This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DC334248DA5211F08B25A6E192D3641D.roa
File: DC334248DA5211F08B25A6E192D3641D.roa (raw, json)
Hash identifier: /gJXXPVQq9vG3NP0QoCvMYsQ1wpCCayu68y1jEAQEA4=
Subject key identifier: 17:FF:53:7D:6B:A3:B0:59:3A:45:D5:7E:20:7F:49:D4:98:A5:D4:9D
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 11A2
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DC334248DA5211F08B25A6E192D3641D.roa
Signing time: Tue 16 Dec 2025 07:43:54 +0000
ROA not before: Tue 16 Dec 2025 07:43:54 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 397373
IP address blocks: 139.190.234.0/24 maxlen: 24
139.190.235.0/24 maxlen: 24
139.190.236.0/24 maxlen: 24
139.190.237.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4514 (0x11a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Dec 16 07:43:54 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69410dba-2e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:8d:e5:d5:e8:f8:79:74:db:fc:d4:99:7a:
46:cb:a1:07:81:62:bc:8f:ad:e3:39:0d:52:41:44:
37:f5:aa:b9:e6:85:75:08:3d:3f:d2:2b:1a:ee:83:
c3:17:b2:f2:7c:75:6b:c9:c2:64:93:c3:cb:22:f6:
f3:5d:5d:51:fa:6f:b5:8e:b6:56:da:09:33:a7:7e:
1f:8a:2c:1b:f9:92:c4:82:70:b9:a6:f2:49:b1:03:
48:14:2d:cd:20:34:d4:2e:52:02:a8:c7:2b:11:13:
7d:23:7c:57:5a:ae:2f:c7:b7:b9:66:22:93:22:a5:
ed:54:3c:d2:18:43:5e:16:86:95:10:e0:a5:d1:9c:
e6:95:1e:b8:03:f8:20:91:37:50:a7:55:cb:f6:03:
0f:e8:e2:7d:fb:40:85:1b:51:c1:12:9d:c1:94:68:
0f:ec:b3:45:9e:2d:3b:64:d4:87:aa:9f:40:a3:cc:
17:c4:78:bc:ab:9c:0c:25:33:61:f4:19:4f:f3:41:
d0:c0:7b:34:77:79:92:e2:ee:3e:d0:6a:3f:5a:7e:
96:7a:ff:e7:f4:19:ae:33:69:70:b5:0d:57:38:ba:
94:0f:b9:0f:63:5e:cb:0b:b9:97:a8:75:4b:c1:eb:
ca:26:3e:dd:d0:e4:a6:86:f0:77:8b:ad:0d:78:71:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:53:7D:6B:A3:B0:59:3A:45:D5:7E:20:7F:49:D4:98:A5:D4:9D
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DC334248DA5211F08B25A6E192D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.234.0-139.190.239.255
Signature Algorithm: sha256WithRSAEncryption
2d:f7:07:f6:dc:70:35:f1:0f:3f:fc:75:2b:d8:d0:8a:68:58:
7d:97:2a:0d:60:63:af:25:7b:7e:ab:1b:7c:82:e1:f9:c7:0d:
21:50:32:33:6d:24:e7:94:c6:12:0c:9e:b5:a5:f2:f6:96:fa:
e0:f4:1b:65:dc:97:87:98:3f:3e:b1:c3:ea:fc:09:71:d6:3a:
2c:2d:0e:1a:81:7a:d6:b5:30:3d:61:a4:ac:e0:05:5e:7b:4d:
36:e8:42:68:f6:2a:c8:64:e7:16:8d:a9:dd:2d:74:be:32:d8:
7e:07:38:5b:9c:4d:8c:27:db:dc:9c:77:49:a8:8d:e6:06:b3:
89:c7:59:8e:d7:2a:ed:ad:70:6b:b6:3f:f3:a8:bc:19:2f:5d:
51:9c:56:9d:0d:84:64:1f:44:04:ed:6e:1d:4d:58:41:7c:30:
6c:a9:2a:e5:c1:4d:33:9d:e5:03:59:06:97:85:01:68:b8:0e:
c7:88:cd:45:39:27:d3:5d:8d:1f:b0:24:d2:d1:06:13:10:39:
fe:73:4d:00:99:bf:94:37:a0:d2:73:15:9d:92:07:1a:78:30:
5a:d2:03:5b:04:9c:56:e8:f9:e1:e6:3a:0c:01:60:ef:ab:b5:
5e:83:1f:7d:ab:fe:da:55:70:e5:a8:ef:0f:ce:64:f5:26:20:
a1:8b:95:ea
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICEaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjUxMjE2MDc0MzU0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQxMGRiYS0yZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5UCN5dXo+Hl02/zUmXpGy6EHgWK8j63jOQ1SQUQ39aq55oV1CD0/0isa7oPD
F7LyfHVrycJkk8PLIvbzXV1R+m+1jrZW2gkzp34fiiwb+ZLEgnC5pvJJsQNIFC3N
IDTULlICqMcrERN9I3xXWq4vx7e5ZiKTIqXtVDzSGENeFoaVEOCl0ZzmlR64A/gg
kTdQp1XL9gMP6OJ9+0CFG1HBEp3BlGgP7LNFni07ZNSHqp9Ao8wXxHi8q5wMJTNh
9BlP80HQwHs0d3mS4u4+0Go/Wn6Wev/n9BmuM2lwtQ1XOLqUD7kPY17LC7mXqHVL
wevKJj7d0OSmhvB3i60NeHGx3wIDAQABo4ICnTCCApkwHQYDVR0OBBYEFBf/U31r
o7BZOkXVfiB/SdSYpdSdMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvREMzMzQyNDhE
QTUyMTFGMDhCMjVBNkUxOTJEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAYu+6gMEBIu+4DANBgkqhkiG9w0BAQsFAAOCAQEALfcH
9txwNfEPP/x1K9jQimhYfZcqDWBjryV7fqsbfILh+ccNIVAyM20k55TGEgyetaXy
9pb64PQbZdyXh5g/PrHD6vwJcdY6LC0OGoF61rUwPWGkrOAFXntNNuhCaPYqyGTn
Fo2p3S10vjLYfgc4W5xNjCfb3Jx3SaiN5gazicdZjtcq7a1wa7Y/86i8GS9dUZxW
nQ2EZB9EBO1uHU1YQXwwbKkq5cFNM53lA1kGl4UBaLgOx4jNRTkn012NH7Ak0tEG
ExA5/nNNAJm/lDeg0nMVnZIHGngwWtIDWwScVuj54eY6DAFg76u1XoMffav+2lVw
5ajvD85k9SYgoYuV6g==
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:24:18 2025 by rpki-client