This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa
File: F5FC39B600F811F0BD702A69C4F9AE02.roa (raw, json)
Hash identifier: d3Ztp/QXe6hyPV/VR1BVSJgcfduo9pSnhik7tX10cpI=
Subject key identifier: 43:F7:03:74:2F:72:BB:2F:DF:38:10:AD:F8:A9:A0:25:C1:12:74:4B
Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial: B4
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa
Signing time: Sun 18 Jan 2026 23:01:33 +0000
ROA not before: Sun 18 Jan 2026 23:01:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32135
IP address blocks: 163.223.40.0/23 maxlen: 23
163.223.40.0/24 maxlen: 32
163.223.41.0/24 maxlen: 24
2401:f460:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Validity
Not Before: Jan 18 23:01:33 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696d664c-3db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:d3:af:4a:d0:b9:5a:db:cb:cd:79:71:ac:
5e:b2:3e:6c:20:a3:92:7a:d6:ae:0d:73:21:70:d8:
79:32:25:5b:e8:61:8c:e9:ab:2b:9c:93:b8:ec:39:
7e:2e:cc:5b:5e:ea:9c:1f:cf:8e:b0:64:0b:de:17:
62:63:80:3c:5a:f4:2f:bf:00:76:58:c4:1d:cc:dc:
63:25:8d:13:ba:3c:54:27:45:48:ce:ee:77:ee:d8:
a7:60:10:ab:b5:4c:77:00:05:e2:57:84:2b:73:c6:
7b:a5:5b:b9:5e:41:4c:ae:c2:53:3a:98:83:4d:d7:
c0:b2:15:4b:6f:ff:c7:c0:2f:54:e8:69:17:55:c2:
fd:52:a7:a6:1f:c0:0e:d8:df:c8:5a:10:c1:40:ef:
a1:52:a7:80:71:20:d2:c2:f0:23:2a:85:5d:47:c3:
21:86:69:07:6a:31:bf:39:80:ac:0c:43:d1:70:c6:
54:de:29:a2:90:cc:57:1d:93:ff:20:9c:b1:df:ec:
50:5b:84:62:6e:b6:6b:8f:c5:3b:3d:08:e6:48:2e:
4f:86:fa:42:63:05:ef:8b:39:20:61:52:41:39:b8:
99:4e:64:42:33:84:fb:04:0f:3a:38:f5:5c:6f:c6:
a0:b8:6d:1c:ea:09:b3:76:48:80:16:ba:c2:56:25:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:03:74:2F:72:BB:2F:DF:38:10:AD:F8:A9:A0:25:C1:12:74:4B
X509v3 Authority Key Identifier:
keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.40.0/23
IPv6:
2401:f460:f000::/48
Signature Algorithm: sha256WithRSAEncryption
ad:82:7d:d0:90:24:ea:e9:0a:45:60:86:fb:60:d4:3b:e8:ab:
92:8f:51:75:a1:55:33:d6:24:ab:05:f9:ba:f2:05:68:fb:67:
21:b2:e2:50:be:30:79:3c:cf:12:c7:21:80:aa:c1:4f:6b:10:
65:e0:0a:0b:9a:17:07:ae:e3:f8:09:18:9b:57:66:9c:25:2a:
83:ef:d9:67:fb:7d:5a:9d:7e:24:b8:8a:fe:51:c6:75:c3:a2:
de:d0:1a:c1:92:6b:be:9c:18:72:4f:a0:a4:53:16:a4:00:83:
9c:ae:30:fc:2c:91:3e:e1:7a:09:2d:8b:fa:38:18:0b:38:18:
6d:2d:ec:ef:bc:80:6c:b0:19:15:9a:4e:4a:80:42:86:3a:a3:
09:ba:f5:a4:14:e8:6f:84:a3:eb:a3:2c:fe:c6:78:09:ce:df:
95:9a:f1:f4:8f:c1:65:eb:cb:5e:c4:9a:7a:44:02:db:98:1e:
21:05:05:27:dd:98:3c:0f:f9:ef:b1:3a:e7:c0:52:ef:58:be:
d3:14:5d:8e:bc:14:c3:f3:c6:c5:de:ea:7d:e1:57:eb:bf:d0:
11:ab:ae:a4:2b:22:4f:8a:c9:5d:4f:4d:de:2c:27:2b:5b:a0:
21:d1:4d:71:af:bc:47:ea:81:82:c8:8a:d4:e0:33:ee:e1:5f:
57:22:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 14:01:03 2026 by rpki-client