This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C9812974B61411F088869B79C4F9AE02.roa
File: C9812974B61411F088869B79C4F9AE02.roa (raw, json)
Hash identifier: KzP9bFVZYcmUrb0yXkB2m6rcgSXdJfnlkuvk1aN8ad4=
Subject key identifier: E7:D4:E4:40:04:C8:C9:11:C7:88:3F:48:4B:FC:5F:76:36:71:C0:2B
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1FCB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C9812974B61411F088869B79C4F9AE02.roa
Signing time: Fri 31 Oct 2025 04:48:05 +0000
ROA not before: Fri 31 Oct 2025 04:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154296
IP address blocks: 138.252.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 12:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8139 (0x1fcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Oct 31 04:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69043f84-107a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:42:f4:21:42:dc:49:89:fe:e9:80:40:24:
41:69:1b:cd:b8:14:00:a1:32:39:1b:7b:46:e3:30:
53:4c:87:e3:fb:68:a2:9d:b5:b4:ac:52:39:e4:04:
9e:1f:f5:68:59:4e:c4:c7:d1:33:fc:3f:8c:d1:ab:
20:73:c6:82:f1:92:d7:74:de:44:ec:b1:13:8a:ef:
8a:db:d3:6e:53:49:60:3c:6b:21:70:ca:d0:ef:7b:
da:92:fe:51:e4:b3:8c:17:63:63:4a:37:f0:0f:6e:
b7:b6:3a:f2:dd:9f:2f:90:83:b9:41:0a:88:35:12:
1b:43:dc:26:53:7d:03:10:3d:7f:06:2b:7b:f5:fb:
4d:a9:ca:96:ee:ed:b9:2a:92:0a:27:f8:22:6d:56:
db:60:34:11:8d:fa:c0:3e:c7:0e:0f:8c:f7:ed:4b:
c2:c1:e5:50:98:d8:b2:bd:9e:73:d7:31:5e:72:3b:
48:60:1e:95:cd:53:77:26:8e:5f:f7:68:60:64:c0:
71:55:cd:85:1e:88:d6:b2:68:f1:b9:16:69:34:f1:
d7:b5:0c:fb:2f:4a:0f:4f:fc:94:c6:c5:aa:d6:62:
9e:0c:d7:36:15:38:43:1a:5a:03:00:0f:56:b3:23:
10:24:5b:23:06:e3:3f:8e:90:c0:c0:b0:dd:28:77:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D4:E4:40:04:C8:C9:11:C7:88:3F:48:4B:FC:5F:76:36:71:C0:2B
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C9812974B61411F088869B79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.32.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:6f:93:10:a6:07:77:32:bb:b6:31:0c:9a:3c:5c:08:39:1c:
64:c9:af:f0:62:90:ca:e1:b8:27:84:e1:e8:ce:fd:7c:3c:99:
94:18:54:15:95:29:69:f7:0c:e7:f2:e3:ba:af:7a:5f:a7:39:
62:c0:0f:39:71:d7:1f:18:66:83:40:79:82:7a:43:06:40:c0:
e3:0d:d9:69:5a:65:ac:35:f6:e2:af:72:fe:45:b4:f7:50:e1:
ab:04:89:85:3f:43:e1:24:df:cc:05:91:1a:63:91:e5:fd:ce:
36:87:74:ca:e2:7c:e9:08:aa:6f:05:2e:6c:9e:fc:ad:38:30:
a2:eb:a4:8a:c7:93:74:ae:51:2b:15:a6:99:b7:b1:75:44:30:
34:7d:7e:fc:5f:b4:2c:a8:03:06:42:5c:c3:15:6c:85:5c:df:
3e:45:44:ca:2d:2e:93:27:74:1a:68:97:60:ae:41:f4:ac:00:
ff:8a:e3:ca:94:9c:26:ba:19:59:43:97:b8:d4:ed:0e:9e:d4:
ef:da:35:ca:3e:d9:a2:ab:2d:13:10:06:a6:54:ef:29:59:fc:
ad:be:c6:56:d8:79:93:e1:a9:3c:3b:e0:3c:be:dd:1a:cc:b5:
ac:f5:db:33:0d:81:7a:2f:79:0c:fb:dc:be:b7:96:17:df:6a:
a1:c9:b8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:08:10 2025 by rpki-client