
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3181E726CE7911F0A596D24CC4F9AE02.roa
File: 3181E726CE7911F0A596D24CC4F9AE02.roa (raw, json)
Hash identifier: /oHUIbCEvIByhhTZHHmLrSpf7NdDEu+7YkdZeii1eMc=
Subject key identifier: 48:62:B1:9F:F7:07:76:A0:85:5E:D2:C1:63:D4:E5:7B:48:9A:73:E5
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2E97
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3181E726CE7911F0A596D24CC4F9AE02.roa
Signing time: Sun 31 May 2026 16:19:10 +0000
ROA not before: Sun 31 May 2026 16:19:10 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 135692
IP address blocks: 138.252.242.0/23 maxlen: 23
138.252.242.0/24 maxlen: 24
138.252.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Jun 2026 09:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11927 (0x2e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:19:10 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5f7e-94dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:b0:de:25:1e:fb:9e:0a:5a:6f:8e:83:35:
fb:8b:32:10:e5:ef:02:29:0f:9d:f5:b8:db:64:b7:
a9:65:79:7f:fb:ae:63:f6:6f:9c:9b:fc:42:f8:cb:
2a:1d:4c:a9:0e:ea:2c:8f:ad:0f:bb:d4:e1:c7:74:
e1:5a:93:cb:23:f5:57:4f:84:dd:42:a6:08:37:3a:
82:04:9f:92:a6:a8:36:d2:82:7f:df:bc:30:ca:db:
24:ac:52:d1:a9:12:e4:0b:00:a3:c6:30:7f:84:ab:
6a:be:c6:66:c5:e4:f3:f3:13:5c:c9:8e:fb:ac:02:
18:f2:0a:66:c3:f8:ac:af:32:85:83:df:7b:18:0e:
b2:91:4e:4d:ea:24:cf:07:34:c3:cd:73:53:53:c1:
8b:48:77:d6:d5:87:34:42:47:a6:92:83:75:4e:5e:
c2:d1:3d:5f:5b:ef:e8:88:2e:fe:a3:f1:9f:2c:af:
d5:a5:50:e2:05:9f:96:3e:28:43:5d:ce:88:99:e2:
05:88:c5:a3:fb:0f:ca:52:ed:b1:6f:bf:a4:d5:60:
95:5c:ff:45:11:ee:60:ba:e5:f3:c6:ed:19:69:ec:
c5:5d:8f:53:c9:ca:06:48:cb:e2:70:7b:61:33:f6:
d0:cf:ef:14:26:d7:db:ab:2c:bc:b3:14:3b:10:f6:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:62:B1:9F:F7:07:76:A0:85:5E:D2:C1:63:D4:E5:7B:48:9A:73:E5
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3181E726CE7911F0A596D24CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.242.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:20:d2:59:60:2f:f5:45:28:0d:31:cf:5a:b0:f1:5e:7f:0d:
6b:5f:97:2a:e3:e3:49:18:42:c9:db:9f:d1:2c:d4:e4:d4:2d:
8f:48:f7:06:4e:a4:c4:90:0b:fd:63:9f:7f:5e:0a:85:2f:91:
b7:57:a7:18:b3:64:ee:ff:fd:13:74:48:50:1e:68:b8:a9:37:
fc:4f:b8:b9:83:90:94:87:7e:83:07:64:a5:db:db:82:70:0e:
ea:47:d8:d9:51:3d:0b:a4:62:d1:98:75:75:5e:1e:33:d0:74:
af:f7:ba:d9:0e:61:27:86:ab:8e:53:17:9b:12:2f:32:46:ba:
25:1a:9c:9d:86:ed:85:bf:96:ce:f9:5a:8f:50:59:b3:95:3e:
fb:4d:65:4e:fe:3f:f9:93:f0:94:ef:e5:7d:f1:da:a5:65:a5:
55:aa:e7:5d:9a:b4:b6:f9:7c:a8:f8:91:2b:48:4c:d5:da:d0:
b6:db:57:8b:bb:da:8f:92:f9:0b:b0:26:40:d3:bc:ba:83:9a:
a5:d1:ae:0f:16:89:a9:ff:15:e1:bb:3d:36:0a:e6:52:33:be:
3a:c6:bc:b0:09:cc:71:e4:f9:5f:0a:5d:18:d1:19:1b:81:f3:
98:cc:1d:91:ca:48:62:9e:47:5b:4f:3e:1c:84:6b:1f:c9:86:
cf:53:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:25:17 2026 by rpki-client