This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7903579ECF6711F0B2E7B738C4F9AE02.roa
File: 7903579ECF6711F0B2E7B738C4F9AE02.roa (raw, json)
Hash identifier: 6zB7kFWY5XEr8fDOGhAtN2oYBg7VnnTUWTVdh0E0hFI=
Subject key identifier: BA:F0:DF:92:D4:2F:20:1C:F4:B3:CA:C4:10:52:7A:41:1C:31:9F:59
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2066
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7903579ECF6711F0B2E7B738C4F9AE02.roa
Signing time: Tue 02 Dec 2025 10:12:57 +0000
ROA not before: Tue 02 Dec 2025 10:12:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138797
IP address blocks: 138.252.232.0/24 maxlen: 24
138.252.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 12:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8294 (0x2066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Dec 2 10:12:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=692ebba9-3876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:59:c9:89:6d:df:0a:73:5c:9e:2b:b3:62:
7e:74:d0:97:1d:df:ad:88:90:13:8b:e0:b2:7a:0f:
56:7d:27:1a:61:e7:d4:b9:b1:1c:d4:ab:a0:64:c7:
2a:2a:9e:79:af:36:da:33:7a:d5:91:ae:39:db:e4:
c7:e6:4f:09:f9:a8:d9:63:9f:c6:8f:06:ce:4a:d6:
64:ff:a4:31:65:38:93:ce:eb:f2:e8:2d:d9:f8:b2:
65:76:3a:4f:69:91:4f:8d:80:cc:4f:92:4b:5f:33:
2e:b8:ab:85:64:92:bd:90:3f:f0:1a:dd:a5:bf:bf:
06:54:0d:bd:2f:b6:44:fd:d3:dd:21:ab:21:65:49:
dd:ef:27:91:f5:3c:8e:b3:97:d4:7a:4f:5f:62:ca:
6b:9e:bf:8d:e5:47:7c:08:fd:1b:93:f9:8e:44:5e:
0c:e2:ac:b4:c3:08:37:f7:43:e5:2e:a1:75:9e:0b:
66:68:99:3d:3c:f3:59:30:7a:8e:d1:9b:28:fb:9c:
4f:d4:e3:1b:c9:e7:9f:cb:d6:70:e7:5a:e5:fc:99:
73:97:e5:78:cf:7f:19:e9:dd:fc:63:5d:c2:05:25:
e1:f9:95:52:50:47:08:e2:3d:7d:57:e2:99:56:b0:
2c:2b:a7:39:91:6f:0e:75:8d:3d:2c:71:33:9c:0f:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F0:DF:92:D4:2F:20:1C:F4:B3:CA:C4:10:52:7A:41:1C:31:9F:59
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7903579ECF6711F0B2E7B738C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.232.0/23
Signature Algorithm: sha256WithRSAEncryption
36:47:37:b3:4b:af:6c:18:96:41:51:67:a9:46:da:ac:54:dd:
ed:9b:3d:98:15:3f:bd:08:6f:e6:07:f0:a2:36:f7:77:f7:98:
c4:4f:d3:53:44:db:20:ae:5a:da:22:28:a3:6c:26:1a:5d:3d:
f5:48:4a:fd:9f:01:37:27:d0:79:bd:30:2e:2c:14:84:67:8b:
c9:99:18:33:60:4b:2a:9e:4b:cd:0d:23:c6:00:aa:dd:66:a5:
46:c5:7a:8c:0d:fa:37:e9:1c:54:74:8f:b4:97:e3:30:41:c9:
86:d1:db:65:49:6a:cc:3e:3d:2e:8f:44:89:91:84:a4:6c:23:
dd:75:99:61:f4:89:91:5c:85:63:59:ca:e1:86:db:9b:0e:97:
28:e0:78:fb:35:42:b9:e0:09:ad:0d:1e:7c:38:14:06:2d:4a:
de:ff:f6:53:f3:87:36:ce:4c:ed:00:80:46:10:86:45:d7:a9:
0a:e7:17:20:7a:c7:58:20:b7:32:a5:d7:3f:a4:d3:8d:3c:43:
32:f3:33:88:e7:c7:25:a8:e9:34:84:3c:30:22:85:5e:f7:ba:
fc:6f:b9:77:b5:9e:cb:40:a1:0e:54:99:a8:52:09:46:a9:50:
a4:db:6b:5e:17:c6:f3:15:2c:66:ce:1e:76:f6:49:e4:3f:b2:
c6:64:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 18:50:15 2025 by rpki-client