This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3181E726CE7911F0A596D24CC4F9AE02.roa File: 3181E726CE7911F0A596D24CC4F9AE02.roa (raw, json) Hash identifier: ZnPNL22T6t3LIYJk5oL1pGpDV+VciQ2ky5VGypK/9Es= Subject key identifier: 61:83:B2:2B:4E:A9:13:CA:3E:21:32:48:8A:DC:57:7E:6E:1D:39:A1 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2040 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3181E726CE7911F0A596D24CC4F9AE02.roa Signing time: Mon 01 Dec 2025 05:58:38 +0000 ROA not before: Mon 01 Dec 2025 05:58:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135692 IP address blocks: 138.252.242.0/23 maxlen: 23 138.252.242.0/24 maxlen: 24 138.252.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8256 (0x2040) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Dec 1 05:58:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=692d2e8e-2b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:02:37:0d:3f:69:ab:d4:32:77:47:53:17:69: ee:42:5a:57:ce:ea:0c:7f:3f:71:4f:45:57:e2:cf: 43:5c:a4:55:f8:2d:57:4c:79:c2:40:00:d8:aa:84: 16:0d:b9:34:e5:1d:9e:96:89:e5:e4:c0:a6:96:7f: 4d:11:38:96:16:bd:f1:50:be:fa:19:05:9f:4d:26: f6:f2:71:ab:3c:61:99:30:e8:81:02:65:23:06:1f: 67:cf:df:79:3f:e0:b1:c6:c8:f7:13:19:3b:34:01: 91:80:d0:ca:b1:c3:0c:cc:21:04:9a:14:a4:53:a2: ef:06:f1:32:c7:32:18:12:e9:84:5d:07:62:1c:aa: c6:bc:e7:c4:b2:48:b7:25:02:59:da:f1:28:0d:81: 7f:0e:ed:e9:eb:33:31:17:b3:f2:5d:02:af:7a:03: b0:52:76:08:d6:f5:1f:99:15:20:da:2b:bb:be:6a: 32:9f:a8:af:92:77:d3:cd:e5:01:bc:0d:24:57:bf: 32:e0:ba:16:3a:41:05:1b:27:fc:d4:88:cb:1b:80: 10:f0:cd:51:d1:19:03:10:b6:75:85:3c:ac:0e:1e: eb:4b:0e:d1:23:87:61:c9:36:e5:ef:48:66:47:94: 57:fd:36:bf:34:84:3f:34:b4:82:e5:d3:33:6f:cd: 63:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:83:B2:2B:4E:A9:13:CA:3E:21:32:48:8A:DC:57:7E:6E:1D:39:A1 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3181E726CE7911F0A596D24CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.242.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:f4:63:e0:b6:af:48:56:b6:fd:69:7a:2d:b9:e5:ac:f5:05: a1:e4:68:3f:3d:ed:a8:4b:90:45:81:00:d1:27:13:ea:42:8e: 1f:bb:4a:97:ac:e9:5b:bb:de:26:91:a4:30:c6:f5:e1:5d:77: 75:0e:15:3a:81:eb:80:31:90:db:3b:cf:cc:3c:c5:cb:ae:cf: 5f:31:64:56:2b:69:16:18:10:55:e4:59:f9:2d:ea:11:06:8f: 19:6f:e4:7b:43:33:27:43:b6:cf:31:0b:16:f5:82:e5:3a:50: 51:4f:dc:aa:08:58:cd:30:ba:79:63:d7:b7:ca:2a:89:d4:cb: 58:da:b4:45:8f:20:1b:76:c0:8f:e7:ca:ee:73:47:25:d4:40: 33:71:a6:25:e4:dc:82:55:57:3f:5e:2e:c6:23:f3:35:bd:f0: dc:da:29:33:6a:13:ab:14:16:e0:df:da:84:a7:84:2b:64:c9: a0:95:98:7f:c7:d4:bb:d7:ef:ee:e5:7e:eb:9b:c6:58:30:d5: 1b:e5:8a:e5:cb:6d:e5:3a:aa:dc:aa:f7:4c:2d:0d:c1:f1:8c: 12:58:8b:c1:8f:5f:92:a2:8d:6d:de:d2:ae:56:e6:66:b4:c3: 31:c3:fa:69:ab:b5:47:d7:ce:c4:69:34:18:0f:c8:13:28:6e: ec:1b:b1:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMjAxMDU1ODM4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJkMmU4ZS0yYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gI3DT9pq9Qyd0dTF2nuQlpXzuoMfz9xT0VX4s9DXKRV+C1XTHnCQADYqoQW Dbk05R2elonl5MCmln9NETiWFr3xUL76GQWfTSb28nGrPGGZMOiBAmUjBh9nz995 P+Cxxsj3Exk7NAGRgNDKscMMzCEEmhSkU6LvBvEyxzIYEumEXQdiHKrGvOfEski3 JQJZ2vEoDYF/Du3p6zMxF7PyXQKvegOwUnYI1vUfmRUg2iu7vmoyn6ivknfTzeUB vA0kV78y4LoWOkEFGyf81IjLG4AQ8M1R0RkDELZ1hTysDh7rSw7RI4dhyTbl70hm R5RX/Ta/NIQ/NLSC5dMzb81jAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGGDsitO qRPKPiEySIrcV35uHTmhMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzE4MUU3MjZD RTc5MTFGMEE1OTZEMjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGK/PIwDQYJKoZIhvcNAQELBQADggEBADz0Y+C2r0hWtv1p ei255az1BaHkaD897ahLkEWBANEnE+pCjh+7Spes6Vu73iaRpDDG9eFdd3UOFTqB 64AxkNs7z8w8xcuuz18xZFYraRYYEFXkWfkt6hEGjxlv5HtDMydDts8xCxb1guU6 UFFP3KoIWM0wunlj17fKKonUy1jatEWPIBt2wI/nyu5zRyXUQDNxpiXk3IJVVz9e LsYj8zW98NzaKTNqE6sUFuDf2oSnhCtkyaCVmH/H1LvX7+7lfuubxlgw1RvliuXL beU6qtyq90wtDcHxjBJYi8GPX5KijW3e0q5W5ma0wzHD+mmrtUfXzsRpNBgPyBMo buwbsTw= -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:21 2025 by rpki-client