This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa
File: 77E7AC0E492611EDAF439D83C4F9AE02.roa (raw, json)
Hash identifier: F4ID8xOHm4fTVUqcFnm0wrYmbvYuu0YXpihGFNmZfno=
Subject key identifier: 95:FA:1E:D0:07:2E:62:12:7F:84:70:B7:42:9E:43:B0:8B:CA:24:0A
Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Certificate serial: 02FC
Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa
Signing time: Sat 31 Jan 2026 01:21:21 +0000
ROA not before: Sat 31 Jan 2026 01:21:21 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 136140
IP address blocks: 140.168.240.0/24 maxlen: 24
140.168.241.0/24 maxlen: 24
140.168.242.0/24 maxlen: 24
140.168.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Feb 2026 01:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764 (0x2fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Validity
Not Before: Jan 31 01:21:21 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=697d5911-c19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:34:4f:99:08:a3:89:ae:71:8c:d8:6a:e5:
d6:b9:be:2d:a1:a9:30:f3:0f:e5:c6:14:37:34:48:
d2:d5:6f:5d:98:0a:c5:92:e0:6c:ab:3f:d8:aa:6e:
bc:c5:11:74:45:5a:6f:ca:69:50:71:01:9d:e2:ec:
64:d1:45:f9:60:dc:1a:ee:57:28:e9:05:86:56:6a:
7c:4a:bb:b6:5c:98:4b:3e:62:de:e0:f1:8d:03:43:
98:74:c8:98:96:c5:17:ef:7e:fc:6d:e7:89:97:fa:
53:50:4a:07:f3:63:48:fe:3c:9b:31:60:8b:e4:a2:
33:48:04:b3:bf:d8:87:30:fd:30:5e:ee:8a:e5:98:
58:01:1c:cb:4c:82:1a:c7:d3:5b:3a:64:b4:12:db:
eb:98:94:ce:c4:06:90:92:a1:e7:39:17:e2:ed:b6:
12:85:9e:70:b9:30:4d:37:b2:ca:c2:3a:56:94:3b:
25:b9:aa:a4:9c:7b:50:88:64:3e:d1:b7:8f:49:da:
7d:e3:ee:86:aa:43:6d:3b:33:3b:63:51:c6:01:fb:
cd:02:05:a4:41:d4:a4:b1:45:d5:45:d9:72:75:c8:
5e:3b:25:3c:0f:f5:63:14:16:b5:bb:b8:d2:fc:ae:
63:c7:54:ae:2b:da:6d:f3:f0:5b:49:6d:c3:41:75:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FA:1E:D0:07:2E:62:12:7F:84:70:B7:42:9E:43:B0:8B:CA:24:0A
X509v3 Authority Key Identifier:
keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
140.168.240.0/22
Signature Algorithm: sha256WithRSAEncryption
90:ea:9e:4c:35:d4:76:5e:13:f4:ed:fa:5e:79:cf:d4:01:0e:
a7:37:4a:ff:73:c8:0d:1f:15:b9:e1:23:ae:38:f0:32:6c:87:
23:c1:8c:fb:f6:4a:fd:88:a1:50:33:cf:7a:e4:96:ad:1b:c7:
cc:ac:c1:1a:50:fc:36:9e:9f:db:4d:3f:67:ba:5a:12:65:63:
37:94:36:15:44:79:7d:15:ae:13:36:fc:7c:a0:84:87:be:6d:
40:41:56:eb:ff:e8:be:aa:99:af:31:48:62:50:94:80:1b:a5:
c2:e5:b6:74:12:d5:87:dd:b3:d3:f4:b1:e5:af:53:f6:41:0c:
db:35:4c:32:4c:69:34:ed:5b:bc:43:57:7a:28:cb:e7:94:b4:
bd:db:3f:5b:32:f4:26:95:d2:ca:6f:ad:93:88:18:7a:88:df:
a0:28:37:0e:27:d2:ef:ed:4f:b8:95:76:6e:a8:23:61:b4:23:
11:25:2f:c5:b0:b6:d3:58:75:82:6a:26:13:bd:47:af:86:0b:
a4:e4:61:23:32:64:c1:fb:f6:af:87:19:00:af:8c:f2:51:5b:
45:a9:47:1c:67:ec:54:b1:cc:ef:c3:72:a8:d9:0b:93:60:d8:
04:9c:2d:2d:09:80:dd:eb:da:74:7d:e3:b9:ec:da:c2:5c:32:
e8:8b:ed:e4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1
Mzg1NzAxNTcwHhcNMjYwMTMxMDEyMTIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdkNTkxMS1jMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0w0T5kIo4mucYzYauXWub4toakw8w/lxhQ3NEjS1W9dmArFkuBsqz/Yqm68
xRF0RVpvymlQcQGd4uxk0UX5YNwa7lco6QWGVmp8Sru2XJhLPmLe4PGNA0OYdMiY
lsUX7378beeJl/pTUEoH82NI/jybMWCL5KIzSASzv9iHMP0wXu6K5ZhYARzLTIIa
x9NbOmS0EtvrmJTOxAaQkqHnORfi7bYShZ5wuTBNN7LKwjpWlDsluaqknHtQiGQ+
0bePSdp94+6GqkNtOzM7Y1HGAfvNAgWkQdSksUXVRdlydcheOyU8D/VjFBa1u7jS
/K5jx1SuK9pt8/BbSW3DQXXswQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJX6HtAH
LmISf4Rwt0KeQ7CLyiQKMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5
MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvNzdFN0FDMEU0
OTI2MTFFREFGNDM5RDgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKMqPAwDQYJKoZIhvcNAQELBQADggEBAJDqnkw11HZeE/Tt
+l55z9QBDqc3Sv9zyA0fFbnhI6448DJshyPBjPv2Sv2IoVAzz3rklq0bx8yswRpQ
/Daen9tNP2e6WhJlYzeUNhVEeX0VrhM2/HyghIe+bUBBVuv/6L6qma8xSGJQlIAb
pcLltnQS1Yfds9P0seWvU/ZBDNs1TDJMaTTtW7xDV3ooy+eUtL3bP1sy9CaV0spv
rZOIGHqI36AoNw4n0u/tT7iVdm6oI2G0IxElL8WwttNYdYJqJhO9R6+GC6TkYSMy
ZMH79q+HGQCvjPJRW0WpRxxn7FSxzO/DcqjZC5Ng2AScLS0JgN3r2nR947ns2sJc
MuiL7eQ=
-----END CERTIFICATE-----
Generated at Sat Jan 31 17:03:57 2026 by rpki-client