This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa File: 25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa (raw, json) Hash identifier: j2W05PC37OrU04vtoT3bHMVu/qye8nWCrh09pkfRPNw= Subject key identifier: 4C:3A:55:87:61:58:14:35:35:0C:F0:78:B0:83:AD:69:CA:C7:4C:B6 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 205D Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa Signing time: Tue 02 Dec 2025 09:05:24 +0000 ROA not before: Tue 02 Dec 2025 09:05:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132964 IP address blocks: 138.252.234.0/23 maxlen: 23 138.252.234.0/24 maxlen: 24 138.252.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8285 (0x205d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Dec 2 09:05:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=692eabd4-3dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:89:37:29:e0:95:38:4d:ff:6a:c0:d2:bb: 63:92:29:e4:db:a3:a5:9f:2d:40:0c:1a:18:46:75: 7b:6f:96:07:f6:64:da:1e:c4:40:8c:63:65:95:89: 75:c7:f3:af:2b:20:08:09:41:59:ff:d1:5e:8c:64: 11:04:b6:7f:01:4b:66:46:19:60:bf:5f:48:3f:b2: f4:3b:e8:fa:2f:15:4b:57:d8:08:1c:23:e5:71:62: e2:93:c1:0b:af:90:5e:6a:d9:fd:b0:5d:a3:7e:e2: fb:2e:90:45:b0:04:5f:dc:03:c0:ef:a4:b6:84:dc: b3:54:5b:a9:5e:6d:ce:99:66:94:62:f0:47:2e:ef: f9:cb:f1:24:81:e5:77:9b:00:2e:8b:6d:ad:1f:5d: 03:07:fd:51:f1:2b:02:e5:f2:e6:bb:41:66:c1:70: 9b:21:29:7a:29:e9:38:41:12:25:8c:ad:6c:88:eb: 5b:58:12:5c:55:7c:ee:18:47:a4:57:b2:02:99:cb: 9a:5b:cc:bf:fc:63:83:b9:4c:d6:92:de:32:c2:52: 26:69:64:7c:1a:8c:81:0b:a7:56:6c:6b:aa:9e:ae: da:9a:6e:f1:90:58:3b:57:09:18:fd:3b:00:92:2c: 99:c0:3f:7b:6e:62:5f:8a:36:9b:10:de:4d:f6:53: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3A:55:87:61:58:14:35:35:0C:F0:78:B0:83:AD:69:CA:C7:4C:B6 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.234.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:ad:a9:4d:bb:ac:ef:15:9f:03:db:67:45:ff:60:45:2b:04: 81:b8:a4:bb:d4:69:f1:5d:99:14:3e:95:71:89:fd:8a:0f:0b: fe:2d:52:61:f0:0e:29:fb:b0:f1:0c:1f:d3:12:89:75:cb:3a: b7:15:e0:be:d8:5d:40:a4:d3:d6:8d:ed:f1:28:85:a5:21:21: 44:92:f4:f3:a8:fc:8c:95:b3:22:55:fc:89:40:3c:06:a1:2d: 9b:cc:2c:94:02:da:d8:24:65:36:07:f0:56:c7:b8:e0:9a:ee: 68:cf:52:89:db:76:8b:06:6b:73:fa:13:b4:4c:76:6a:6b:50: 8a:a5:31:36:2b:96:7d:a4:cc:ca:88:f0:10:29:57:91:7c:34: dc:c6:62:e1:63:87:58:dc:9b:e3:04:f1:1c:4b:61:ee:4b:57: b8:ff:7a:0d:3f:68:1a:e2:2d:75:b3:32:58:d2:f8:bb:ea:42: 2d:e6:e0:78:d9:65:45:5f:a3:77:c2:67:6c:45:cb:a0:17:85: 8a:c6:b5:0c:7e:a3:1b:37:76:d3:4b:b4:2d:6f:32:50:94:79: 86:9a:8e:71:f0:82:5f:9a:09:7b:60:36:d6:f6:fd:54:0e:01: ae:3c:86:a0:93:d2:f7:eb:00:bf:83:7f:56:21:7a:9b:9c:67: c8:0c:29:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMjAyMDkwNTI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJlYWJkNC0zZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TSJNynglThN/2rA0rtjkink26Olny1ADBoYRnV7b5YH9mTaHsRAjGNllYl1 x/OvKyAICUFZ/9FejGQRBLZ/AUtmRhlgv19IP7L0O+j6LxVLV9gIHCPlcWLik8EL r5Beatn9sF2jfuL7LpBFsARf3APA76S2hNyzVFupXm3OmWaUYvBHLu/5y/EkgeV3 mwAui22tH10DB/1R8SsC5fLmu0FmwXCbISl6Kek4QRIljK1siOtbWBJcVXzuGEek V7ICmcuaW8y//GODuUzWkt4ywlImaWR8GoyBC6dWbGuqnq7amm7xkFg7VwkY/TsA kiyZwD97bmJfijabEN5N9lNpUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEw6VYdh WBQ1NQzweLCDrWnKx0y2MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjVEQjREOEVD RjVDMTFGMDlFREMzRDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGK/OowDQYJKoZIhvcNAQELBQADggEBAI2tqU27rO8VnwPb Z0X/YEUrBIG4pLvUafFdmRQ+lXGJ/YoPC/4tUmHwDin7sPEMH9MSiXXLOrcV4L7Y XUCk09aN7fEohaUhIUSS9POo/IyVsyJV/IlAPAahLZvMLJQC2tgkZTYH8FbHuOCa 7mjPUonbdosGa3P6E7RMdmprUIqlMTYrln2kzMqI8BApV5F8NNzGYuFjh1jcm+ME 8RxLYe5LV7j/eg0/aBriLXWzMljS+LvqQi3m4HjZZUVfo3fCZ2xFy6AXhYrGtQx+ oxs3dtNLtC1vMlCUeYaajnHwgl+aCXtgNtb2/VQOAa48hqCT0vfrAL+Df1Yhepuc Z8gMKaA= -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:21 2025 by rpki-client