
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6EFBB4C68D2D11EF81C1CA65C4F9AE02.roa
File: 6EFBB4C68D2D11EF81C1CA65C4F9AE02.roa (raw, json)
Hash identifier: 3asMsA3eDA60DCJa+58jnDYaQGa7SA+WYF4v8rBi8tE=
Subject key identifier: 25:0F:BA:19:37:41:35:6D:7B:B9:FE:85:8E:11:4A:40:A8:F0:00:CE
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2FF3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6EFBB4C68D2D11EF81C1CA65C4F9AE02.roa
Signing time: Sun 31 May 2026 16:30:20 +0000
ROA not before: Sun 31 May 2026 16:30:20 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 138.252.109.0/24 maxlen: 24
160.187.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12275 (0x2ff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:30:20 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c621c-d9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:dc:99:ee:6e:fc:af:23:f3:d2:2f:96:11:
4e:9d:08:df:fe:06:e0:53:04:bd:ab:10:76:b6:82:
74:44:9b:68:3e:c8:ba:5f:61:53:01:d1:7c:f0:47:
4c:12:19:98:41:f5:df:32:ae:4d:ba:9f:48:18:30:
d9:3b:cf:dd:9b:cb:ae:ee:50:57:de:74:95:85:53:
ff:49:94:5e:7e:c2:c7:49:25:a5:c2:d3:2c:93:bb:
92:f5:86:72:10:40:30:14:c4:6d:15:62:fd:ea:9a:
92:29:fa:97:13:5f:6c:97:a6:fa:a1:2f:cf:16:45:
db:90:5e:6e:32:31:60:85:7b:e4:a1:98:9f:82:84:
8a:c4:12:0a:32:1e:d8:8f:a5:dc:22:cc:5c:62:24:
d0:bd:c2:29:24:69:6e:a7:a9:36:4d:bc:21:25:6a:
a9:a1:43:1d:e1:65:b5:c6:43:41:e0:19:cc:a8:7a:
c7:d7:56:b1:26:13:58:dc:95:91:25:f3:97:ce:bd:
88:e9:a4:8d:50:91:a0:41:d2:80:d3:63:af:4e:46:
56:9b:ff:7e:0f:88:32:62:e5:4f:ac:d4:8c:3f:b9:
d6:ed:65:5b:19:0e:e8:8e:e0:b0:23:1b:d8:30:c3:
de:28:f6:f1:9a:49:3d:52:95:64:da:6c:7b:19:7f:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:BA:19:37:41:35:6D:7B:B9:FE:85:8E:11:4A:40:A8:F0:00:CE
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6EFBB4C68D2D11EF81C1CA65C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.109.0/24
160.187.232.0/24
Signature Algorithm: sha256WithRSAEncryption
86:49:77:6d:85:64:24:91:d3:d3:53:d9:96:26:96:de:f8:f4:
54:7f:9e:49:78:26:9f:ac:dc:79:76:24:ad:fe:8c:e7:65:9a:
e8:88:0d:81:7a:b0:77:15:65:7f:fe:d5:34:43:30:d9:d9:8e:
24:d6:bf:0e:44:cb:98:59:dd:79:05:62:d9:8c:3a:77:f4:97:
13:69:f2:a3:af:3b:9f:bc:f2:2f:27:f4:6f:44:8a:49:eb:9b:
d4:69:a2:57:1b:b8:dd:5d:f7:1b:04:56:eb:5e:46:68:8c:3b:
4b:c7:d9:ce:d8:4c:33:b0:34:b4:e0:60:13:5b:57:01:e2:03:
f1:1d:ee:dc:03:7b:05:57:5e:33:cc:e7:cc:11:c3:6e:93:8e:
16:14:cf:66:03:92:c9:69:ed:1c:a7:6d:a7:c3:91:3e:08:45:
60:fe:f6:2d:c8:46:02:4d:f9:3d:cb:3d:7f:8a:46:c0:71:66:
6c:b1:84:f4:d0:ad:57:6a:e1:3e:d3:bc:56:71:f7:07:63:6b:
b0:e6:23:d6:23:6b:df:6c:cb:3d:b8:f8:8a:18:53:2b:a2:8c:
f0:93:c0:08:50:37:21:2a:4d:e3:84:f9:af:6e:f8:07:6f:ab:
f0:d8:a9:29:af:0b:47:a2:7a:d1:7c:3a:d4:77:ce:ee:b4:96:
1c:82:0b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:29:15 2026 by rpki-client