This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/970D44E2C54F11F0A154DD09C4F9AE02.roa File: 970D44E2C54F11F0A154DD09C4F9AE02.roa (raw, json) Hash identifier: o7zQq18IhpXsDy9Xt660Zyl7qDNpUt6Y0sraKZYBzJU= Subject key identifier: 79:55:88:4F:7F:DC:E2:2D:EE:AF:66:06:45:ED:0A:96:80:C7:AF:C8 Certificate issuer: /CN=A918306F/serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2 Certificate serial: 02 Authority key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/970D44E2C54F11F0A154DD09C4F9AE02.roa Signing time: Wed 19 Nov 2025 13:56:48 +0000 ROA not before: Wed 19 Nov 2025 13:56:48 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154373 IP address blocks: 138.252.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2 Validity Not Before: Nov 19 13:56:48 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=691dcc9f-3841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:a3:b6:81:f9:7a:58:b8:d6:1c:35:f0:78: c8:a1:d5:ef:7e:99:16:4f:bd:cc:42:fd:11:60:01: 69:55:0e:ee:58:48:da:22:74:03:00:3f:01:12:f9: cf:c5:e5:ab:7a:1e:1b:06:1c:ce:e4:ba:57:37:fd: f7:b0:94:50:eb:cf:6b:bc:8e:cd:81:13:bd:0a:cc: 5e:ab:26:ce:04:7d:d3:3f:9a:9a:30:02:63:5b:01: 31:67:29:2c:ef:72:34:f2:ed:de:5b:c5:35:20:ed: cf:1e:87:7c:b6:9d:c7:be:cb:f3:15:c9:50:82:9f: 5e:28:a4:59:52:3a:f9:c4:fe:2a:de:52:f2:f6:25: 05:51:0b:a5:39:0b:97:ca:96:b9:56:3d:fc:21:dc: fa:66:25:69:35:76:59:f7:a2:74:93:e9:c9:15:ae: 39:91:ae:e0:b2:de:49:5a:c7:98:92:e7:47:ae:b0: af:fb:e4:42:57:6a:07:4a:e7:84:52:87:b6:56:e3: e9:33:ec:07:4e:d5:98:04:fb:04:90:e5:10:bc:3d: ad:16:cf:2a:37:f9:27:44:25:0c:95:cf:89:26:c2: 8b:d6:83:27:31:1b:17:85:ec:67:d8:5c:90:91:56: 93:ef:38:67:01:9a:26:cd:70:3a:9a:a3:c5:92:ac: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:55:88:4F:7F:DC:E2:2D:EE:AF:66:06:45:ED:0A:96:80:C7:AF:C8 X509v3 Authority Key Identifier: keyid:0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/970D44E2C54F11F0A154DD09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.224.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:f6:eb:46:d5:a0:cb:56:57:79:24:00:11:58:c1:27:4e:4f: 55:a8:b8:87:16:2b:7d:2b:23:7d:75:20:3f:65:bb:61:04:00: d1:a8:b2:63:80:ae:a9:dd:b9:e6:2f:5c:8e:b2:b5:1b:e6:71: f8:f2:bc:8c:a1:8e:2b:7a:d7:f0:23:6c:d7:e7:35:c1:e9:20: 9a:ad:14:ec:ab:ad:b9:79:21:bf:63:28:9b:95:a7:e4:57:83: 4e:38:0c:d6:40:69:51:c7:36:8a:30:2e:f2:47:2b:73:99:c7: 9b:89:90:69:09:98:ed:69:d1:95:98:79:22:2a:b9:80:8a:0c: 67:da:1c:f1:02:47:7f:ee:c3:1f:23:62:f6:27:cb:ba:79:93: 40:66:c9:59:d4:86:aa:75:39:2b:c8:13:7e:4a:f1:0e:4e:62: c6:c5:73:e3:c7:94:6b:11:5e:1a:73:a2:9b:af:fe:85:67:95: 3b:d8:90:79:67:d0:3f:df:2c:2d:3d:26:55:6a:2a:be:7b:cb: 3b:cc:c2:1b:c6:69:c4:be:a6:ef:b1:da:62:f8:40:96:ba:2d: 47:df:d8:11:9d:36:29:fe:44:c2:bd:ca:da:a9:6f:e8:8c:96: 21:36:6d:34:2b:f1:c6:ff:11:62:4a:b7:d3:8c:73:79:b2:46: db:d7:07:e3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzA2RjExMC8GA1UEBRMoMEY1MzIwOTZFN0Y1OERFNDAxRjI2NTA3NkRFRkI1Qzgy RTcxRjNFMjAeFw0yNTExMTkxMzU2NDhaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWRjYzlmLTM4NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAMqO2gfl6WLjWHDXweMih1e9+mRZPvcxC/RFgAWlVDu5YSNoidAMAPwES+c/F 5at6HhsGHM7kulc3/fewlFDrz2u8js2BE70KzF6rJs4EfdM/mpowAmNbATFnKSzv cjTy7d5bxTUg7c8eh3y2nce+y/MVyVCCn14opFlSOvnE/ireUvL2JQVRC6U5C5fK lrlWPfwh3PpmJWk1dln3onST6ckVrjmRruCy3klax5iS50eusK/75EJXagdK54RS h7ZW4+kz7AdO1ZgE+wSQ5RC8Pa0Wzyo3+SdEJQyVz4kmwovWgycxGxeF7GfYXJCR VpPvOGcBmibNcDqao8WSrCvzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUeVWIT3/c 4i3ur2YGRe0KloDHr8gwHwYDVR0jBBgwFoAUD1Mgluf1jeQB8mUHbe+1yC5x8+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzMDZGLzYxQzI2OEQ2QzU0 RTExRjA4ODU4NEY4NkM0RjlBRTAyL0QxTWdsdWYxamVRQjhtVUhiZS0xeUM1eDgt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDFNZ2x1ZjFqZVFCOG1VSGJlLTF5QzV4OC1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzA2Ri82MUMyNjhENkM1NEUxMUYwODg1ODRGODZDNEY5QUUwMi85NzBENDRFMkM1 NEYxMUYwQTE1NEREMDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr84DANBgkqhkiG9w0BAQsFAAOCAQEALfbrRtWgy1ZXeSQA EVjBJ05PVai4hxYrfSsjfXUgP2W7YQQA0aiyY4Cuqd255i9cjrK1G+Zx+PK8jKGO K3rX8CNs1+c1wekgmq0U7KutuXkhv2Mom5Wn5FeDTjgM1kBpUcc2ijAu8kcrc5nH m4mQaQmY7WnRlZh5Iiq5gIoMZ9oc8QJHf+7DHyNi9ifLunmTQGbJWdSGqnU5K8gT fkrxDk5ixsVz48eUaxFeGnOim6/+hWeVO9iQeWfQP98sLT0mVWoqvnvLO8zCG8Zp xL6m77HaYvhAlrotR9/YEZ02Kf5Ewr3K2qlv6IyWITZtNCvxxv8RYkq304xzebJG 29cH4w== -----END CERTIFICATE-----Generated at Wed Dec 3 14:53:41 2025 by rpki-client