This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa
File: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (raw, json)
Hash identifier: m+zDbDYuelhMUb5rdTWM3MD2fE0VRXqimfKL4l5HYnA=
Subject key identifier: 2F:8B:34:71:40:91:80:57:2C:82:D3:9A:D4:98:04:08:9D:E7:4C:68
Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Certificate serial: C8
Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa
Signing time: Mon 19 Jan 2026 05:25:13 +0000
ROA not before: Mon 19 Jan 2026 05:25:13 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 133213
IP address blocks: 160.250.230.0/23 maxlen: 23
160.250.230.0/24 maxlen: 24
160.250.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Validity
Not Before: Jan 19 05:25:13 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=696dc038-35fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:2b:bf:1b:fb:dd:07:2a:79:7d:48:98:c7:
44:5f:f1:a4:e9:a4:80:39:35:98:6a:6d:ff:f4:80:
15:a8:08:8e:51:86:95:3e:dc:5c:c1:80:b0:f2:83:
6b:69:5e:b7:3b:c4:a9:d1:f0:72:a3:f7:c4:bb:a0:
2a:f0:85:b4:7b:90:f9:ec:f7:2f:33:6e:0f:01:0a:
f6:d5:5c:4a:11:90:90:aa:24:ef:36:c3:8d:e1:5d:
af:21:35:3c:95:f8:c8:35:b1:e4:08:fc:a1:ee:a8:
f6:43:bc:c9:f3:92:08:c4:58:20:5b:08:81:83:3e:
15:ed:04:aa:f2:e8:ce:7b:96:2a:2a:66:93:6c:16:
9e:a1:97:ab:f2:bf:2a:da:a4:b9:49:2b:89:11:d8:
be:a4:8c:36:ab:bc:f2:9f:46:ec:f6:d5:2b:a9:4d:
a8:96:87:0e:23:1f:f1:1e:6c:ad:cd:bf:b4:54:71:
16:47:bc:69:a1:aa:3d:e4:f4:70:80:73:b6:77:7a:
07:37:d0:65:aa:8d:89:b9:25:2c:05:34:69:f7:8c:
65:c2:8e:8c:6a:07:b1:b9:15:bf:28:69:db:1a:cc:
9c:88:b3:19:a2:f5:c8:13:9a:e9:3e:2b:f7:1f:3c:
77:3d:dd:b9:32:43:2a:1e:9e:ae:56:6a:1f:b5:58:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:34:71:40:91:80:57:2C:82:D3:9A:D4:98:04:08:9D:E7:4C:68
X509v3 Authority Key Identifier:
keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.230.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:3c:73:f2:aa:64:43:77:f6:9e:4c:2a:3d:35:b9:8b:e4:59:
16:2e:69:b0:8a:e8:e6:50:ee:af:ff:d3:af:cc:e7:c0:c3:0c:
75:18:a0:ae:e3:7e:a9:d0:df:29:2c:97:12:b7:80:70:37:b4:
f0:22:42:a7:8c:06:f4:25:fd:aa:44:d9:c7:3a:f4:aa:87:68:
88:dc:32:4e:17:7d:ad:87:f9:b7:57:b2:4e:31:ad:ae:1f:36:
aa:99:d4:d7:10:42:3c:96:b9:fc:72:10:4e:70:49:93:d7:df:
23:b1:b3:9c:9e:4f:1e:94:bd:e9:03:7b:64:72:ba:80:5e:8c:
1f:5c:f3:f0:51:cf:1c:d8:40:42:00:5b:73:3e:0e:b8:60:33:
9c:51:a5:e8:bd:da:27:a1:1d:51:e1:bd:b4:ff:b1:54:10:db:
df:26:d4:5b:f1:a7:cd:12:37:82:26:22:c3:25:f9:30:93:d2:
d7:70:72:5e:be:0b:74:62:47:71:f5:3e:0a:f5:cc:30:61:27:
33:06:6c:1d:20:83:26:50:31:f1:ef:a8:14:ce:88:1f:cf:2a:
d6:8d:30:06:43:4b:7f:9f:6a:c5:ab:ac:e4:34:76:4a:a1:60:
29:bb:fa:f7:16:65:d8:77:86:75:88:1a:80:ee:a4:e1:f4:40:
f4:17:f8:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTZEQ0ExMTAvBgNVBAUTKEFFNzNCNzA1NDhGRjQyMkVEMDJENTlEMUNBMjU3OTNB
MDVFOUU0MkEwHhcNMjYwMTE5MDUyNTEzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZkYzAzOC0zNWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoUIrvxv73QcqeX1ImMdEX/Gk6aSAOTWYam3/9IAVqAiOUYaVPtxcwYCw8oNr
aV63O8Sp0fByo/fEu6Aq8IW0e5D57PcvM24PAQr21VxKEZCQqiTvNsON4V2vITU8
lfjINbHkCPyh7qj2Q7zJ85IIxFggWwiBgz4V7QSq8ujOe5YqKmaTbBaeoZer8r8q
2qS5SSuJEdi+pIw2q7zyn0bs9tUrqU2olocOIx/xHmytzb+0VHEWR7xpoao95PRw
gHO2d3oHN9Blqo2JuSUsBTRp94xlwo6MagexuRW/KGnbGsyciLMZovXIE5rpPiv3
Hzx3Pd25MkMqHp6uVmoftVixjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC+LNHFA
kYBXLILTmtSYBAid50xoMB8GA1UdIwQYMBaAFK5ztwVI/0Iu0C1Z0coleToF6eQq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81MDEwOTg3NkNC
MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9ybk8zQlVqX1FpN1FMVm5SeWlWNU9nWHA1
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JuTzNCVWpfUWk3UUxWblJ5aVY1T2dYcDVDby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTZEQ0EvNTAxMDk4NzZDQjFGMTFFRkI3QUMyNzg2QzRGOUFFMDIvRTM5QUY5QzZD
QjM2MTFFRkFFM0MxQTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGg+uYwDQYJKoZIhvcNAQELBQADggEBAB88c/KqZEN39p5M
Kj01uYvkWRYuabCK6OZQ7q//06/M58DDDHUYoK7jfqnQ3ykslxK3gHA3tPAiQqeM
BvQl/apE2cc69KqHaIjcMk4Xfa2H+bdXsk4xra4fNqqZ1NcQQjyWufxyEE5wSZPX
3yOxs5yeTx6UvekDe2RyuoBejB9c8/BRzxzYQEIAW3M+DrhgM5xRpei92iehHVHh
vbT/sVQQ298m1Fvxp80SN4ImIsMl+TCT0tdwcl6+C3RiR3H1Pgr1zDBhJzMGbB0g
gyZQMfHvqBTOiB/PKtaNMAZDS3+fasWrrOQ0dkqhYCm7+vcWZdh3hnWIGoDupOH0
QPQX+Jo=
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:51 2026 by rpki-client