This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8578DF0EBE1811F09E0DFA71C4F9AE02.roa File: 8578DF0EBE1811F09E0DFA71C4F9AE02.roa (raw, json) Hash identifier: Bs/ZlFwYGt8SFIO+Pr3Lx3fLpqudBe94CwifyHiT5Ko= Subject key identifier: 54:F7:C7:A1:0D:C2:81:BB:83:8B:90:4E:01:69:B0:3A:AB:15:D5:19 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1FF1 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8578DF0EBE1811F09E0DFA71C4F9AE02.roa Signing time: Mon 10 Nov 2025 09:34:58 +0000 ROA not before: Mon 10 Nov 2025 09:34:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150008 IP address blocks: 138.252.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8177 (0x1ff1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Nov 10 09:34:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6911b1c1-e8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:d1:c0:8c:83:66:3a:7d:5f:55:11:b6:65: 8e:ef:e7:8a:12:77:69:15:8a:f8:9b:af:3d:78:77: f6:06:7d:73:83:45:63:9c:0d:72:10:ef:7b:96:5b: 09:42:8b:33:f6:65:0f:8a:54:14:37:a6:91:dd:6f: 32:27:46:21:39:d9:93:41:b3:8b:1c:ae:4e:1f:87: 8b:0d:89:a5:fa:bd:33:4f:0b:63:02:4b:a3:c4:c6: a5:64:7b:a5:11:b9:9d:1a:fd:30:ec:10:5b:0b:10: b1:4c:d3:ef:29:30:e1:7a:0a:16:fe:bb:b1:4d:12: 90:75:fb:d4:99:81:59:a0:ec:e0:20:54:14:22:1c: 04:1e:bf:21:07:14:31:cf:02:f8:06:f3:69:84:16: b5:ca:4b:5b:3d:a1:06:53:49:cc:6f:33:78:76:44: e1:03:cf:fa:03:c5:29:a8:60:d2:47:c4:0f:e9:1b: f0:dd:02:65:e8:db:f7:e4:6c:c7:fe:82:f5:22:2a: 40:ce:94:d8:5f:e0:af:7d:c9:ad:3f:14:00:fe:26: c6:83:3e:46:46:67:48:0b:f3:54:dd:a5:43:c7:ca: 40:72:c7:f1:92:ee:49:a1:d9:c6:d6:fd:a5:b5:3b: a3:3f:2d:f4:03:b0:f9:9f:ac:c6:02:48:d4:c5:50: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F7:C7:A1:0D:C2:81:BB:83:8B:90:4E:01:69:B0:3A:AB:15:D5:19 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8578DF0EBE1811F09E0DFA71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.68.0/24 Signature Algorithm: sha256WithRSAEncryption 41:03:ce:e2:85:72:c0:8f:49:e9:84:1c:ec:bc:08:ac:6e:1f: 81:bf:e3:7e:dc:b0:8d:eb:1d:00:c5:63:b0:ef:b0:f0:20:98: b2:96:8d:8f:31:30:e5:a8:36:b7:23:2d:e7:4d:c1:5c:a8:5f: fe:f6:87:b1:94:21:cd:a2:32:a5:33:ce:90:bd:11:e6:12:53: bd:fa:88:61:f8:03:55:2e:c1:9f:65:d8:b6:c8:cd:0f:98:a1: 14:c2:d9:10:02:24:85:d4:ae:be:1b:4a:dd:37:af:87:76:27: cd:cc:ea:f6:a9:10:78:6f:c8:23:4d:3e:40:91:fe:8a:63:26: 0f:a0:7b:9b:85:57:89:43:a8:b2:1f:f9:57:9d:dc:3f:3c:5f: b2:7e:58:e2:8c:dc:87:b0:62:8e:83:a7:3b:93:ea:a0:bc:9d: ee:97:a7:ba:de:19:c1:eb:44:b4:80:25:f8:27:ca:01:7c:60: 8a:2b:f6:65:91:28:ac:02:75:7a:64:5b:73:23:09:f7:82:9e: 73:d0:60:63:a5:26:06:16:4d:ad:0e:ae:78:82:f1:5d:76:5f: 92:e7:94:3b:43:78:e1:f9:bd:80:57:8c:2a:4f:81:29:d6:1b: b0:7f:54:d6:02:88:91:40:59:40:55:3e:5f:a8:6f:7a:30:d2: 61:e5:fa:e8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICH/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMTEwMDkzNDU4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTExYjFjMS1lOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FvRwIyDZjp9X1URtmWO7+eKEndpFYr4m689eHf2Bn1zg0VjnA1yEO97llsJ Qosz9mUPilQUN6aR3W8yJ0YhOdmTQbOLHK5OH4eLDYml+r0zTwtjAkujxMalZHul EbmdGv0w7BBbCxCxTNPvKTDhegoW/ruxTRKQdfvUmYFZoOzgIFQUIhwEHr8hBxQx zwL4BvNphBa1yktbPaEGU0nMbzN4dkThA8/6A8UpqGDSR8QP6Rvw3QJl6Nv35GzH /oL1IipAzpTYX+CvfcmtPxQA/ibGgz5GRmdIC/NU3aVDx8pAcsfxku5JodnG1v2l tTujPy30A7D5n6zGAkjUxVA7PwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFT3x6EN woG7g4uQTgFpsDqrFdUZMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODU3OERGMEVC RTE4MTFGMDlFMERGQTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACK/EQwDQYJKoZIhvcNAQELBQADggEBAEEDzuKFcsCPSemE HOy8CKxuH4G/437csI3rHQDFY7DvsPAgmLKWjY8xMOWoNrcjLedNwVyoX/72h7GU Ic2iMqUzzpC9EeYSU736iGH4A1UuwZ9l2LbIzQ+YoRTC2RACJIXUrr4bSt03r4d2 J83M6vapEHhvyCNNPkCR/opjJg+ge5uFV4lDqLIf+Ved3D88X7J+WOKM3IewYo6D pzuT6qC8ne6Xp7reGcHrRLSAJfgnygF8YIor9mWRKKwCdXpkW3MjCfeCnnPQYGOl JgYWTa0OrniC8V12X5LnlDtDeOH5vYBXjCpPgSnWG7B/VNYCiJFAWUBVPl+ob3ow 0mHl+ug= -----END CERTIFICATE-----Generated at Wed Dec 3 12:44:07 2025 by rpki-client