This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/40310456D8D211EB97FF5586C4F9AE02.roa
File: 40310456D8D211EB97FF5586C4F9AE02.roa (raw, json)
Hash identifier: soj+i4O+7dTLGp8Ucrvcm5QUthVqueaPz4jMTEouFXE=
Subject key identifier: 97:78:46:03:70:D0:BF:86:51:B8:6F:20:AF:E4:CF:84:74:9D:D4:B0
Certificate issuer: /CN=A91E4D3D/serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F
Certificate serial: 061F
Authority key identifier: 68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/40310456D8D211EB97FF5586C4F9AE02.roa
Signing time: Thu 22 Jan 2026 22:19:06 +0000
ROA not before: Thu 22 Jan 2026 22:19:06 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 13150
IP address blocks: 140.82.192.0/24 maxlen: 24
140.82.193.0/24 maxlen: 24
140.82.194.0/24 maxlen: 24
140.82.195.0/24 maxlen: 24
140.82.196.0/24 maxlen: 24
140.82.198.0/24 maxlen: 24
140.82.199.0/24 maxlen: 24
140.82.200.0/24 maxlen: 24
140.82.201.0/24 maxlen: 24
140.82.202.0/24 maxlen: 24
140.82.203.0/24 maxlen: 24
140.82.204.0/24 maxlen: 24
140.82.205.0/24 maxlen: 24
140.82.206.0/24 maxlen: 24
140.82.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl
rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1567 (0x61f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D3D, serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F
Validity
Not Before: Jan 22 22:19:06 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6972a25a-9aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:c3:ae:9e:65:ec:ac:13:7c:40:7a:df:ca:
d6:1e:98:aa:91:eb:d7:b8:33:53:b2:6f:e8:df:21:
7c:05:72:ac:b3:a1:05:64:cc:22:70:dd:72:5d:39:
9b:de:41:70:1c:85:9c:27:1f:a5:07:72:ac:40:fe:
8a:76:a8:9a:b1:d0:b0:2e:b1:79:19:ac:04:91:0b:
5b:7b:c0:d9:d7:0e:06:3e:df:b8:46:48:da:4f:0c:
dc:b9:40:74:1f:4e:a7:74:c8:29:d7:cf:cb:b6:31:
fe:70:17:d7:11:84:44:4a:02:c9:56:80:38:39:0c:
00:44:ad:5b:9e:47:d7:6f:3e:89:d1:f9:61:ba:8e:
f2:2c:37:3e:34:77:65:9f:50:89:ee:73:40:77:70:
42:75:71:e5:06:a6:4a:43:97:a3:36:04:42:58:5c:
16:05:45:ad:81:fb:eb:71:cd:20:e1:a0:52:e9:24:
f4:bc:ff:2c:2f:64:b7:f3:46:d9:ca:02:4e:97:4f:
85:d4:2a:a1:0f:fe:64:4d:9d:a3:70:88:b4:14:27:
01:56:9a:2e:16:8c:54:22:64:45:32:3c:76:48:3e:
1b:ae:97:b8:c3:d6:eb:8e:6b:3c:e1:e8:cf:0a:08:
ba:5a:ea:c4:f7:55:96:3c:10:87:cb:18:ba:c2:f3:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:78:46:03:70:D0:BF:86:51:B8:6F:20:AF:E4:CF:84:74:9D:D4:B0
X509v3 Authority Key Identifier:
keyid:68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/40310456D8D211EB97FF5586C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
140.82.192.0-140.82.196.255
140.82.198.0-140.82.207.255
Signature Algorithm: sha256WithRSAEncryption
48:87:3d:23:d4:37:b5:bb:91:8d:f5:85:a7:68:00:a2:f8:af:
3a:18:49:71:75:fb:8c:aa:bb:a9:76:cc:2b:81:4b:09:3b:58:
9e:d8:de:ac:22:71:3e:6c:96:01:68:db:76:2d:32:43:ac:bb:
4b:65:2d:ed:c3:32:66:70:fd:ed:78:7f:6d:ce:95:7c:96:b5:
09:dd:c0:9d:d0:02:20:7d:71:1b:97:c3:85:ea:3b:b4:ab:4c:
e5:fd:fc:11:c0:a0:93:cf:2a:17:cf:0c:bb:4d:fb:8e:8a:f2:
e6:0c:5f:3b:35:33:2d:a5:33:8b:9f:8a:6d:8e:6e:e3:67:66:
17:57:64:5e:28:8a:83:c3:05:06:87:91:ee:40:04:ef:b8:ff:
c1:5e:9e:24:28:e2:86:13:6c:29:04:c9:8e:5d:2c:c2:d6:5d:
b3:a7:2f:66:01:24:a8:4f:59:c4:35:5a:17:47:fd:f5:f8:7f:
b1:14:bf:4d:21:b8:eb:ad:3b:58:c3:c7:42:6b:5b:6e:c0:f8:
7f:13:d1:c0:54:0b:dc:bd:7b:c6:99:4f:12:41:ad:df:65:75:
72:77:18:57:5b:62:a5:ad:24:d8:c8:62:88:0b:af:89:94:35:
be:af:c2:4b:ad:1e:9c:29:b1:74:fe:2a:24:89:9e:8b:51:61:
8c:b7:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:03 2026 by rpki-client