This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa
File: 403398AA233111EEAF768F66C4F9AE02.roa (raw, json)
Hash identifier: /9KNQkM//D8vUx3gi/fFvf18DccyllY4yMf9zti23gE=
Subject key identifier: FD:E6:2B:FC:7B:E3:E9:F2:CE:0F:94:AF:3B:BC:1E:1F:63:2E:63:8F
Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial: 133E
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa
Signing time: Fri 09 Jan 2026 02:48:46 +0000
ROA not before: Fri 09 Jan 2026 02:48:46 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 133200
IP address blocks: 167.179.4.0/24 maxlen: 24
167.179.6.0/24 maxlen: 24
167.179.12.0/24 maxlen: 24
167.179.13.0/24 maxlen: 24
167.179.14.0/24 maxlen: 24
167.179.18.0/24 maxlen: 24
167.179.19.0/24 maxlen: 24
167.179.37.0/24 maxlen: 24
167.179.38.0/24 maxlen: 24
167.179.39.0/24 maxlen: 24
167.179.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4926 (0x133e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Validity
Not Before: Jan 9 02:48:46 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69606c8e-fbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:80:1f:23:53:8f:d7:6c:a1:f2:01:f8:7d:
26:3e:b3:a0:64:6a:ca:0f:e9:c1:ab:b8:c3:e6:4f:
ea:7d:63:5b:c8:ea:5b:d2:70:85:3c:66:da:35:85:
49:b2:6b:e9:88:f5:3c:f8:d0:0e:50:57:0d:a7:ef:
f4:50:d7:9d:ec:d8:c0:fc:68:df:d3:95:53:44:19:
76:d8:c7:71:9b:e7:fe:8b:e4:64:25:20:aa:b9:5a:
2c:f6:b4:02:42:5f:84:8a:54:de:c6:88:1f:37:ae:
81:75:3f:f7:0b:16:61:20:71:ec:76:f0:dc:53:61:
50:90:c3:63:d4:0a:c1:83:ab:92:de:f9:c6:64:3d:
46:1a:e3:5b:c7:92:cb:39:66:7e:0d:f7:28:4b:e2:
0a:ed:51:12:02:1d:3f:8d:c9:d2:ba:a7:3f:68:86:
41:50:4b:cc:cb:61:9e:e9:19:4f:3e:68:e0:dd:d8:
26:f4:1f:61:f0:ce:d8:74:54:ad:d5:5b:16:b9:e8:
71:7a:53:a0:fa:f8:a9:f3:8b:23:c9:60:9b:4b:ad:
fa:80:09:f4:cd:6d:5a:53:7a:37:70:93:39:82:cb:
a6:63:e1:cf:7d:80:a4:03:f4:bf:ae:04:a9:5a:8d:
4e:96:97:70:9f:a3:7b:b8:c6:35:c5:d8:ee:54:40:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E6:2B:FC:7B:E3:E9:F2:CE:0F:94:AF:3B:BC:1E:1F:63:2E:63:8F
X509v3 Authority Key Identifier:
keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.4.0/24
167.179.6.0/24
167.179.12.0-167.179.14.255
167.179.18.0/23
167.179.37.0-167.179.47.255
Signature Algorithm: sha256WithRSAEncryption
c6:87:4f:26:c9:41:a4:8c:c1:17:db:ac:00:e7:55:02:d0:f0:
83:e0:0b:1d:66:62:8c:b2:cf:cb:9b:0f:93:a9:c6:1d:fb:f1:
cb:69:69:e2:2b:d9:5f:ba:9a:fb:fd:dc:62:61:68:a8:15:d9:
ff:f6:4a:da:e7:ba:98:28:e3:e4:0d:08:1b:78:b8:2d:3f:dd:
35:9d:28:6f:63:ed:2c:4f:16:99:57:c6:26:b9:19:6e:13:43:
ab:95:66:65:5a:41:89:94:f3:69:56:14:6b:47:46:9e:f9:8e:
d9:75:74:85:0d:96:e5:b3:00:c4:12:ad:0b:e1:39:f4:b0:95:
3a:ff:21:15:0b:65:29:bf:b1:d2:3c:dc:3c:10:5e:90:9f:f9:
c0:32:29:c1:d7:13:83:5e:59:e4:4e:31:68:fa:c5:bc:6b:28:
5d:62:4a:40:37:9e:6a:70:fb:23:71:c8:cc:13:25:a6:ad:e1:
ed:2c:30:b9:de:5f:50:40:fa:1b:99:f0:ff:82:56:9d:e2:68:
21:4e:95:2d:66:e3:6a:d7:52:a4:ca:db:63:11:1b:85:ae:59:
b1:1d:cf:53:2d:6b:f0:0a:75:9a:d7:20:05:6a:85:ad:56:bd:
8c:c6:22:18:d5:b1:37:3d:aa:37:6b:55:bc:4e:48:56:a0:11:
ad:47:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:01 2026 by rpki-client