This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/F250438EF44011F0A1A516A45F6F56BC.roa
File: F250438EF44011F0A1A516A45F6F56BC.roa (raw, json)
Hash identifier: kYfvwV3/PkXx2lWNOPFwdPOru/jK+Q1xT3Faj4v8sGE=
Subject key identifier: B7:64:4E:95:40:4E:E7:A3:02:05:6C:E2:2D:BB:7E:9E:1D:41:7A:EE
Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial: 0211
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/F250438EF44011F0A1A516A45F6F56BC.roa
Signing time: Sun 18 Jan 2026 07:40:23 +0000
ROA not before: Sun 18 Jan 2026 07:40:23 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 401783
IP address blocks: 213.139.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 01:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Validity
Not Before: Jan 18 07:40:23 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=696c8e67-f141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:87:d9:b8:c5:eb:87:34:df:04:0e:5e:df:
cc:df:f7:9d:50:40:8c:02:0a:49:d8:bf:dc:33:69:
a6:04:1b:84:0a:37:88:6d:56:ea:94:cb:0b:5b:53:
d9:9f:96:eb:73:78:77:00:cb:21:06:13:d9:e3:30:
2f:f5:61:e0:00:49:d3:ba:15:04:61:88:8a:d0:c3:
19:b6:20:f1:94:45:9b:eb:fb:b7:34:b7:f1:60:1d:
2b:71:11:22:33:1e:c7:d4:1f:19:65:84:ea:47:d4:
81:40:1d:e1:31:a0:c5:85:29:38:4b:d4:1b:0a:c7:
f8:5c:f7:52:1d:ce:85:7b:cb:98:47:9e:63:94:7d:
d2:e9:71:62:fd:47:8e:93:b3:c4:01:30:a9:6a:cd:
87:23:8c:0e:f6:ef:3e:94:7c:b5:80:d5:b8:5c:c5:
75:4b:9d:11:5b:ba:11:0c:b6:ec:1c:f0:c5:39:c9:
5b:c0:fc:f6:2f:5d:1e:22:a4:85:c8:82:77:ff:ce:
02:8f:79:ee:6d:0a:b7:32:e5:ab:a6:f9:1c:86:a7:
30:37:ef:4b:76:ef:90:26:86:6b:be:8a:f2:74:81:
42:a5:a5:45:60:a3:b0:e1:f9:ea:8d:d5:64:7f:51:
20:52:24:01:c4:71:60:98:e6:40:ef:e0:a4:c4:06:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:64:4E:95:40:4E:E7:A3:02:05:6C:E2:2D:BB:7E:9E:1D:41:7A:EE
X509v3 Authority Key Identifier:
keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/F250438EF44011F0A1A516A45F6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
213.139.234.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:3c:0e:55:4d:2c:64:f0:66:b4:01:c0:32:7e:eb:dc:2d:80:
40:7d:c8:91:e7:4e:94:5d:13:c6:67:03:a1:0e:e4:ff:88:db:
21:95:54:31:76:8c:53:1b:f1:9e:5c:8e:9c:0d:bf:3c:3d:87:
43:d6:fd:e6:88:17:3b:20:6b:92:b5:c0:89:ac:79:62:46:f2:
93:55:9d:ce:bb:a7:94:0b:44:89:0a:62:14:7a:9a:09:66:3e:
06:c8:f5:70:8b:36:1b:68:6c:b3:18:3d:b1:4e:9b:1c:ac:cb:
9a:75:58:6b:a0:e7:57:e3:9a:11:c0:2a:34:57:dc:a2:ec:55:
d8:a6:43:17:5d:4f:4a:50:7f:5f:42:c7:99:5b:a7:32:64:6b:
71:9a:36:cb:80:84:53:f5:5d:e9:b8:cc:23:46:3e:7a:9a:0c:
df:03:8d:c7:dd:0e:d1:c0:9b:0c:e9:26:83:91:ed:ef:6b:1d:
52:6f:a8:3e:34:f0:5f:0c:01:ee:3f:32:9d:13:f2:d6:26:23:
57:eb:3b:68:b3:b4:a6:11:be:94:8a:d2:84:26:a9:59:fd:f3:
7b:62:18:4f:b8:04:75:25:b8:a3:4c:1f:f0:14:89:b4:a1:12:
06:9b:93:be:57:c5:ca:47:c7:ed:f8:25:a7:bd:c6:e5:14:83:
d5:45:dd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:26:17 2026 by rpki-client