This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/CE88C72C569911F08E21CF87C4F9AE02.roa
File: CE88C72C569911F08E21CF87C4F9AE02.roa (raw, json)
Hash identifier: yHWmwW6gtNweuRl9brOQPJtnvJaJDxjSoAPRUNLhrCM=
Subject key identifier: 3C:46:36:86:67:14:BE:67:9D:80:8A:DC:E0:4F:94:66:05:16:4D:32
Certificate issuer: /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Certificate serial: 7F
Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/CE88C72C569911F08E21CF87C4F9AE02.roa
Signing time: Thu 15 Jan 2026 07:24:34 +0000
ROA not before: Thu 15 Jan 2026 07:24:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 57025
IP address blocks: 160.250.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Validity
Not Before: Jan 15 07:24:34 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69689632-a513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:71:84:f0:99:44:09:d5:ab:c4:70:23:00:
b8:81:f2:d3:4b:3d:92:d1:26:b4:d5:d5:c8:f6:f7:
4a:22:88:06:90:c1:55:57:17:5c:00:ea:ed:d5:f1:
7c:76:68:66:cd:1f:99:d7:c9:66:2c:7f:b4:c7:95:
5b:e5:50:1a:4f:16:9d:d1:0b:e4:73:87:25:98:52:
9d:62:d5:ef:5a:7a:bf:ea:b7:89:5c:01:2d:c8:99:
e0:22:c3:a7:ec:0f:2e:06:18:b9:de:f8:3b:3d:76:
81:58:e9:e8:0f:f9:86:f7:94:00:e8:d5:ad:a8:3c:
af:3d:7d:3b:12:f7:b9:54:6d:00:fd:ad:c1:4b:4b:
df:0d:7b:1e:77:17:53:93:ef:1d:f5:a7:6c:85:97:
c4:1c:8d:98:86:6e:55:66:0d:2c:e4:31:40:e4:55:
d3:67:73:d0:65:69:d3:cd:3b:62:82:37:e3:b3:72:
67:02:1c:92:66:f8:80:8b:47:24:27:6b:4a:04:5a:
26:51:21:11:01:a1:eb:96:20:d0:ef:4c:b3:31:7d:
7e:55:6c:1f:ce:db:0e:d9:ff:b0:95:fc:71:26:e4:
df:14:1c:60:58:d9:dd:4c:0a:d4:05:9b:64:e9:c9:
d1:b3:f1:72:e2:e4:1b:39:d2:a3:5b:23:d4:66:67:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:46:36:86:67:14:BE:67:9D:80:8A:DC:E0:4F:94:66:05:16:4D:32
X509v3 Authority Key Identifier:
keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/CE88C72C569911F08E21CF87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.13.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:9c:d9:83:11:ef:fc:36:df:ae:0a:33:cf:cb:bc:50:b8:68:
21:42:50:2f:0c:bb:6d:9e:66:97:b6:4c:ba:0f:c6:a8:2e:45:
36:03:9b:6d:fd:e8:99:f2:e2:3a:73:e5:77:09:5c:58:af:67:
28:90:f6:57:e5:49:e0:28:80:8b:88:5f:f7:e1:ee:e3:35:8b:
3c:d5:fd:97:6a:29:e7:ca:d9:72:a3:8f:17:cc:31:a5:0d:36:
71:a2:24:02:80:f4:de:6d:9a:4a:6d:5f:fb:6c:36:f4:d1:5e:
b7:0f:d2:e2:3f:1d:2a:8b:82:44:23:89:43:d9:a7:11:48:ee:
b2:ce:9c:bf:f4:ab:1c:71:0f:5a:90:4f:e0:41:75:07:62:7a:
1a:31:e2:05:14:bb:87:f7:16:5b:02:8e:3d:aa:e6:0f:80:1b:
11:df:4d:b3:82:86:48:7f:15:bb:19:3e:d6:09:c4:4f:9b:97:
7f:94:34:f2:e9:f4:7f:9d:5a:46:af:8d:3d:d1:e5:3b:70:26:
70:7f:47:30:1b:6f:05:2c:8b:59:21:8c:63:80:4e:d8:b0:6f:
8f:23:bd:d7:47:74:a6:c0:f8:fa:c5:09:e7:d5:1b:52:45:2c:
c1:12:c4:1b:d6:d6:04:34:60:2a:2a:2b:59:25:2b:12:eb:58:
96:aa:36:41
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4
NDY4NDExMC8GA1UEBRMoRjFFNTAxNjNBQzUwNkE2MkNDRkI1QThBRjU2NTExQzM4
RjE1MDQxNDAeFw0yNjAxMTUwNzI0MzRaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5Njg5NjMyLWE1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC62HGE8JlECdWrxHAjALiB8tNLPZLRJrTV1cj290oiiAaQwVVXF1wA6u3V8Xx2
aGbNH5nXyWYsf7THlVvlUBpPFp3RC+RzhyWYUp1i1e9aer/qt4lcAS3ImeAiw6fs
Dy4GGLne+Ds9doFY6egP+Yb3lADo1a2oPK89fTsS97lUbQD9rcFLS98Nex53F1OT
7x31p2yFl8QcjZiGblVmDSzkMUDkVdNnc9BladPNO2KCN+OzcmcCHJJm+ICLRyQn
a0oEWiZRIREBoeuWINDvTLMxfX5VbB/O2w7Z/7CV/HEm5N8UHGBY2d1MCtQFm2Tp
ydGz8XLi5Bs50qNbI9RmZ4VfAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUPEY2hmcU
vmedgIrc4E+UZgUWTTIwHwYDVR0jBBgwFoAU8eUBY6xQamLM+1qK9WURw48VBBQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0I2QkEwMTJDMzk4
NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1MTS0xcUs5V1VSdzQ4VkJC
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOGVVQlk2eFFhbUxNLTFxSzlXVVJ3NDhWQkJRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDY4NC9CNkJBMDEyQzM5ODYxMUYwQUNDNTU5MTRDNEY5QUUwMi9DRTg4QzcyQzU2
OTkxMUYwOEUyMUNGODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKD6DTANBgkqhkiG9w0BAQsFAAOCAQEAuJzZgxHv/Dbfrgoz
z8u8ULhoIUJQLwy7bZ5ml7ZMug/GqC5FNgObbf3omfLiOnPldwlcWK9nKJD2V+VJ
4CiAi4hf9+Hu4zWLPNX9l2op58rZcqOPF8wxpQ02caIkAoD03m2aSm1f+2w29NFe
tw/S4j8dKouCRCOJQ9mnEUjuss6cv/SrHHEPWpBP4EF1B2J6GjHiBRS7h/cWWwKO
ParmD4AbEd9Ns4KGSH8Vuxk+1gnET5uXf5Q08un0f51aRq+NPdHlO3AmcH9HMBtv
BSyLWSGMY4BO2LBvjyO910d0psD4+sUJ59UbUkUswRLEG9bWBDRgKiorWSUrEutY
lqo2QQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:31 2026 by rpki-client