This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa
File: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (raw, json)
Hash identifier: D5/phfHv7NRnNh1uVB5OcYl3HKLOcCjwwCcn5LIOY04=
Subject key identifier: 59:A8:8D:6B:B3:CF:60:9E:CE:3F:0B:45:22:AC:69:0E:10:51:5A:6D
Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial: 17B9
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa
Signing time: Thu 04 Dec 2025 16:16:03 +0000
ROA not before: Thu 04 Dec 2025 16:16:03 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 56207
IP address blocks: 139.135.192.0/22 maxlen: 22
139.135.196.0/22 maxlen: 22
139.135.200.0/22 maxlen: 22
139.135.204.0/22 maxlen: 22
139.135.208.0/22 maxlen: 22
139.135.212.0/22 maxlen: 22
139.135.216.0/22 maxlen: 22
139.135.220.0/22 maxlen: 22
139.135.224.0/22 maxlen: 22
139.135.228.0/22 maxlen: 22
139.135.232.0/22 maxlen: 22
139.135.236.0/22 maxlen: 22
139.135.240.0/22 maxlen: 22
139.135.244.0/22 maxlen: 22
139.135.248.0/22 maxlen: 22
139.135.252.0/22 maxlen: 22
139.135.252.0/23 maxlen: 23
139.135.254.0/24 maxlen: 24
139.135.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6073 (0x17b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Validity
Not Before: Dec 4 16:16:03 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6931b3c3-54b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:65:74:55:17:8c:2e:6d:4b:9a:61:62:f9:
65:ea:d7:34:c5:0b:39:cd:3d:10:c3:9c:7b:9b:65:
b3:3e:5e:50:0a:27:ed:d5:56:28:48:85:9c:6c:20:
45:d8:0f:7b:fd:e1:63:18:75:3c:94:7e:e3:b8:fa:
07:cf:ff:4d:10:fe:6d:af:c0:b2:79:6b:e4:00:22:
41:fb:e6:ba:f6:f4:cb:ca:db:99:35:fe:07:1f:29:
f5:22:32:66:d8:f6:2b:3b:cb:cd:c9:4c:01:16:15:
33:a4:cf:2e:a4:30:aa:09:a1:ba:b5:29:f2:6d:bd:
4b:1c:81:a2:95:48:72:18:21:29:57:d6:da:e2:88:
08:51:ca:d2:8b:82:07:62:94:41:d0:9f:8a:4b:8e:
e6:28:12:ba:b3:73:8c:24:76:67:c8:da:92:63:16:
4b:2c:87:59:e4:62:9d:82:12:11:04:d8:d3:15:36:
71:ed:76:81:bd:2c:bc:1b:ac:77:11:b6:c3:d7:43:
e3:61:e4:21:ee:73:13:39:5e:0c:72:ab:c0:62:ee:
53:a3:c9:68:cb:84:37:0b:fd:43:42:47:4d:07:ac:
bf:94:57:d5:dd:81:c2:d8:90:ba:bf:39:fe:9f:b0:
d3:97:2e:d9:d7:3c:dd:28:48:68:2c:3f:3a:54:2d:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A8:8D:6B:B3:CF:60:9E:CE:3F:0B:45:22:AC:69:0E:10:51:5A:6D
X509v3 Authority Key Identifier:
keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.135.192.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:ea:a7:c2:ae:1b:3e:ab:f2:ee:ec:63:51:bc:34:c8:35:60:
22:ea:50:88:95:d8:c4:7c:2e:80:1d:4f:fe:9f:bd:23:0c:1e:
5e:59:d4:87:ae:6a:97:a0:f7:4f:05:28:dd:0b:31:bf:b4:53:
07:02:63:b7:41:bd:fe:c8:53:6c:10:73:42:0f:cb:bb:6b:5f:
5b:ed:2c:f1:86:61:83:b4:8f:3b:55:c5:a8:7d:13:f5:b1:c8:
23:c3:87:c2:77:69:ae:8e:6d:40:66:94:e1:69:b6:93:92:92:
0f:72:f3:3d:b2:c3:01:e5:eb:94:2f:0b:40:2a:81:14:2d:0e:
b3:ac:30:86:2b:2b:2d:f9:69:1c:bc:61:f0:d1:f0:ec:d2:87:
24:75:6a:4a:04:78:5c:50:67:59:26:97:c0:01:30:25:cc:85:
61:cc:b4:93:50:58:83:9f:de:d7:e5:55:95:1e:de:e9:cb:22:
3b:f6:08:5c:10:38:13:ee:4c:a0:d5:7c:77:ae:5e:c4:08:8c:
9d:39:0c:d6:bd:34:25:7e:bb:a5:f0:5a:79:14:78:8d:bb:88:
bd:92:f2:a4:b1:2a:26:ea:ef:a6:c1:ac:49:b5:d6:2f:53:45:
6d:0a:cc:f1:91:fd:d4:ba:02:1c:38:59:64:1a:53:45:40:6a:
f7:9f:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 23:47:10 2025 by rpki-client