This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/3066E80A5B7C11EDAAFAB831C4F9AE02.roa File: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: rgXi0crsQPtHEdZ1jw0k7YIToVlNzTH4Jn+9uCntkX0= Subject key identifier: 35:59:BC:6E:58:46:91:F2:F9:3C:43:E3:39:CA:DF:42:11:39:B0:80 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 02E5 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/3066E80A5B7C11EDAAFAB831C4F9AE02.roa Signing time: Wed 31 Dec 2025 01:20:53 +0000 ROA not before: Wed 31 Dec 2025 01:20:53 +0000 ROA not after: Thu 30 Apr 2026 00:00:00 +0000 asID: 65512 IP address blocks: 140.168.128.0/19 maxlen: 19 140.168.135.0/24 maxlen: 24 140.168.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Dec 31 01:20:53 2025 GMT Not After : Apr 30 00:00:00 2026 GMT Subject: CN=69547a75-bfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:0c:7f:45:f8:63:75:6d:20:7f:bf:fd:e9: 1f:24:4e:f0:fc:b7:fb:4b:ed:41:de:8f:5b:38:23: 59:1d:0d:25:68:00:74:4f:02:45:0a:93:de:91:c2: b7:fb:76:3c:23:29:57:98:d6:66:30:66:18:f0:5c: 50:a1:c1:4e:5e:44:fa:01:38:8a:11:ec:6f:23:19: ce:31:0c:4f:60:97:c2:2d:1d:b5:2c:3d:15:5a:72: 8c:94:1a:3e:07:61:55:32:5f:6d:a2:57:62:34:90: 87:24:91:ee:53:ba:b0:9a:84:dd:5e:fb:04:fc:e6: 7a:86:9a:96:e2:2c:be:40:5e:c9:f3:11:04:ec:70: f0:ea:f5:f0:92:90:b7:70:e5:4d:53:e1:37:99:ed: a8:e2:86:fc:70:d6:23:5d:24:ff:54:8b:36:1e:81: 34:7c:2d:d2:f1:3c:01:ad:30:71:82:ad:28:12:b5: 2d:25:c6:cf:e3:fe:62:bd:72:76:af:36:fb:86:7c: c5:5d:b6:9b:19:12:c4:b6:9c:e5:07:23:84:ad:cb: d0:ae:7d:4e:8c:d4:f8:33:7d:69:9e:d7:74:30:33: 35:ea:8c:e8:3f:77:1a:cd:bb:58:17:45:e2:8b:59: f2:4c:1f:61:55:24:6a:8f:8f:f3:38:0d:84:2f:4a: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:59:BC:6E:58:46:91:F2:F9:3C:43:E3:39:CA:DF:42:11:39:B0:80 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/3066E80A5B7C11EDAAFAB831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.128.0/18 Signature Algorithm: sha256WithRSAEncryption 47:90:5a:8b:f9:2e:07:0f:46:9d:b4:de:51:bb:f5:b2:53:8c: e0:1b:aa:aa:f7:6a:fe:60:6f:7e:c9:4b:21:64:02:5e:63:c0: 57:7a:db:42:19:de:45:be:c9:63:8d:47:9f:af:1e:82:6e:b7: 42:5a:a6:51:94:34:be:a3:06:7e:39:4a:0f:b3:c8:89:0d:76: 2e:d2:c0:03:b7:03:49:79:60:aa:5d:35:da:5a:72:cb:93:2d: bb:ec:5c:66:11:8b:00:c1:c5:10:ea:72:78:93:59:48:e3:fd: 40:80:92:98:dd:09:55:6d:d1:a5:48:1a:a2:71:31:a3:64:46: 74:81:a7:f2:b7:7f:22:39:bc:99:37:fd:90:4a:53:c2:22:c9: e8:51:95:5d:98:29:b0:57:08:ea:e1:0a:4e:5d:77:ea:ab:e4: 67:67:c0:7f:e8:e7:2a:31:5b:5a:fd:4a:8e:f2:5a:d1:42:0b: ce:ed:9d:73:9d:fe:c5:70:ff:56:46:b3:ad:75:b7:f7:81:22: 45:61:e6:25:5c:f1:ea:a3:da:ff:82:09:88:e9:f5:d0:a8:5d: 62:09:27:90:06:89:7a:cb:aa:65:f7:3b:e5:ce:74:73:03:2f: 92:db:34:0b:8d:fb:4d:da:09:06:61:1d:4c:d6:b2:f6:03:fe: f4:19:99:4e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUxMjMxMDEyMDUzWhcNMjYwNDMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0N2E3NS1iZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLcMf0X4Y3VtIH+//ekfJE7w/Lf7S+1B3o9bOCNZHQ0laAB0TwJFCpPekcK3 +3Y8IylXmNZmMGYY8FxQocFOXkT6ATiKEexvIxnOMQxPYJfCLR21LD0VWnKMlBo+ B2FVMl9toldiNJCHJJHuU7qwmoTdXvsE/OZ6hpqW4iy+QF7J8xEE7HDw6vXwkpC3 cOVNU+E3me2o4ob8cNYjXST/VIs2HoE0fC3S8TwBrTBxgq0oErUtJcbP4/5ivXJ2 rzb7hnzFXbabGRLEtpzlByOErcvQrn1OjNT4M31pntd0MDM16ozoP3cazbtYF0Xi i1nyTB9hVSRqj4/zOA2EL0oFjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDVZvG5Y RpHy+TxD4znK30IRObCAMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMzA2NkU4MEE1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAaMqIAwDQYJKoZIhvcNAQELBQADggEBAEeQWov5LgcPRp20 3lG79bJTjOAbqqr3av5gb37JSyFkAl5jwFd620IZ3kW+yWONR5+vHoJut0JaplGU NL6jBn45Sg+zyIkNdi7SwAO3A0l5YKpdNdpacsuTLbvsXGYRiwDBxRDqcniTWUjj /UCAkpjdCVVt0aVIGqJxMaNkRnSBp/K3fyI5vJk3/ZBKU8IiyehRlV2YKbBXCOrh Ck5dd+qr5GdnwH/o5yoxW1r9So7yWtFCC87tnXOd/sVw/1ZGs611t/eBIkVh5iVc 8eqj2v+CCYjp9dCoXWIJJ5AGiXrLqmX3O+XOdHMDL5LbNAuN+03aCQZhHUzWsvYD /vQZmU4= -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:29 2026 by rpki-client