This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa
File: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (raw, json)
Hash identifier: Vr8pXD8G4eSp3CxAKl8qQ0s6JHPMaTbvSElZhIh+h1I=
Subject key identifier: 8C:F3:E7:11:E5:93:64:BA:C8:36:EC:A8:4F:0F:89:06:25:17:62:14
Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Certificate serial: CA
Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa
Signing time: Mon 05 Jan 2026 05:28:02 +0000
ROA not before: Mon 05 Jan 2026 05:28:02 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 210000
IP address blocks: 160.250.164.0/24 maxlen: 24
160.250.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Validity
Not Before: Jan 5 05:28:02 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=695b4be1-1dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:13:3e:02:cf:df:a6:0f:18:a8:d7:a1:4f:
43:48:31:34:34:bc:3c:41:7d:28:3d:83:c4:b0:c2:
73:18:5e:b7:99:61:c7:04:ab:73:60:f5:1f:76:0b:
49:0c:af:52:93:c7:0f:0a:6b:ae:8c:25:c2:9e:0a:
a0:1c:80:b3:b7:72:2c:97:87:bf:1a:39:49:fe:72:
40:e8:32:fa:68:37:7b:82:00:b3:f8:57:fc:40:ba:
b9:89:fa:87:ef:36:5b:3d:1c:b7:a1:13:61:27:b7:
b6:23:e1:99:2f:05:49:30:40:c3:6b:b3:bb:9b:fb:
2e:dc:05:cd:9d:89:2c:8f:f2:50:27:9e:45:aa:71:
74:9e:8b:11:89:e6:fa:3e:b9:c2:65:10:5d:d2:e6:
16:2c:ac:f0:5a:ac:69:84:8b:21:b6:09:8b:59:b9:
a8:62:1b:96:95:a8:ca:c9:ae:38:59:f0:f8:7c:9d:
8b:b5:08:c2:21:17:90:c9:6d:62:5f:a0:da:3d:14:
3c:8e:26:b2:03:e4:a3:2a:b7:0f:90:26:b7:ce:e9:
52:d0:c4:ac:ad:fd:80:05:d5:5f:7a:b4:a4:50:1e:
ce:d1:b7:8b:09:de:aa:90:b3:6b:be:10:0a:e9:0f:
25:c6:a5:ff:65:69:4c:3e:01:3a:56:35:3e:77:09:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F3:E7:11:E5:93:64:BA:C8:36:EC:A8:4F:0F:89:06:25:17:62:14
X509v3 Authority Key Identifier:
keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.164.0/23
Signature Algorithm: sha256WithRSAEncryption
18:c6:ca:82:5e:cf:b7:c5:33:85:46:52:8c:d7:52:25:99:45:
38:a9:2f:1b:c4:c7:8e:03:3d:86:28:0c:d7:b3:15:e8:c5:a5:
d8:0e:35:3f:df:ad:1b:0c:b0:90:18:66:eb:44:fb:6c:88:4b:
90:61:45:f2:f2:4b:30:3a:f5:ea:9d:8b:75:87:37:8c:d2:78:
7f:dc:0e:19:94:86:69:a5:7c:15:78:46:28:1c:aa:a2:19:7d:
65:a7:ce:ba:17:89:6b:12:60:d6:5c:c7:60:c6:40:89:3b:18:
21:8a:b3:bf:0e:8a:61:6c:5e:76:31:73:e0:12:76:3a:39:01:
45:c5:89:2f:5d:37:08:4a:d0:3c:e1:7a:20:7d:9f:ca:05:b4:
78:b9:0e:e0:1f:90:95:58:e3:a7:29:9f:49:08:89:d3:a9:55:
47:7a:39:4e:9f:61:ad:39:70:9d:1b:53:98:b7:97:39:d3:ca:
13:00:1c:4b:8b:c1:1e:63:79:ec:e1:94:f8:eb:d5:af:fc:2b:
08:7b:99:2d:64:87:c1:c8:16:b5:e8:e1:4b:27:59:82:91:9e:
5c:49:ca:ae:13:14:1b:b3:83:23:5d:8e:88:3a:dc:9e:5f:d7:
d0:79:fb:7f:15:58:b2:36:5b:3d:c9:fd:dc:6a:f2:33:a1:d4:
9d:7a:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:11:48 2026 by rpki-client