This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/1B88FC66823D11EC8E3CB427C4F9AE02.roa
File: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (raw, json)
Hash identifier: Vz/yZ3uJknXVV4RRR0VGJRxhZubCyof4N6AcFnaH7rc=
Subject key identifier: A9:19:F8:61:1B:E8:18:7C:34:57:35:5F:FE:86:B5:89:CC:E6:B1:27
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0FB0
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/1B88FC66823D11EC8E3CB427C4F9AE02.roa
Signing time: Wed 14 Jan 2026 18:15:11 +0000
ROA not before: Wed 14 Jan 2026 18:15:11 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 45250
IP address blocks: 220.232.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4016 (0xfb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jan 14 18:15:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6967dd2f-0129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:73:42:bb:5e:bc:49:6b:a2:b1:3c:f1:13:
1b:ad:c5:20:fd:51:c2:10:45:39:2e:22:ba:f0:18:
b6:f6:08:ba:6e:af:ca:a1:73:14:77:f3:05:ee:91:
33:54:c0:ff:9f:47:5d:56:d3:a8:9d:cc:47:8a:d9:
9b:7c:d1:d4:10:7e:3d:de:7b:18:2a:ba:2e:eb:a7:
83:d4:d1:22:02:0e:74:5e:bb:73:6e:20:51:10:b9:
12:ce:f7:ca:07:23:3b:1f:80:36:70:a0:39:e4:c8:
84:76:c5:5d:c4:87:a3:b0:32:b1:16:04:04:f8:c5:
cb:74:e1:f8:76:4a:f7:4a:84:2d:a2:c5:a1:59:73:
23:c2:06:f5:d8:db:12:14:99:88:de:95:56:cc:ee:
2b:f4:64:53:87:5e:93:a4:87:5d:da:25:1d:df:05:
0d:ce:73:f6:8a:47:2e:f0:9e:86:1a:c7:20:bd:13:
cf:6f:2c:29:d3:e0:42:9d:77:fc:f7:23:ae:94:16:
a6:bf:b8:3f:a8:dc:aa:11:40:04:90:7e:49:98:c9:
d4:6c:36:b7:68:94:36:34:f9:6a:7e:88:d6:1e:71:
1e:a4:2d:e7:e6:d5:f9:10:32:4b:3f:37:c0:b7:78:
8b:2d:9e:66:8a:e9:c8:1a:4e:c8:d2:8d:18:68:bb:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:19:F8:61:1B:E8:18:7C:34:57:35:5F:FE:86:B5:89:CC:E6:B1:27
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/1B88FC66823D11EC8E3CB427C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.232.180.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:cc:09:85:9d:02:0c:df:da:e2:9d:22:bb:5f:ab:27:cf:93:
76:e1:ea:25:b9:8e:98:62:a6:86:1b:79:ec:95:33:6d:b4:ea:
5e:df:aa:e7:6a:d6:ab:f3:85:8e:07:d4:c6:6f:fd:31:c3:a9:
c3:8c:2b:43:b2:0a:7c:ec:ca:d6:c2:94:71:af:05:73:6c:c5:
e4:a0:17:67:4c:6e:35:c5:0f:c7:0c:eb:81:8a:b4:d1:8d:60:
87:34:14:30:e7:fb:0c:ca:2b:1f:49:35:ad:58:11:f3:50:65:
fa:8f:79:fe:fe:d8:ef:72:43:59:5a:f1:44:85:53:f0:61:d2:
2f:de:66:4c:46:7f:a2:c9:36:47:5e:cb:12:0c:d4:cc:17:0f:
d6:c1:1b:f2:8d:99:44:ff:60:9e:d2:0b:c5:14:c3:10:f0:42:
f4:80:00:80:6f:e2:7b:3f:10:59:c6:70:c0:f3:ae:86:ab:22:
62:ee:31:e9:41:81:89:4e:0c:89:2d:6d:eb:21:29:ac:c2:17:
f9:04:97:73:4d:bd:34:f4:c9:2b:b2:05:48:a1:5a:45:35:95:
1a:79:de:4d:46:b6:f0:17:6f:5b:93:b4:36:cb:c3:23:32:fb:
1a:c4:df:fe:be:6c:ec:65:c9:4e:4c:78:19:f2:4f:b9:9b:f4:
81:22:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:30:19 2026 by rpki-client