0DwhKS0HcJpiPFnEAxiqBuWLJjBQ 5WGGv9tAdbcbFoVfh7PfpmXjpLhw2zh+w0iPIVuluIX6sCj+Y0n10/C4giY+erHW D4xaA7e0AHIBT0ZrA64iC/MhHBx9r//yWlKkzaAA8b6oX45yIeTgw789HTNZbOEq dorW+Zv6vY4j+Ufavn+SF88+9pgSLAyZP+vAPF+sXPeyathBVnNH4GMhgZ/pD3PD Vph1JP4L6tYzmX+shi5NRF7NeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN/baOCh FD7UmGU9CXjzSUjL8YdRMB8GA1UdIwQYMBaAFIs0cbkLelvHbOP8CaysiSjrTYF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njg1NC9ENTNFMUI2RUNC MjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9pelJ4dVF0Nlc4ZHM0X3dKckt5SktPdE5n WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4NTQvRDUzRTFCNkVDQjIzMTFFRjlFODY2ODJFQzRGOUFFMDIvNUExMEM2QTJD QjI0MTFFRjhCM0RENzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGh+FowDQYJKoZIhvcNAQELBQADggEBAJ2HKvWlcyF/AFhV DY4/DfqhQL9MTjBB7HnnkbcPl5/Pnre3MqYpnzvQg9YqZY3q5TtrS4grevlPlmO4 gXtHK4sNeoNTHEpyxcrnidSN8KGMk8czPnvWAuB9tzvIxzi/m11h2WT8dZzERT54 P1nR6a19QxmS3V2Ie7BwG+Mr9UCkc/+1gd+5lrK6f3wJcmiK4qkjibx7t4KQdtrz BZ3QWxvcINdsjCQN+ebYmiJ5kqYGVxc54Y3XsKMMDhm/Y6j0lpX+odWkqd/1K59+ VmfiaZOJxKrmd3HkyPIwK5Trg96yL6aatv7kHWEI7UGQl9fpFqeM7y2qBIATKEEz /oJZzRU= -----END CERTIFICATE-----Generated at Sun Jan 18 04:34:43 2026 by rpki-client