
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa
File: 384CF758C46011F091DDFD33C4F9AE02.roa (raw, json)
Hash identifier: IhwEid6yvTAHNOtnPFdiJJvNN9DRGJ9VmV8VFHkhJ4k=
Subject key identifier: 42:33:F4:F8:DD:47:19:5E:0A:69:12:4C:AE:52:F2:EE:03:18:22:59
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2FDA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa
Signing time: Sun 31 May 2026 16:29:30 +0000
ROA not before: Sun 31 May 2026 16:29:30 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 154326
IP address blocks: 138.252.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12250 (0x2fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:29:30 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c61ea-40ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:9e:db:55:b5:84:04:1b:46:dc:b7:31:4a:
cd:74:50:fa:79:e3:7b:a2:f4:cf:37:1e:7f:ca:f0:
03:ab:1e:d0:78:a3:b4:d3:39:83:00:a9:df:8e:c2:
10:d2:ec:36:e2:84:02:2b:21:71:fe:9c:7d:78:a2:
7e:95:59:6c:e9:f0:ae:04:53:5d:2e:00:7b:9e:9f:
5c:fc:9c:e3:b6:ff:0b:24:7a:e1:83:4d:d5:e4:ab:
70:63:c8:af:25:4f:f8:e2:b6:35:7f:d0:58:e9:f5:
d7:73:03:8e:19:c1:2e:fa:1d:ef:ad:cc:ca:6e:77:
5d:78:a9:e3:36:c8:7e:dc:0b:50:d9:56:ae:a7:94:
ec:25:0f:f6:cc:fb:42:c9:3c:08:2f:2f:cc:ec:c5:
8b:24:f6:81:b1:47:d0:44:54:05:5c:f7:d5:c8:75:
36:5f:a0:6d:a7:a8:1a:88:99:e4:2b:d8:e1:02:55:
e6:8a:38:e2:92:a6:f8:e5:53:43:47:01:98:38:db:
1b:5b:b3:14:49:10:00:d8:67:09:91:d9:6e:78:ca:
18:85:9c:38:cc:76:72:04:26:2d:18:b4:20:c4:16:
1e:ae:07:c5:3e:e7:03:27:65:13:14:62:97:54:4c:
10:ec:46:34:bb:88:e6:21:b4:3b:c9:15:38:6c:b3:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:F4:F8:DD:47:19:5E:0A:69:12:4C:AE:52:F2:EE:03:18:22:59
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:07:d8:59:07:86:83:35:06:be:a5:5d:56:c7:d8:c2:f6:72:
9d:61:8b:5a:71:90:8d:03:79:c9:d6:07:1c:5d:c0:01:d8:4d:
0e:7d:b4:b7:55:e2:42:72:4b:c2:16:55:56:19:e9:bc:d4:2e:
e1:2d:00:e9:a0:98:b6:1a:b9:b3:b3:33:13:70:27:b2:6b:b0:
54:91:08:d0:71:09:ca:a7:8c:6a:aa:ee:de:1b:89:59:2c:aa:
e9:5a:24:f5:b7:60:b1:41:08:1b:04:17:46:8f:a3:39:5d:45:
7b:95:90:d9:b9:15:c2:5d:a5:9b:98:83:69:aa:3d:1f:70:19:
68:ba:95:af:8e:c8:f1:b1:02:a0:36:7b:a0:e6:9a:d0:d2:ec:
e8:0a:a5:1e:2d:10:19:eb:26:26:ba:31:34:59:29:e4:51:ce:
10:90:70:50:76:7c:3b:43:d5:5c:85:50:d5:79:f2:75:a8:53:
60:1a:85:a0:13:df:d9:fa:33:07:10:a5:22:ca:ab:0d:30:fa:
4b:8e:64:d1:9e:0f:65:11:fd:b6:6e:34:6c:89:25:77:42:1c:
d6:72:bb:2a:55:c2:64:99:e6:1f:6c:d3:50:34:93:9d:a2:23:
6e:21:af:9f:fb:72:5b:d9:69:37:09:6a:cf:6b:da:25:b3:7f:
ee:5e:60:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:00 2026 by rpki-client