
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33938662E2EF11EF9827146DC4F9AE02.roa
File: 33938662E2EF11EF9827146DC4F9AE02.roa (raw, json)
Hash identifier: 0bVdEEprCEgkF4GkggJOahM4Yh8dhV3zmKo1rWX6TzA=
Subject key identifier: 86:7F:4B:AD:E4:63:48:D3:8B:EB:35:33:FC:58:19:3D:8A:9E:3C:DC
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F9E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33938662E2EF11EF9827146DC4F9AE02.roa
Signing time: Sun 31 May 2026 16:27:31 +0000
ROA not before: Sun 31 May 2026 16:27:31 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153263
IP address blocks: 161.248.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12190 (0x2f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:27:31 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6173-5be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4e:96:66:dc:94:d5:ea:69:69:9f:2d:a7:d9:
09:ad:d3:25:31:48:6d:a6:2b:63:aa:78:19:55:47:
de:c9:e6:7f:63:55:51:1e:3d:a1:0c:a9:1c:9b:19:
61:2a:08:dc:a1:ac:8e:f1:74:fe:b5:09:fe:5c:15:
e8:9e:09:04:74:1f:e0:38:e2:11:e0:28:67:fa:88:
6c:da:02:1c:00:73:21:dd:92:f5:5d:e4:26:2a:13:
3d:6f:b8:c5:fb:49:3a:3f:9a:31:14:9a:2f:6b:7b:
e6:ab:61:46:83:dd:a3:5b:c3:5e:c7:3a:ba:ea:30:
9a:5b:34:28:65:1e:d6:1f:46:be:0c:98:9f:56:b8:
11:e5:52:6e:8f:5f:ec:b5:11:49:d3:aa:96:56:23:
a3:07:4d:17:80:c9:42:d4:71:66:d3:c8:31:76:bf:
f7:29:ca:c6:5c:25:21:c5:ea:c0:9c:2d:23:aa:a4:
83:86:2d:70:4a:cb:1b:3a:7a:5f:db:05:8d:0b:1f:
3b:cc:4b:25:60:10:94:7b:e3:56:a8:13:11:ea:1f:
54:5a:6e:11:3b:db:1c:32:50:b7:7d:b1:5d:f9:8f:
55:19:45:05:9d:a2:af:c6:ec:86:2e:5d:33:d4:ae:
08:17:e5:40:06:9f:1e:b3:26:5e:29:65:5f:64:f8:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7F:4B:AD:E4:63:48:D3:8B:EB:35:33:FC:58:19:3D:8A:9E:3C:DC
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33938662E2EF11EF9827146DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.228.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:ed:cb:a9:20:a4:6e:20:b7:3a:c0:01:4c:50:72:26:9e:3e:
14:66:58:30:7d:f4:15:0f:4c:4b:ff:ec:58:ef:fe:75:8d:77:
bf:68:53:21:72:6e:be:49:bf:9d:37:4c:ba:70:e9:20:7d:4a:
f6:59:0e:34:67:6a:e4:7c:36:6c:1c:c9:be:ad:2a:a7:d0:75:
63:56:0e:45:bf:15:49:89:31:21:e6:f5:c1:ec:ea:50:c1:c9:
66:f5:1e:4e:97:1e:d7:f5:28:7b:2f:26:8b:ce:89:08:ab:b3:
86:79:d6:bc:b6:40:d2:07:cc:02:87:91:62:12:e5:b7:31:58:
4f:99:3e:bb:f2:67:e1:d8:b8:44:21:02:00:4e:ad:3e:28:e7:
bd:cb:63:c8:8a:9e:56:cf:c9:15:1b:41:1c:d1:55:67:9f:bd:
e5:6a:f5:17:b9:01:47:69:36:2d:1f:b6:32:20:3f:b2:13:e7:
f7:23:31:e5:3a:e3:32:be:d2:a8:45:fe:7e:39:8d:69:2e:e8:
16:e7:03:ed:97:96:59:8e:13:73:4a:65:36:67:f8:fd:14:08:
0b:e8:43:d0:ec:ee:25:c1:2c:28:b1:0c:f5:41:a4:b0:b5:0d:
51:7b:5f:4e:16:4a:19:88:09:cd:cd:d4:d3:9e:01:52:cd:d6:
91:b5:69:13
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICL54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyNzMxWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjE3My01YmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5E6WZtyU1eppaZ8tp9kJrdMlMUhtpitjqngZVUfeyeZ/Y1VRHj2hDKkcmxlh
KgjcoayO8XT+tQn+XBXongkEdB/gOOIR4Chn+ohs2gIcAHMh3ZL1XeQmKhM9b7jF
+0k6P5oxFJova3vmq2FGg92jW8Nexzq66jCaWzQoZR7WH0a+DJifVrgR5VJuj1/s
tRFJ06qWViOjB00XgMlC1HFm08gxdr/3KcrGXCUhxerAnC0jqqSDhi1wSssbOnpf
2wWNCx87zEslYBCUe+NWqBMR6h9UWm4RO9scMlC3fbFd+Y9VGUUFnaKvxuyGLl0z
1K4IF+VABp8esyZeKWVfZPh8rwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIZ/S63k
Y0jTi+s1M/xYGT2KnjzcMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzM5Mzg2NjJF
MkVGMTFFRjk4MjcxNDZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBofjkMA0GCSqGSIb3DQEBCwUAA4IBAQBL7cupIKRuILc6wAFMUHIm
nj4UZlgwffQVD0xL/+xY7/51jXe/aFMhcm6+Sb+dN0y6cOkgfUr2WQ40Z2rkfDZs
HMm+rSqn0HVjVg5FvxVJiTEh5vXB7OpQwclm9R5Olx7X9Sh7LyaLzokIq7OGeda8
tkDSB8wCh5FiEuW3MVhPmT678mfh2LhEIQIATq0+KOe9y2PIip5Wz8kVG0Ec0VVn
n73lavUXuQFHaTYtH7YyID+yE+f3IzHlOuMyvtKoRf5+OY1pLugW5wPtl5ZZjhNz
SmU2Z/j9FAgL6EPQ7O4lwSwosQz1QaSwtQ1Re19OFkoZiAnNzdTTngFSzdaRtWkT
-----END CERTIFICATE-----
Generated at Sat Jun 6 09:41:29 2026 by rpki-client