This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/4AD34C1AC05A11F0B864644DC4F9AE02.roa File: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (raw, json) Hash identifier: hF8DeZYpmqlhlmu2g+0RpyAdwYJmeUUmrRx6H3p2TpM= Subject key identifier: ED:E1:0A:3E:B3:1C:E5:8B:CF:BA:AE:B2:A9:6B:68:3C:45:CB:FA:BB Certificate issuer: /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7 Certificate serial: 07 Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/4AD34C1AC05A11F0B864644DC4F9AE02.roa Signing time: Thu 13 Nov 2025 06:44:39 +0000 ROA not before: Thu 13 Nov 2025 06:44:39 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153610 IP address blocks: 138.252.198.0/23 maxlen: 23 138.252.198.0/24 maxlen: 24 138.252.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7 Validity Not Before: Nov 13 06:44:39 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69157e57-b064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:e8:b8:3d:43:45:8c:e5:43:71:c0:de:c5: c0:0d:6e:d4:02:a8:79:b5:97:ab:63:b7:a5:4c:a1: 49:fa:19:e6:17:95:59:20:d0:23:b1:de:4f:1c:99: 3f:52:59:d5:b5:92:f1:b4:b2:d5:46:15:ef:8e:52: 45:39:59:06:27:18:84:f2:46:5b:36:92:f2:fa:c2: 91:22:09:bb:09:81:f5:1b:fb:6a:83:79:78:ea:39: a2:90:41:a2:e6:a9:e2:eb:f5:43:bd:a3:44:1b:c6: 9d:9c:39:c8:17:ed:26:f7:24:78:e9:e7:73:50:fd: 4e:ef:75:a8:6a:d5:1f:b7:60:1d:a5:e0:9b:73:8e: e5:5f:f8:05:53:80:76:3f:76:cf:d0:90:ad:4b:b7: 2b:b1:9b:0a:47:93:c7:9a:99:7b:2c:f7:f0:7d:af: a8:7b:db:eb:cf:79:a8:c6:37:09:91:b3:09:3e:43: 28:6c:5f:53:ec:57:c6:0c:3e:86:82:ee:08:0d:46: 58:29:83:5b:4b:10:bc:33:41:19:3c:18:76:6b:f2: d5:7d:9b:2c:60:c9:96:aa:e4:c6:33:dd:87:18:09: 25:e6:8e:ad:03:47:a1:f7:83:fa:f3:b6:49:58:73: 3b:6b:b6:4d:53:c7:6a:0a:b4:c5:51:68:b3:f6:f6: 8c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E1:0A:3E:B3:1C:E5:8B:CF:BA:AE:B2:A9:6B:68:3C:45:CB:FA:BB X509v3 Authority Key Identifier: keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/4AD34C1AC05A11F0B864644DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.198.0/23 Signature Algorithm: sha256WithRSAEncryption 90:89:22:ef:d4:89:b6:5d:f9:aa:6a:cc:53:66:86:86:e9:77: 97:7a:de:ec:ff:33:56:18:ea:a4:42:35:bf:6b:29:de:0b:21: a9:48:4f:cd:36:b5:a9:06:57:d3:c9:53:73:22:ab:1f:ac:15: 14:bd:b5:1a:76:d4:90:99:b4:bc:ba:14:e1:fa:34:32:37:c0: eb:3c:b7:c4:06:fe:2c:c7:32:1f:21:e4:59:fc:dd:6f:98:ed: fa:20:88:0b:c2:59:14:76:89:0d:f5:63:ca:0a:81:1a:4a:2b: 37:18:2c:5d:6c:b8:53:11:e2:3a:7b:b9:3b:f3:69:42:37:1e: 9d:bb:8e:41:1a:60:12:09:13:56:8e:21:63:c6:75:3a:54:4d: b6:a8:39:2d:5d:ec:1b:02:c5:0d:19:38:f1:81:63:79:eb:fe: ea:26:4a:28:30:ee:12:d6:64:85:9e:23:48:bb:02:f5:dd:18: 1a:55:73:fb:15:71:dd:83:98:a6:c0:05:79:d6:4a:6e:d4:99: 9a:a4:73:af:81:6a:bb:6d:24:ec:11:8b:dd:29:d3:aa:06:42: 34:d4:d6:df:ea:d1:24:ef:24:2f:d2:0b:65:79:07:35:da:9e: 3d:87:c5:9b:9a:e0:4e:c8:55:9c:7b:4b:0b:a7:01:1f:4d:e5: b2:92:54:2a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTM4QTExMC8GA1UEBRMoQjdGQjgzRDFDOUMyRjdDMzhCNzAwMjcxNDY0QUMyMzM2 NEUyRTdENzAeFw0yNTExMTMwNjQ0MzlaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MTU3ZTU3LWIwNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGs+i4PUNFjOVDccDexcANbtQCqHm1l6tjt6VMoUn6GeYXlVkg0COx3k8cmT9S WdW1kvG0stVGFe+OUkU5WQYnGITyRls2kvL6wpEiCbsJgfUb+2qDeXjqOaKQQaLm qeLr9UO9o0Qbxp2cOcgX7Sb3JHjp53NQ/U7vdahq1R+3YB2l4JtzjuVf+AVTgHY/ ds/QkK1LtyuxmwpHk8eamXss9/B9r6h72+vPeajGNwmRswk+QyhsX1PsV8YMPoaC 7ggNRlgpg1tLELwzQRk8GHZr8tV9myxgyZaq5MYz3YcYCSXmjq0DR6H3g/rztklY cztrtk1Tx2oKtMVRaLP29oxRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU7eEKPrMc 5YvPuq6yqWtoPEXL+rswHwYDVR0jBBgwFoAUt/uD0cnC98OLcAJxRkrCM2Ti59cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMzhBL0E0MEQ0NUYwQzA0 NzExRjBBNzBGN0I3OEM0RjlBRTAyL3RfdUQwY25DOThPTGNBSnhSa3JDTTJUaTU5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdF91RDBjbkM5OE9MY0FKeFJrckNNMlRpNTljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTM4QS9BNDBENDVGMEMwNDcxMUYwQTcwRjdCNzhDNEY5QUUwMi80QUQzNEMxQUMw NUExMUYwQjg2NDY0NERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8xjANBgkqhkiG9w0BAQsFAAOCAQEAkIki79SJtl35qmrM U2aGhul3l3re7P8zVhjqpEI1v2sp3gshqUhPzTa1qQZX08lTcyKrH6wVFL21GnbU kJm0vLoU4fo0MjfA6zy3xAb+LMcyHyHkWfzdb5jt+iCIC8JZFHaJDfVjygqBGkor NxgsXWy4UxHiOnu5O/NpQjcenbuOQRpgEgkTVo4hY8Z1OlRNtqg5LV3sGwLFDRk4 8YFjeev+6iZKKDDuEtZkhZ4jSLsC9d0YGlVz+xVx3YOYpsAFedZKbtSZmqRzr4Fq u20k7BGL3SnTqgZCNNTW3+rRJO8kL9ILZXkHNdqePYfFm5rgTshVnHtLC6cBH03l spJUKg== -----END CERTIFICATE-----Generated at Wed Dec 3 16:34:20 2025 by rpki-client