This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67311CB8C07111F082870620C4F9AE02.roa File: 67311CB8C07111F082870620C4F9AE02.roa (raw, json) Hash identifier: 4hqd82UOJZfPAZzcxE3mfBHPk7/dvLYSoA/TJbnxAPk= Subject key identifier: 1B:C2:A0:94:0C:F9:5D:25:3E:4E:8B:A3:5E:87:47:6A:F4:25:43:50 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2001 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67311CB8C07111F082870620C4F9AE02.roa Signing time: Thu 13 Nov 2025 09:16:14 +0000 ROA not before: Thu 13 Nov 2025 09:16:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154360 IP address blocks: 138.252.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8193 (0x2001) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Nov 13 09:16:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6915a1de-d0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:8e:e6:bd:e6:76:57:b7:e1:5c:ff:c8:8f: 48:72:4c:9c:fc:e1:8b:ce:fe:58:08:09:6b:4f:e4: 99:9d:ec:a2:cf:1b:9c:db:ae:aa:f3:e3:90:4f:62: 05:f1:56:0c:99:80:5d:ec:be:45:ef:02:0c:82:ca: 4e:44:51:26:88:39:29:b9:9d:31:1c:56:1f:06:8b: 7d:29:f5:e9:a8:3c:c9:c1:10:29:3a:d6:39:87:54: f5:c0:2f:bf:d3:c1:00:25:c5:62:fc:b2:cb:78:7a: 07:7a:56:d2:f4:30:04:f1:71:e9:23:38:b3:d6:46: 78:78:97:78:74:98:cb:3d:33:ea:b3:1b:ba:a9:c0: 55:46:ce:a3:28:32:29:ca:1a:86:88:8d:0b:63:24: 48:0f:16:b3:e0:bb:97:cf:a4:03:43:2f:cf:13:c9: ad:93:03:ea:f7:ed:b8:6f:02:16:08:2b:a2:02:55: 84:38:e9:7a:1d:72:1b:db:a7:5b:cb:8f:9b:6e:f5: 4e:81:fc:6f:33:1c:10:32:98:9e:4a:8d:1c:69:e2: 4c:af:7f:8f:d1:b0:7a:b3:2b:5b:97:19:94:e6:81: e4:0a:76:de:f9:e2:8e:7b:96:73:a2:5e:77:6f:7d: 78:66:ca:69:4c:b8:ba:88:2c:f7:0f:7f:ca:ec:cf: be:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C2:A0:94:0C:F9:5D:25:3E:4E:8B:A3:5E:87:47:6A:F4:25:43:50 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67311CB8C07111F082870620C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.190.0/23 Signature Algorithm: sha256WithRSAEncryption 34:74:2d:bc:e0:7b:ad:ae:16:65:64:f4:83:97:7c:bb:90:1b: 43:e6:47:e4:8a:ed:66:4c:4d:20:71:12:75:5e:c3:4f:37:12: 42:fa:6d:b3:16:1d:ef:2e:34:4f:45:c9:cf:93:08:e5:a4:e7: 46:af:2b:3d:6f:d4:70:62:de:1c:c2:fd:fa:f4:e0:c0:48:3f: 2c:5d:db:0b:2f:22:0e:26:db:cb:99:3a:6c:d6:46:e9:05:4e: 3b:4d:fe:87:54:36:c2:20:5e:a2:ec:22:bb:e3:91:21:96:c6: f7:43:e3:55:cf:9c:1a:7d:63:3a:4d:30:54:60:75:98:b2:dc: 61:12:81:4f:27:e0:b9:cf:bb:1f:83:05:d5:5a:26:71:4a:18: 7c:38:f8:c8:f7:a6:29:62:6d:80:d9:a5:d8:67:f3:08:bf:16: 1b:45:2b:95:03:b2:51:11:8c:65:d1:8b:ee:10:7c:4a:35:c2: 41:32:a7:b5:fc:df:62:36:20:eb:af:26:70:02:34:97:18:ea: cb:af:eb:5c:29:04:7d:55:8f:4a:60:1b:c9:e3:52:d8:05:5b: 22:8f:fc:f6:bc:a2:2e:7e:c1:48:fd:7c:8d:0f:1c:15:0e:5b: 5a:7a:14:eb:d7:68:d3:61:e5:31:28:ed:28:25:18:ca:a9:af: 40:95:7e:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMTEzMDkxNjE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE1YTFkZS1kMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CGO5r3mdle34Vz/yI9Ickyc/OGLzv5YCAlrT+SZneyizxuc266q8+OQT2IF 8VYMmYBd7L5F7wIMgspORFEmiDkpuZ0xHFYfBot9KfXpqDzJwRApOtY5h1T1wC+/ 08EAJcVi/LLLeHoHelbS9DAE8XHpIziz1kZ4eJd4dJjLPTPqsxu6qcBVRs6jKDIp yhqGiI0LYyRIDxaz4LuXz6QDQy/PE8mtkwPq9+24bwIWCCuiAlWEOOl6HXIb26db y4+bbvVOgfxvMxwQMpieSo0caeJMr3+P0bB6sytblxmU5oHkCnbe+eKOe5Zzol53 b314ZsppTLi6iCz3D3/K7M++lQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBvCoJQM +V0lPk6Lo16HR2r0JUNQMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjczMTFDQjhD MDcxMTFGMDgyODcwNjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGK/L4wDQYJKoZIhvcNAQELBQADggEBADR0Lbzge62uFmVk 9IOXfLuQG0PmR+SK7WZMTSBxEnVew083EkL6bbMWHe8uNE9Fyc+TCOWk50avKz1v 1HBi3hzC/fr04MBIPyxd2wsvIg4m28uZOmzWRukFTjtN/odUNsIgXqLsIrvjkSGW xvdD41XPnBp9YzpNMFRgdZiy3GESgU8n4LnPux+DBdVaJnFKGHw4+Mj3pilibYDZ pdhn8wi/FhtFK5UDslERjGXRi+4QfEo1wkEyp7X832I2IOuvJnACNJcY6suv61wp BH1Vj0pgG8njUtgFWyKP/Pa8oi5+wUj9fI0PHBUOW1p6FOvXaNNh5TEo7SglGMqp r0CVfm8= -----END CERTIFICATE-----Generated at Fri Dec 5 19:08:10 2025 by rpki-client