This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa
File: D1E157DAD99411F0B61ED2F763D3641D.roa (raw, json)
Hash identifier: WffbWLbadjPrRwCUN0zlwJFLl2rFC24bTFPQy38A78I=
Subject key identifier: 81:03:4E:CC:1F:C7:ED:D0:36:EC:2D:3D:89:AC:87:07:D2:D3:CF:FB
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2159
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa
Signing time: Mon 15 Dec 2025 09:02:45 +0000
ROA not before: Mon 15 Dec 2025 09:02:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136904
IP address blocks: 138.252.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8537 (0x2159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Dec 15 09:02:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=693fceb5-75f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a1:73:07:5b:85:1e:7a:46:46:3f:85:4f:2a:
91:bf:9e:c9:2c:2e:2a:64:22:be:45:2b:61:c8:c3:
93:91:68:7b:c3:65:ba:91:3b:0b:b4:3e:e4:fe:37:
8f:de:b7:a1:60:66:df:b8:74:f3:c4:51:68:99:09:
3d:e1:90:23:ef:ca:4f:bb:f5:85:f7:98:0a:26:f1:
45:06:29:b2:d3:f4:2a:55:cc:70:91:27:d5:e6:33:
1d:51:9c:6f:0a:7e:ea:86:91:6d:d3:f4:c4:7c:b2:
8a:45:ae:64:71:e3:0f:21:54:6c:93:f8:a2:ae:5a:
71:0d:4d:95:2d:39:b4:4d:bc:b4:fc:6d:47:7b:a8:
44:3e:dd:99:ce:3e:3f:a4:c7:72:ca:30:df:28:12:
65:e1:d0:b2:ed:70:75:e2:28:f3:ef:2f:ec:74:ea:
13:2f:bc:b1:99:b0:c6:6d:da:56:78:2a:02:60:5b:
f2:de:ef:0c:db:45:0c:23:75:bd:30:1d:6c:8f:22:
8b:be:40:bc:d1:92:44:d2:9a:65:7a:b7:04:98:3d:
a8:b4:de:e0:55:28:51:25:85:05:98:10:2b:9f:a1:
5b:b4:0d:d8:85:8b:39:e8:02:1e:fa:7d:d8:20:11:
1d:21:4f:9a:56:2b:5c:95:f4:04:56:35:89:5e:d2:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:4E:CC:1F:C7:ED:D0:36:EC:2D:3D:89:AC:87:07:D2:D3:CF:FB
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.246.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:68:d7:89:74:1f:fb:00:39:c7:4e:80:c6:0a:a7:02:0f:ed:
37:b6:9b:42:f1:44:3e:d0:e4:aa:f5:63:8e:34:b0:09:84:0e:
a4:c5:1f:3f:1f:97:2a:ad:a5:ff:1b:48:03:3b:e4:1e:f0:57:
ea:36:48:a4:ec:7b:00:61:f8:e2:af:ab:b1:79:dd:b7:36:ff:
01:36:69:2e:ed:e6:06:fe:4c:bf:7d:7c:c9:c1:bd:49:77:e4:
50:af:16:68:e0:ee:eb:7a:1a:ba:f1:63:bb:e6:7d:e4:99:f0:
39:99:f9:07:9a:a3:f2:49:6e:04:4a:6c:ee:cf:f5:a9:82:29:
7b:f5:bc:06:54:4e:22:c7:08:95:08:6e:a1:9c:ec:ea:3f:47:
86:1e:1e:93:cc:b5:63:60:35:33:0e:d1:ae:13:a4:17:27:b5:
1f:d9:de:14:4e:e9:94:32:c2:6d:fc:a4:c1:d4:76:a8:f7:82:
0a:57:48:3e:76:56:85:96:d5:1d:23:8f:26:d9:3f:bb:12:da:
e6:7c:87:cb:9f:35:3f:de:3a:d9:49:83:1d:85:3d:1c:e0:25:
1e:3b:d1:1c:1f:4c:51:f6:6e:1a:39:40:51:50:a3:85:78:85:
f5:c3:f1:39:db:e5:89:cc:e0:cb:f1:97:58:f1:0c:bf:13:90:
9a:90:0f:2e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICIVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUxMjE1MDkwMjQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTNmY2ViNS03NWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+6FzB1uFHnpGRj+FTyqRv57JLC4qZCK+RSthyMOTkWh7w2W6kTsLtD7k/jeP
3rehYGbfuHTzxFFomQk94ZAj78pPu/WF95gKJvFFBimy0/QqVcxwkSfV5jMdUZxv
Cn7qhpFt0/TEfLKKRa5kceMPIVRsk/iirlpxDU2VLTm0Tby0/G1He6hEPt2Zzj4/
pMdyyjDfKBJl4dCy7XB14ijz7y/sdOoTL7yxmbDGbdpWeCoCYFvy3u8M20UMI3W9
MB1sjyKLvkC80ZJE0pplercEmD2otN7gVShRJYUFmBArn6FbtA3YhYs56AIe+n3Y
IBEdIU+aVitclfQEVjWJXtKkPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIEDTswf
x+3QNuwtPYmshwfS08/7MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDFFMTU3REFE
OTk0MTFGMEI2MUVEMkY3NjNEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGK/PYwDQYJKoZIhvcNAQELBQADggEBALJo14l0H/sAOcdO
gMYKpwIP7Te2m0LxRD7Q5Kr1Y440sAmEDqTFHz8flyqtpf8bSAM75B7wV+o2SKTs
ewBh+OKvq7F53bc2/wE2aS7t5gb+TL99fMnBvUl35FCvFmjg7ut6GrrxY7vmfeSZ
8DmZ+Qeao/JJbgRKbO7P9amCKXv1vAZUTiLHCJUIbqGc7Oo/R4YeHpPMtWNgNTMO
0a4TpBcntR/Z3hRO6ZQywm38pMHUdqj3ggpXSD52VoWW1R0jjybZP7sS2uZ8h8uf
NT/eOtlJgx2FPRzgJR470RwfTFH2bho5QFFQo4V4hfXD8Tnb5YnM4Mvxl1jxDL8T
kJqQDy4=
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:46:16 2025 by rpki-client