This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/3139D35EBFA811EFA9B7DC2AC4F9AE02.roa File: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (raw, json) Hash identifier: d+YMDhO3s7LHfQoIYFn1Zc+4TdSQTJryf2fvTzdJLEU= Subject key identifier: FC:F2:70:F7:A6:7E:57:CC:F9:55:4C:06:F8:FA:CA:1C:59:AA:57:A1 Certificate issuer: /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Certificate serial: D7 Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/3139D35EBFA811EFA9B7DC2AC4F9AE02.roa Signing time: Mon 19 Jan 2026 05:24:57 +0000 ROA not before: Mon 19 Jan 2026 05:24:57 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 151133 IP address blocks: 161.248.0.0/23 maxlen: 23 161.248.0.0/24 maxlen: 24 161.248.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Validity Not Before: Jan 19 05:24:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=696dc029-d963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e6:81:40:fe:65:be:c9:01:ea:76:86:d3:12: 60:7f:e3:71:34:1f:fb:a4:7f:76:03:0e:3b:d5:ae: 98:10:cb:90:e4:ab:f7:70:54:18:27:c6:3c:16:11: 29:9e:9e:9d:34:77:23:6f:77:aa:d6:e6:12:ed:44: f1:89:62:32:24:d7:be:79:43:77:55:dd:86:7b:2d: 07:ea:18:a1:17:36:af:5c:e7:c1:11:0a:32:54:74: ae:4f:ee:12:62:06:89:2d:83:cf:79:c8:06:30:7b: e9:c3:2b:46:8e:37:61:15:b5:e5:b8:5b:4f:d7:42: 80:c3:63:b7:37:dd:6d:20:64:f4:52:8d:ec:49:31: bb:d3:71:33:e5:a5:e4:bf:5c:04:d5:d0:40:05:66: 54:c5:b8:5e:9f:72:c5:cc:80:5e:5c:94:84:1e:3d: dd:81:22:54:2e:5d:bb:72:68:12:69:6d:fd:22:1c: 12:32:9b:a9:da:4f:bc:b6:49:d8:41:07:6e:1c:66: 17:d4:6a:4c:5b:ee:4d:80:a1:11:2a:72:0d:9b:7d: f0:6b:d9:bc:b3:b9:3c:12:69:14:ee:0d:52:d6:4b: 3c:b7:78:67:d2:c2:4e:c3:27:86:c5:03:52:5e:2d: 89:27:5d:35:c6:43:13:7b:a3:e1:b5:bb:b7:67:2e: 6b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F2:70:F7:A6:7E:57:CC:F9:55:4C:06:F8:FA:CA:1C:59:AA:57:A1 X509v3 Authority Key Identifier: keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/3139D35EBFA811EFA9B7DC2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.0.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:21:60:58:a0:4a:f4:da:b6:d7:a6:46:4e:c2:64:e0:ea:c8: d4:56:b4:14:1a:15:29:d2:e6:48:a1:d1:8c:fe:8c:85:9d:6b: d2:d0:a8:4d:6b:ce:4c:8e:d3:de:f1:27:a5:06:cc:c1:95:ec: 04:dc:c3:73:e9:29:41:72:d2:e2:97:85:3b:6a:2f:1a:8c:32: bc:06:ac:04:89:e9:57:c7:75:1d:49:29:34:f1:de:fc:3f:a6: 30:12:73:f2:80:86:f1:0c:53:05:1f:49:d3:07:fb:ce:48:2e: a9:a8:73:c0:ea:9d:91:23:a9:0a:4f:ba:97:00:47:76:61:b2: ca:a0:de:0e:5a:1b:59:2e:db:cb:6c:77:e9:06:05:55:65:83: 22:6b:c6:cc:3b:6a:81:7f:4d:fa:d6:50:25:0f:17:ae:68:71: 1b:33:f3:ed:15:35:5e:36:47:69:32:dd:6d:66:b8:a6:e8:c3: ed:c8:4f:36:1c:34:a8:57:a5:40:e8:17:3a:44:75:fa:fb:ae: 49:48:61:b1:d5:48:9c:df:ad:04:be:37:e9:21:d6:10:30:23: 78:e1:d7:f2:90:08:26:04:59:c7:5e:8f:62:d2:27:2e:1a:1b: db:c1:e8:7d:4c:25:86:e1:e9:60:c4:8a:aa:91:39:24:50:6b: e1:d1:77:8c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RThCRTMxMTAvBgNVBAUTKDZGRDA4ODdBMzkwM0UzRDZFMTdCQjlDRkQ4RUYyNjky NzBCQUNCMDcwHhcNMjYwMTE5MDUyNDU3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZkYzAyOS1kOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eaBQP5lvskB6naG0xJgf+NxNB/7pH92Aw471a6YEMuQ5Kv3cFQYJ8Y8FhEp np6dNHcjb3eq1uYS7UTxiWIyJNe+eUN3Vd2Gey0H6hihFzavXOfBEQoyVHSuT+4S YgaJLYPPecgGMHvpwytGjjdhFbXluFtP10KAw2O3N91tIGT0Uo3sSTG703Ez5aXk v1wE1dBABWZUxbhen3LFzIBeXJSEHj3dgSJULl27cmgSaW39IhwSMpup2k+8tknY QQduHGYX1GpMW+5NgKERKnINm33wa9m8s7k8EmkU7g1S1ks8t3hn0sJOwyeGxQNS Xi2JJ101xkMTe6Phtbu3Zy5rrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPzycPem flfM+VVMBvj6yhxZqlehMB8GA1UdIwQYMBaAFG/QiHo5A+PW4Xu5z9jvJpJwussH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJFMy9FNkU2QkU0NEJG OUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5YmhlN25QMk84bWtuQzZ5 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2I5Q0llamtENDliaGU3blAyTzhta25DNnl3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThCRTMvRTZFNkJFNDRCRjlDMTFFRjlEQTg4MjgyQzRGOUFFMDIvMzEzOUQzNUVC RkE4MTFFRkE5QjdEQzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGh+AAwDQYJKoZIhvcNAQELBQADggEBAGshYFigSvTattem Rk7CZODqyNRWtBQaFSnS5kih0Yz+jIWda9LQqE1rzkyO097xJ6UGzMGV7ATcw3Pp KUFy0uKXhTtqLxqMMrwGrASJ6VfHdR1JKTTx3vw/pjASc/KAhvEMUwUfSdMH+85I Lqmoc8DqnZEjqQpPupcAR3Zhssqg3g5aG1ku28tsd+kGBVVlgyJrxsw7aoF/TfrW UCUPF65ocRsz8+0VNV42R2ky3W1muKbow+3ITzYcNKhXpUDoFzpEdfr7rklIYbHV SJzfrQS+N+kh1hAwI3jh1/KQCCYEWcdej2LSJy4aG9vB6H1MJYbh6WDEiqqROSRQ a+HRd4w= -----END CERTIFICATE-----Generated at Sun Jan 25 15:24:47 2026 by rpki-client