This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa
File: 384CF758C46011F091DDFD33C4F9AE02.roa (raw, json)
Hash identifier: TegF23NHMabmZPSNmsG5KpTeInE3Cg4H4GeZTpG5zh8=
Subject key identifier: 80:09:5C:73:DD:AD:46:B2:4D:0D:92:7C:71:3D:CD:41:EF:1F:F1:5B
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2017
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa
Signing time: Tue 18 Nov 2025 09:23:19 +0000
ROA not before: Tue 18 Nov 2025 09:23:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154326
IP address blocks: 138.252.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8215 (0x2017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Nov 18 09:23:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=691c3b07-910e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:4f:84:62:4b:e8:cc:db:48:56:45:96:f6:
32:4a:5b:23:95:2f:7a:3d:3d:ca:40:fe:5e:ce:8b:
3e:7b:09:28:e0:e7:09:61:84:65:b7:d1:4f:f8:f2:
31:a5:1e:c5:17:b0:9b:b7:99:83:95:25:28:d7:ac:
31:7d:0e:ec:2f:0c:12:7d:67:9a:b8:c2:47:43:dc:
9b:86:e4:66:ff:6a:fd:d5:07:58:a3:7a:cd:c7:13:
86:12:e3:95:e0:33:a0:e0:68:25:cd:0e:6e:9c:ce:
b0:10:02:84:38:77:95:64:3a:9e:98:09:ff:18:92:
1b:c7:06:66:07:5b:9e:c0:ee:e3:ef:c1:31:a6:80:
5c:86:e8:ad:66:62:14:a5:84:54:9e:8d:dd:dd:69:
6e:d0:86:e1:21:c9:e9:cd:3c:fa:39:86:71:c3:ca:
e5:a7:69:ed:43:89:f6:16:21:6a:6f:f6:bd:72:e0:
63:33:1a:89:27:73:ef:56:59:3c:d5:ba:7f:e8:38:
a0:ea:be:07:37:98:d2:52:7c:ab:29:ab:c5:98:e1:
20:84:0f:17:b3:3a:7f:84:bd:51:66:99:97:00:f5:
26:06:5c:79:ea:b8:9f:45:c9:71:bb:12:20:68:74:
d2:b4:fa:c9:1b:9d:04:dd:f9:b8:7c:53:19:14:73:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:5C:73:DD:AD:46:B2:4D:0D:92:7C:71:3D:CD:41:EF:1F:F1:5B
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.108.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ce:f3:9d:f8:a9:7d:b3:3b:c6:0a:32:f1:5c:a5:79:58:20:
c5:7b:c5:4f:e0:bd:9b:8f:ff:70:db:29:72:a5:55:d5:01:d4:
62:b9:db:6d:34:df:fe:9e:a4:b3:83:59:8f:6e:4f:c5:12:61:
f2:d9:2e:b7:d6:07:94:94:68:77:3d:ac:95:13:b8:37:72:2c:
0c:15:e1:29:03:b2:f9:ed:a6:a1:15:f9:83:0b:73:1b:b6:8a:
20:b2:ca:a7:f8:a8:e7:49:eb:cd:2e:c0:80:2f:c1:ac:27:10:
dc:6d:74:ff:88:a2:07:b3:aa:2e:ca:2f:4f:5d:68:03:2e:10:
ae:b1:a1:97:ef:64:99:89:3a:67:b4:d7:28:55:b1:31:e0:f0:
48:7c:35:05:98:f2:5e:08:74:a3:54:51:ec:b4:4b:af:01:50:
cd:99:86:52:8b:3a:9e:0b:fd:d9:6f:4e:1d:2e:3f:25:b5:ca:
07:81:fc:99:6f:69:cd:53:61:6d:d2:e3:6e:07:c9:b6:9a:a5:
40:b9:00:a5:bb:b5:cd:ce:d0:8f:a2:d3:0f:22:4b:03:f2:68:
d6:de:a9:61:9f:23:fa:19:c5:c7:dd:2a:58:0d:3c:22:e4:85:
26:79:d9:72:5f:18:60:ca:6f:5a:2f:a8:22:40:91:0e:4d:9c:
b9:5f:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:23:39 2025 by rpki-client