
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0EC9510C487611F1B89D2F16A9833773.roa
File: 0EC9510C487611F1B89D2F16A9833773.roa (raw, json)
Hash identifier: tBu3yEz/PxRO2+EZv8TMaesPTrIHQrtgsty0fptxjVg=
Subject key identifier: B4:61:A9:42:E4:DA:A5:5A:44:3A:CE:13:31:15:ED:07:BD:20:5A:09
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F05
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0EC9510C487611F1B89D2F16A9833773.roa
Signing time: Sun 31 May 2026 16:22:40 +0000
ROA not before: Sun 31 May 2026 16:22:40 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150019
IP address blocks: 138.252.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Jun 2026 09:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12037 (0x2f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:22:40 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6050-1eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:29:76:84:6f:89:1d:7a:10:f7:ea:d3:e8:
72:ac:14:e0:ad:52:26:69:39:f1:4d:a2:a6:24:01:
8d:a8:f8:c4:f3:14:05:3a:bb:e6:9d:9f:cd:a7:a9:
8f:15:18:6c:d6:f5:97:6d:c4:c6:2d:19:7e:b3:78:
ff:a9:13:cb:ea:55:35:15:a4:34:6f:c2:2a:e0:62:
2b:7f:0a:27:6b:f3:8f:e2:47:4b:69:08:3f:6c:f7:
0a:9f:15:bf:1d:a5:b0:a0:63:4b:95:a0:b1:2d:16:
49:42:60:eb:54:f4:90:ee:d1:21:1e:bb:fa:ce:c8:
7a:9a:48:cc:4e:7f:67:58:4e:86:49:13:75:79:cf:
8f:e4:b0:ac:20:e9:92:6f:94:9f:65:e8:4a:46:73:
c2:19:f8:a5:44:75:fc:44:44:be:b7:d0:0d:6a:ee:
c6:e3:4b:7d:b0:94:1b:c7:c4:4b:12:78:5d:77:90:
ed:6f:4d:5e:2d:74:ae:88:32:c0:a7:b9:31:75:5d:
51:06:88:89:e6:d0:d2:97:76:a2:1b:4a:3a:cd:fe:
72:17:af:40:35:d1:31:a2:2f:65:e4:44:f7:38:6e:
f8:a0:47:97:7c:16:57:8e:00:fc:cc:ae:9a:f9:ac:
08:49:68:0a:cd:53:4b:7e:b5:a7:c0:58:7a:a2:da:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:61:A9:42:E4:DA:A5:5A:44:3A:CE:13:31:15:ED:07:BD:20:5A:09
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0EC9510C487611F1B89D2F16A9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.204.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0c:7c:22:5c:5c:f2:f7:d3:a3:12:2e:2e:fe:36:44:27:4f:
fa:fe:01:fc:a8:b0:a2:83:dd:ff:a5:5e:31:ef:f0:3c:04:2c:
13:e3:d5:1a:b9:e2:5e:91:fc:19:b3:cd:6d:ca:b9:28:24:68:
11:d3:f0:cb:16:fb:57:3c:e3:54:95:51:c7:2b:28:82:23:ae:
54:61:8d:12:75:7e:61:5d:06:15:9f:bf:0f:e5:62:e1:10:c0:
be:01:0e:6d:10:bb:26:70:0b:11:53:ce:02:51:44:96:fe:6b:
e4:a4:81:7b:58:05:8b:11:51:4d:e7:7b:bf:58:cb:33:50:c7:
ec:a9:a1:11:42:09:fd:cf:36:10:f1:de:b0:7b:87:a4:9f:a0:
8f:8e:13:96:f2:3c:55:16:8a:43:07:a2:2f:d6:73:4d:93:d4:
c8:58:3e:96:ff:84:b1:e6:8a:ac:a7:1b:ee:45:c3:c1:07:b0:
72:a6:64:56:1f:71:f2:a1:dd:7c:ac:e5:0a:b9:3e:bd:e8:96:
80:d8:a5:17:f0:5b:c5:2e:2e:ad:df:91:4f:9d:62:36:6a:69:
15:90:fb:10:11:1c:e3:cc:d4:81:a9:ec:94:f2:0c:06:4a:a8:
fd:42:70:a4:01:83:e9:39:13:02:33:1b:46:5e:f6:17:ff:d6:
98:20:68:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:29 2026 by rpki-client