This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/3C249D62A89211EF881C732EC4F9AE02.roa
File: 3C249D62A89211EF881C732EC4F9AE02.roa (raw, json)
Hash identifier: o3NMmzjzmunfciEyOk8NZ1RPL924VP4XKb0zJ76CPTA=
Subject key identifier: 17:81:57:C2:D1:A3:24:56:DE:43:89:E7:3E:5A:8B:A9:B8:72:C0:D0
Certificate issuer: /CN=A9137627/serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
Certificate serial: E0
Authority key identifier: 16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/3C249D62A89211EF881C732EC4F9AE02.roa
Signing time: Wed 21 Jan 2026 05:24:36 +0000
ROA not before: Wed 21 Jan 2026 05:24:35 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 142031
IP address blocks: 160.250.52.0/24 maxlen: 24
160.250.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl
rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137627, serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
Validity
Not Before: Jan 21 05:24:35 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69706313-020c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:c8:d2:ad:72:0e:6a:4b:b5:3e:3c:66:c9:
b7:c9:f0:7b:fd:4f:ac:9c:19:0b:82:a6:52:a9:a2:
f9:08:db:2e:5d:d1:ea:86:9c:b6:2d:9a:22:c4:8c:
9a:10:70:67:fd:77:eb:c6:da:91:9a:9b:80:bc:1a:
c7:4b:aa:e8:ab:84:07:40:15:78:b2:91:91:3e:39:
3d:7e:cc:df:37:8e:65:ac:ea:aa:30:48:c1:ce:aa:
75:64:c9:0a:77:81:18:08:cd:a3:75:34:35:92:d0:
fc:ed:e9:24:80:6c:ee:a1:10:bf:15:93:58:9d:39:
65:07:82:07:47:fa:01:bf:3b:e5:19:73:60:1d:63:
0b:f0:d3:bc:db:a8:b8:80:07:5a:b6:fc:76:58:c1:
c8:d8:9b:b4:bb:ec:ae:42:f2:fe:53:c5:55:74:fb:
4d:c2:5b:d3:eb:d9:be:b0:07:69:7c:92:ef:99:9b:
97:f7:67:e5:7c:2c:41:32:b1:c6:01:c3:74:22:dc:
d6:81:84:cd:c3:52:aa:45:11:85:93:bc:89:3a:a0:
15:0f:f4:34:aa:1f:47:92:6e:39:69:9a:2f:44:34:
13:11:7f:65:85:b0:c6:4f:3b:5b:d9:c9:a2:02:29:
3b:ec:4d:69:db:7c:f0:47:f5:1d:c7:cf:a1:1a:e1:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:81:57:C2:D1:A3:24:56:DE:43:89:E7:3E:5A:8B:A9:B8:72:C0:D0
X509v3 Authority Key Identifier:
keyid:16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/3C249D62A89211EF881C732EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.52.0/23
Signature Algorithm: sha256WithRSAEncryption
96:ea:c9:84:9f:58:7b:69:dd:76:f5:aa:91:e1:23:2a:a4:eb:
b3:e6:18:99:cf:cc:e0:85:3f:67:06:7a:a1:ad:e9:ad:59:6b:
3e:cf:48:2e:5f:18:5d:5b:a2:4c:55:c8:2b:99:c9:61:83:65:
c8:4a:27:73:d8:6d:e7:73:39:52:7b:e3:4f:4b:72:7b:18:ee:
eb:b8:56:76:30:9c:d2:60:ad:b0:fa:72:65:49:c4:9e:f2:84:
0a:e1:e1:9f:54:f9:9f:77:ef:aa:e7:d2:7c:35:2f:89:a4:dd:
51:8f:53:dd:20:c3:3e:83:85:50:f0:5f:77:36:d0:8d:7e:3d:
6b:42:cf:d8:00:9a:00:a9:f9:ab:db:1e:95:2a:9d:c3:39:8d:
e2:b6:d4:a8:80:f1:1b:b5:96:65:f2:d5:f4:a0:83:ce:65:1c:
0e:e4:09:48:0f:ec:3f:e9:32:cd:78:b7:7b:ec:46:15:17:65:
77:62:2f:54:2c:82:28:3d:af:67:b7:6a:46:cb:dd:a4:64:bf:
aa:df:53:9b:fc:5c:c2:ef:d1:0e:45:e3:ce:bb:bc:39:aa:eb:
ab:d2:b0:bf:03:43:48:a4:8f:72:49:e2:17:27:6a:68:cb:20:
06:ae:04:e0:0c:72:5d:24:04:83:9d:05:ce:27:57:9a:90:d1:
e3:14:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:41:18 2026 by rpki-client