This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa
File: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (raw, json)
Hash identifier: s+WXI9/XXjX36ieuVqgSwgquuy05GdXcIotU+Vwma6M=
Subject key identifier: F8:90:6E:AD:19:13:1D:59:AE:BC:0E:3D:2A:56:3F:3B:D6:79:D2:AF
Certificate issuer: /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Certificate serial: D7
Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa
Signing time: Sat 17 Jan 2026 05:24:13 +0000
ROA not before: Sat 17 Jan 2026 05:24:13 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 135091
IP address blocks: 160.250.190.0/23 maxlen: 23
160.250.190.0/24 maxlen: 24
160.250.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 05:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Validity
Not Before: Jan 17 05:24:13 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=696b1cfd-6cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:3a:49:2d:c1:69:3a:58:40:51:60:00:82:
55:ae:f0:37:31:9a:70:dd:16:5f:1b:a1:65:87:b9:
22:27:42:a1:be:54:4c:04:49:97:a4:bf:5e:49:b5:
53:29:fe:89:85:65:12:ac:e7:80:88:58:65:5b:76:
07:1a:e3:4b:34:25:5a:9e:b8:68:1c:86:53:e8:eb:
42:78:39:eb:8d:72:ba:8b:63:5d:f4:54:96:0d:cf:
9c:35:cb:db:b3:25:d7:d7:af:ba:80:72:80:ba:8e:
4f:1b:e4:03:01:b9:b3:a2:53:0e:34:fa:c8:07:9a:
0d:63:7e:4c:d7:b5:75:48:d8:0c:d9:97:19:f2:5a:
d3:66:8b:8b:7d:ef:6f:a9:97:16:3d:62:da:59:d4:
34:c0:51:a9:b2:eb:39:25:e4:20:cd:b3:ae:8d:e5:
0a:c2:63:81:98:1d:7e:a2:0d:4b:22:03:f2:06:f1:
0a:6e:3a:5f:51:7b:0a:f8:b9:df:8b:b1:09:11:9d:
fc:c5:4c:f9:16:43:41:02:a1:ac:b5:94:89:00:a1:
8a:56:8b:4c:23:3b:58:ae:71:b6:01:79:89:10:8c:
16:3e:37:3f:dd:3a:6a:91:2e:65:55:27:f6:fb:d3:
f0:e8:dd:15:99:88:b6:18:07:b0:e7:04:ce:73:06:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:90:6E:AD:19:13:1D:59:AE:BC:0E:3D:2A:56:3F:3B:D6:79:D2:AF
X509v3 Authority Key Identifier:
keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.190.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:cd:8e:e1:32:59:37:d2:a0:87:08:dd:56:ce:c9:1d:ba:0d:
4e:7a:03:69:11:2e:90:ff:ae:3b:a1:7b:9e:3a:8f:9f:60:aa:
d3:24:67:79:f0:56:06:a0:57:bb:df:45:09:3f:c0:c3:34:70:
ea:85:fb:a0:37:06:6c:f9:a7:cc:66:09:fa:05:92:5b:3c:e1:
82:5d:6a:b5:ad:1a:03:fa:c5:9e:3b:f6:6d:5f:4b:2e:fb:20:
15:52:09:16:34:63:8f:9f:72:d9:76:fb:10:f0:19:de:d5:8e:
dc:51:2b:16:62:f2:44:e0:c9:37:c5:cb:5f:aa:09:fc:62:c6:
a8:83:c1:1b:83:50:4c:74:31:f5:b8:6d:44:e8:ba:77:26:e2:
80:71:ba:f9:cd:83:24:91:19:2e:24:e7:60:f4:f3:37:2c:32:
f9:7e:be:ed:0c:17:c0:f7:07:d2:48:e9:6e:cb:3a:63:38:2e:
be:2c:cc:ed:97:8f:06:06:49:6c:bc:27:fd:83:a2:60:d8:ce:
8c:8f:c8:75:1e:7d:c8:a4:25:97:0c:e1:c9:93:35:9a:c9:12:
ef:c6:8e:73:5b:62:33:e8:6e:44:b8:c2:d1:4d:18:7e:8f:a1:
6d:7c:3c:3d:de:29:55:40:80:e5:07:85:05:b9:1d:66:9f:5f:
c8:5c:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:33:51 2026 by rpki-client