This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3686C7DAEF6411F0BA166417586F56BC.roa
File: 3686C7DAEF6411F0BA166417586F56BC.roa (raw, json)
Hash identifier: MKoeX54VlAz0cE2n6jFMJrEFXH3dCPaRYGQTeHC+EUU=
Subject key identifier: 66:39:E9:D3:C8:85:8B:B8:3F:20:EC:04:80:4A:15:23:E6:51:A6:4E
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0760
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3686C7DAEF6411F0BA166417586F56BC.roa
Signing time: Mon 12 Jan 2026 03:10:14 +0000
ROA not before: Mon 12 Jan 2026 03:10:14 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150323
IP address blocks: 138.252.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 14:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Jan 12 03:10:14 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69646616-773e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:42:d8:5f:4a:7a:20:6c:c5:c6:4f:ff:02:
c5:11:9f:3a:4d:8d:c1:9b:39:14:89:1e:69:9a:9d:
e8:dd:79:59:11:36:77:7c:26:74:21:3d:b6:be:d8:
5e:9a:01:e3:b6:33:e9:76:b7:27:05:e3:7d:26:b8:
ee:c5:54:76:2a:fb:75:a2:ed:4c:e6:3b:e0:e9:6a:
a0:0b:3e:98:dc:57:d7:c8:76:ea:c8:76:49:75:53:
bf:c2:d9:d0:b6:9e:ef:0c:49:9d:ea:13:18:83:8a:
d5:5b:3f:35:be:71:28:a5:d5:6d:4d:f7:74:a9:cd:
e8:ab:ab:3d:6b:ca:5e:7a:2c:fa:66:5e:bb:31:08:
3f:12:d3:ed:a0:c0:2e:1b:b0:f3:5e:fb:53:94:d3:
48:dd:60:61:c9:8c:1e:89:fe:1e:43:c0:45:a0:7e:
f4:29:a9:9a:7c:d5:1e:c8:16:34:8e:d2:7f:31:f8:
d6:0d:b8:dc:c7:35:81:62:ee:84:3c:eb:d2:9e:1a:
3f:b8:05:20:be:1b:79:a8:ec:dc:08:cf:02:8b:8f:
c6:01:79:6a:11:e7:62:fe:86:34:2e:71:5a:6b:04:
11:55:6c:8c:f3:f5:c2:d7:1a:a7:a6:d7:51:f2:62:
09:b3:49:be:fb:a0:37:1f:32:8d:07:de:c8:f9:7d:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:39:E9:D3:C8:85:8B:B8:3F:20:EC:04:80:4A:15:23:E6:51:A6:4E
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3686C7DAEF6411F0BA166417586F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.218.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:e7:a1:6d:6e:c6:de:d8:c0:8f:ca:cf:62:49:27:3f:96:93:
5c:19:c4:8b:80:a1:99:a8:75:c9:43:de:e8:a0:74:6f:89:ab:
d5:6a:83:00:c5:56:4e:f4:4e:21:a4:63:46:51:0e:74:fa:ea:
ab:62:91:92:10:fb:1d:18:c6:b9:bc:b2:aa:9c:2e:8a:0e:a5:
18:3b:c8:8b:7b:c1:98:a1:73:cf:f7:08:58:2a:3e:c5:93:5c:
57:f4:57:74:02:0d:e0:6e:35:b1:8c:52:c8:c1:9f:cd:35:28:
1d:85:bd:79:36:62:5a:f5:03:74:6a:e5:28:c3:97:9e:86:2d:
1a:f1:5a:2a:d8:3f:10:fe:e2:d5:25:04:46:ce:ed:fc:42:86:
97:2e:7f:35:b6:cb:83:64:b2:0d:d2:db:5f:e3:70:89:ff:c1:
e2:3b:01:7e:c9:d1:c3:4a:19:01:b6:b5:30:c9:c4:aa:30:12:
ad:ff:4e:55:36:89:bf:db:47:aa:28:6d:90:44:aa:8a:01:06:
d9:ef:33:ce:ba:7c:59:cc:46:0b:00:99:c7:a6:77:16:83:6a:
18:99:f9:ba:7b:77:c8:af:63:ad:79:2d:69:77:ac:dc:82:f0:
59:58:4c:39:c3:ee:ad:dd:73:4a:41:03:69:1e:c8:f7:20:ae:
27:bb:41:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:32:11 2026 by rpki-client