
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/713EC4A0CEA711F0BCE8816EC4F9AE02.roa
File: 713EC4A0CEA711F0BCE8816EC4F9AE02.roa (raw, json)
Hash identifier: DzM1OwZToEGzxBYzbl4kh3a8Q5VLY/xi+3wOCq7iptk=
Subject key identifier: 92:4F:6F:A7:E6:AB:20:BE:CC:64:73:CA:B8:B7:56:47:17:C5:20:1C
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2EBD
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/713EC4A0CEA711F0BCE8816EC4F9AE02.roa
Signing time: Sun 31 May 2026 16:20:22 +0000
ROA not before: Sun 31 May 2026 16:20:22 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138439
IP address blocks: 138.252.230.0/24 maxlen: 24
138.252.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11965 (0x2ebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:20:22 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5fc6-e14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:d8:c5:67:59:2b:2d:32:22:50:69:9a:dc:
67:9e:ea:82:7f:61:80:18:14:13:03:15:13:a7:78:
f9:e8:40:31:0e:ac:34:8b:4d:c5:1d:84:77:71:e8:
31:53:03:9c:c0:ed:07:84:d2:d0:ef:ef:18:82:57:
54:eb:74:cd:9f:ba:8b:f8:d2:00:5c:62:f7:93:0a:
a1:0c:d7:d6:7e:6e:1b:ed:cb:df:fc:1a:f0:58:d0:
6a:8a:95:7b:eb:1f:d2:c3:7e:ae:b6:3e:d2:47:08:
2b:d7:e4:ad:98:ee:e9:ae:96:ff:1d:69:d3:1f:ff:
d4:1f:6d:75:9e:32:91:a9:70:98:b8:ed:ce:59:a6:
fb:0a:f5:7d:20:51:b6:61:58:5d:72:54:a2:71:fe:
b6:68:3c:17:49:ba:cf:0b:60:e6:7e:16:a5:c7:a1:
5e:43:d9:72:a5:c4:6f:a2:47:48:f1:48:43:b2:18:
b7:1c:91:15:4e:26:66:ce:6d:da:17:f1:38:be:8c:
e8:94:ad:87:29:a1:e5:a9:c5:9a:23:fe:1b:34:01:
d7:44:c3:4d:ff:2f:ea:2a:da:0f:24:f8:d0:3d:fd:
59:66:b0:74:e7:4f:9a:d5:e3:1c:a5:55:76:95:e1:
12:ef:2d:af:55:17:a9:18:19:0b:2e:5e:82:9a:7f:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4F:6F:A7:E6:AB:20:BE:CC:64:73:CA:B8:B7:56:47:17:C5:20:1C
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/713EC4A0CEA711F0BCE8816EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.230.0/23
Signature Algorithm: sha256WithRSAEncryption
92:78:c7:4c:f9:63:96:54:83:2b:5e:5e:c7:fe:5f:9b:f9:30:
c6:25:9d:c8:dd:d1:17:57:ea:00:a4:c9:7a:22:8c:98:b5:6b:
eb:d2:23:02:be:6c:e1:e2:4b:9c:62:41:ba:4c:49:4d:00:52:
39:81:4b:aa:f7:5c:25:2e:b3:02:bb:6d:ab:8b:e3:a9:14:c1:
31:d1:62:99:3a:a5:b9:42:4e:6d:0d:56:37:0a:b2:01:49:3d:
c1:43:92:61:aa:e1:44:f4:f2:35:dc:d0:74:57:9b:8b:b2:87:
ae:3e:21:be:2b:c1:ed:fe:c7:cf:7d:3b:b4:21:9f:b3:1e:23:
9f:85:ad:71:d8:a4:2d:dc:5a:1f:35:8a:ee:bb:12:8e:df:0c:
40:34:1a:72:45:1d:3d:04:20:01:28:2f:f4:4b:6b:22:d0:4a:
cd:39:17:4c:d1:15:88:4d:03:41:00:58:32:e0:54:28:5d:0f:
ed:c4:cb:c0:75:52:44:53:7b:07:fd:6e:f7:f8:1e:af:5d:cb:
b8:f7:fe:60:61:cc:c2:8a:9a:e7:3f:25:d8:ca:6f:06:77:a7:
5d:bd:f0:bb:54:3f:78:55:da:dc:d5:cc:70:a6:33:aa:4d:c1:
ad:20:9d:3c:f7:c9:65:20:24:a8:5d:1c:89:24:76:1d:b4:ea:
80:09:c8:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyMDIyWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNWZjNi1lMTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuUrYxWdZKy0yIlBpmtxnnuqCf2GAGBQTAxUTp3j56EAxDqw0i03FHYR3cegx
UwOcwO0HhNLQ7+8YgldU63TNn7qL+NIAXGL3kwqhDNfWfm4b7cvf/BrwWNBqipV7
6x/Sw36utj7SRwgr1+StmO7prpb/HWnTH//UH211njKRqXCYuO3OWab7CvV9IFG2
YVhdclSicf62aDwXSbrPC2Dmfhalx6FeQ9lypcRvokdI8UhDshi3HJEVTiZmzm3a
F/E4vozolK2HKaHlqcWaI/4bNAHXRMNN/y/qKtoPJPjQPf1ZZrB050+a1eMcpVV2
leES7y2vVRepGBkLLl6Cmn9PnQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJJPb6fm
qyC+zGRzyri3VkcXxSAcMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzEzRUM0QTBD
RUE3MTFGMEJDRTg4MTZFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBivzmMA0GCSqGSIb3DQEBCwUAA4IBAQCSeMdM+WOWVIMrXl7H/l+b
+TDGJZ3I3dEXV+oApMl6IoyYtWvr0iMCvmzh4kucYkG6TElNAFI5gUuq91wlLrMC
u22ri+OpFMEx0WKZOqW5Qk5tDVY3CrIBST3BQ5JhquFE9PI13NB0V5uLsoeuPiG+
K8Ht/sfPfTu0IZ+zHiOfha1x2KQt3FofNYruuxKO3wxANBpyRR09BCABKC/0S2si
0ErNORdM0RWITQNBAFgy4FQoXQ/txMvAdVJEU3sH/W73+B6vXcu49/5gYczCiprn
PyXYym8Gd6ddvfC7VD94Vdrc1cxwpjOqTcGtIJ0898llICSoXRyJJHYdtOqACcj4
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:52:42 2026 by rpki-client