This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa
File: 87662556555511EF88D9F680C4F9AE02.roa (raw, json)
Hash identifier: g2923tdMPEYDpjyOhYs0ACxlY+kdr/u3SXBH1nQAhTQ=
Subject key identifier: 8F:20:86:5A:79:E8:44:05:A3:A3:2A:DE:0A:35:5E:ED:19:7F:9C:6E
Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
Certificate serial: 0194
Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa
Signing time: Mon 19 Jan 2026 03:22:58 +0000
ROA not before: Mon 19 Jan 2026 03:22:58 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 9444
IP address blocks: 120.88.192.0/18 maxlen: 18
120.88.192.0/19 maxlen: 19
120.88.224.0/20 maxlen: 20
120.88.224.0/24 maxlen: 24
120.88.225.0/24 maxlen: 24
120.88.226.0/24 maxlen: 24
120.88.227.0/24 maxlen: 24
120.88.230.0/24 maxlen: 24
120.88.232.0/24 maxlen: 24
120.88.236.0/24 maxlen: 24
120.88.237.0/24 maxlen: 24
120.88.240.0/24 maxlen: 24
120.88.241.0/24 maxlen: 24
120.88.242.0/24 maxlen: 24
120.88.243.0/24 maxlen: 24
120.88.245.0/24 maxlen: 24
120.88.246.0/24 maxlen: 24
120.88.252.0/24 maxlen: 24
120.88.253.0/24 maxlen: 24
120.88.254.0/24 maxlen: 24
202.4.192.0/19 maxlen: 19
202.4.196.0/24 maxlen: 24
202.4.208.0/24 maxlen: 24
223.130.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl
rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
Validity
Not Before: Jan 19 03:22:58 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=696da391-5dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:a3:d6:ad:b0:20:c6:62:97:64:72:84:97:
72:24:19:a4:f9:06:c3:e0:cd:4d:39:8f:e5:c8:12:
97:e8:4c:ac:cb:ed:7c:96:ec:4c:d0:1e:02:13:00:
8a:25:cd:84:90:d3:df:9f:df:94:d8:ff:01:60:67:
98:b1:d6:ce:e9:69:de:95:e9:19:73:7f:ff:95:65:
77:32:3f:7f:62:f4:db:6c:88:cc:4d:c2:8e:43:00:
db:dc:ab:9f:37:d4:5d:b6:8a:92:1f:be:be:71:eb:
06:6f:92:6c:24:98:9c:ca:57:12:fc:2a:ef:69:3f:
4d:ea:20:27:2b:f6:a3:62:71:9a:31:80:81:31:c2:
9e:b6:a0:64:ad:3a:ba:d8:4f:b5:c5:7f:25:21:02:
fc:af:91:cc:25:73:80:2e:c5:62:89:3e:fa:30:40:
83:4c:a6:cd:01:ac:ce:10:69:f5:77:08:bf:2f:e6:
c9:71:b7:f6:4d:f9:ab:bc:c7:b1:b9:82:16:9c:4e:
a2:df:c4:0f:c5:6e:33:be:34:3f:a0:a6:6a:04:d0:
da:b1:03:59:25:3c:e8:9c:b7:44:06:f9:46:b9:9b:
55:ca:0a:6e:33:80:f2:b0:e1:ff:68:ff:56:df:45:
8d:77:8f:5f:db:bd:37:8a:28:bc:92:1d:35:5d:2f:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:86:5A:79:E8:44:05:A3:A3:2A:DE:0A:35:5E:ED:19:7F:9C:6E
X509v3 Authority Key Identifier:
keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.88.192.0/18
202.4.192.0/19
223.130.32.0/19
Signature Algorithm: sha256WithRSAEncryption
79:9b:80:91:64:b4:25:32:57:97:eb:27:f9:4d:16:5a:70:39:
48:f7:96:74:4b:da:28:38:aa:ec:b3:8e:3e:10:c0:6b:2b:c2:
62:bd:72:c3:e4:1e:31:70:48:43:9c:18:7f:40:33:17:bb:1b:
34:42:ce:d1:8a:9d:f6:61:fb:f9:7e:4a:f8:d2:89:a6:fe:fe:
1e:8f:0b:a2:33:44:05:02:d9:b0:bd:70:c0:0f:7a:8d:5c:77:
7a:b4:2a:b5:48:e0:c3:e0:8b:b6:a6:c1:ce:84:0c:55:af:d1:
ac:b3:df:ea:55:64:91:5e:b1:c0:27:c2:69:66:b9:04:19:31:
6d:a5:53:fb:14:7b:67:ba:b8:a8:77:3a:eb:c1:43:68:42:22:
0d:a1:6a:ef:97:2b:7b:11:1e:89:cb:89:36:a9:69:3f:95:c8:
d7:05:08:97:d0:d6:9d:4e:a9:7b:fd:48:59:bb:f8:7d:47:88:
09:fe:f7:ca:df:f7:ca:37:49:91:da:07:ea:d9:48:eb:50:01:
12:a4:9a:f3:20:44:c0:77:fd:f5:41:f2:49:b3:14:d4:76:aa:
f3:f2:62:29:d6:6c:6f:f0:d7:12:a4:f3:be:b1:05:34:64:f4:
14:c0:67:45:86:78:f0:f4:81:f5:0c:9f:4b:bb:f6:c8:4a:fb:
ab:6f:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:47:09 2026 by rpki-client