This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/465DBB30BA8811EAAF996D39C4F9AE02.roa
File: 465DBB30BA8811EAAF996D39C4F9AE02.roa (raw, json)
Hash identifier: mvHjKRsR67OiF4l27nqT2jDw9NacCXhSBbDkY8YiePs=
Subject key identifier: 65:98:C4:28:E1:BB:CF:D4:F4:5E:1A:FD:DC:25:0F:56:90:02:C0:F8
Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Certificate serial: 093E
Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/465DBB30BA8811EAAF996D39C4F9AE02.roa
Signing time: Mon 12 Jan 2026 20:16:38 +0000
ROA not before: Mon 12 Jan 2026 20:16:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137280
IP address blocks: 104.250.32.0/23 maxlen: 23
104.250.32.0/24 maxlen: 24
104.250.33.0/24 maxlen: 24
104.250.34.0/23 maxlen: 23
104.250.38.0/23 maxlen: 23
104.250.40.0/23 maxlen: 23
104.250.42.0/23 maxlen: 23
104.250.44.0/24 maxlen: 24
104.250.46.0/23 maxlen: 23
104.250.48.0/23 maxlen: 23
104.250.50.0/23 maxlen: 23
104.250.52.0/22 maxlen: 22
104.250.56.0/22 maxlen: 22
104.250.56.0/23 maxlen: 23
104.250.58.0/23 maxlen: 23
104.250.60.0/23 maxlen: 23
104.250.60.0/24 maxlen: 24
104.250.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2366 (0x93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Validity
Not Before: Jan 12 20:16:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=696556a6-2b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:9e:eb:92:b9:5d:37:b7:4a:70:09:84:35:
6c:e8:db:f6:77:3a:67:b1:2d:63:a0:04:a3:30:b7:
2c:5c:e5:49:64:e6:43:e6:b0:50:36:64:8e:d6:42:
72:a7:9b:34:c6:3b:21:0e:5c:3d:72:e1:c9:e5:dd:
bc:a6:0d:54:3b:ec:dd:20:ad:f1:a2:ed:ff:18:fe:
04:c6:b9:1e:e5:00:eb:d5:c3:21:d4:0a:68:dc:cf:
76:d5:22:75:39:97:08:e0:4e:6b:06:70:af:f4:a4:
e8:e4:2d:00:f0:43:75:46:4f:eb:f0:12:47:e8:ef:
01:5a:af:4f:1b:61:66:06:80:c0:0a:33:8f:78:42:
71:2b:9a:62:ae:fe:f6:06:ce:31:ab:c3:a1:f6:4b:
8e:18:b2:f7:69:b2:96:e5:bc:c5:8d:e7:31:2e:93:
4b:70:68:6e:ab:66:7a:eb:fc:b6:18:5f:9d:f5:b7:
51:67:78:1e:37:72:40:f7:6d:d4:4b:f5:eb:f8:b5:
0b:3a:ce:09:b1:5b:d3:81:81:4a:65:c2:0f:f0:8d:
b2:8c:83:64:9b:8c:33:d1:0a:5d:1d:2a:30:0c:09:
b4:71:cd:ea:d7:86:24:1d:f7:b2:2c:1f:8e:cb:48:
7d:0b:21:a2:8c:92:1a:85:3f:2d:c7:0d:b8:23:b3:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:98:C4:28:E1:BB:CF:D4:F4:5E:1A:FD:DC:25:0F:56:90:02:C0:F8
X509v3 Authority Key Identifier:
keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/465DBB30BA8811EAAF996D39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
104.250.32.0/22
104.250.38.0-104.250.44.255
104.250.46.0-104.250.63.255
Signature Algorithm: sha256WithRSAEncryption
63:6d:08:23:dd:14:6a:1d:cd:e1:56:76:20:ed:b8:2c:ec:4a:
09:3a:10:df:82:2d:74:86:8d:ce:7f:e2:f3:90:fa:33:a0:87:
e6:c4:bf:30:fd:9f:cc:d6:a6:70:f2:3e:18:a1:55:37:56:fe:
c1:57:e7:b9:1a:7d:4a:e5:48:2b:49:df:0a:19:89:45:e9:b6:
bc:95:d3:e9:1a:58:f6:24:02:b3:da:ed:63:dc:e5:38:45:5a:
54:14:c7:a0:61:ee:66:cf:92:a0:93:2c:42:3e:4b:49:60:e8:
32:b1:46:ca:57:45:bf:63:63:60:7a:49:5c:89:6a:2d:9c:ef:
d9:c2:66:0f:97:d5:99:47:eb:f1:8b:53:a7:8b:e7:20:16:4f:
ff:2d:d6:79:35:40:bd:2b:1f:cb:92:df:76:80:75:07:41:47:
ee:f7:eb:12:52:aa:85:14:1d:d8:9c:f0:6d:f0:78:98:64:73:
5e:5b:64:41:3b:3d:1f:6a:74:ca:07:7a:10:ad:92:5e:70:d9:
31:a0:72:ac:e2:f8:17:cb:14:18:e0:cc:10:18:76:81:95:8e:
2a:b0:80:fc:e2:a6:44:6c:e8:f5:4d:35:14:e7:e6:63:06:da:
47:4f:a4:a2:1c:30:04:8b:78:10:3e:ec:cd:96:66:52:cf:85:
1c:f4:f3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:55:19 2026 by rpki-client