
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/713EC4A0CEA711F0BCE8816EC4F9AE02.roa
File: 713EC4A0CEA711F0BCE8816EC4F9AE02.roa (raw, json)
Hash identifier: NlcaG/TZ/oH1ghBXI9sgToXEaVIlZq7mweQOqOrT5jc=
Subject key identifier: 95:52:D8:55:20:5E:C4:85:38:51:76:4B:07:8B:97:F1:77:5B:2D:9F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30E4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/713EC4A0CEA711F0BCE8816EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:17:55 +0000
ROA not before: Mon 06 Jul 2026 16:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138439
IP address blocks: 138.252.230.0/24 maxlen: 24
138.252.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12516 (0x30e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd533-9d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:92:2f:33:b8:0a:34:11:1d:a3:26:73:ff:
e0:79:cf:41:68:17:7d:5f:dd:30:a3:83:f9:29:fe:
c6:5e:b9:1d:05:7a:ee:58:7a:49:2d:ca:d5:94:ea:
b9:ef:00:aa:bc:ce:bc:b9:4a:e7:37:cc:67:05:da:
f6:ae:ef:7e:a1:41:f9:05:73:d1:59:54:5b:f6:59:
11:c4:e5:fb:6e:ab:cf:b6:14:a2:b9:0d:18:8d:9f:
4f:48:57:9c:2b:4f:cd:9e:bb:55:dc:76:a2:4a:2a:
e0:5e:f7:90:86:29:f6:60:cf:66:d8:d3:5c:6f:bf:
c5:64:2a:6f:8f:8b:29:7a:75:5a:25:6b:05:81:25:
eb:94:af:41:6c:67:bf:0b:cc:3f:4e:b0:aa:2e:34:
8c:3f:35:56:cb:f2:4a:64:a5:fa:42:83:46:25:9e:
06:87:c5:3e:8d:73:4c:4b:39:3f:08:3b:c2:cb:ab:
52:67:1a:96:a2:dc:c8:7e:32:b1:28:af:0b:a8:54:
e7:c2:14:a8:e9:a7:08:aa:14:17:8e:81:30:fd:5e:
8b:67:c3:7b:e8:3d:50:aa:9b:73:d7:2b:14:af:d8:
0e:97:01:db:4b:43:c5:25:74:d2:75:c5:db:e9:06:
ed:79:53:19:e6:c9:d5:85:b8:c7:55:9f:2b:07:29:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:D8:55:20:5E:C4:85:38:51:76:4B:07:8B:97:F1:77:5B:2D:9F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/713EC4A0CEA711F0BCE8816EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.230.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:88:e8:8f:4b:ca:f7:f0:3f:47:d5:d0:fa:5b:4b:a1:5b:31:
90:07:84:87:9b:08:22:7f:a4:08:47:4d:b6:b0:33:c9:d4:5a:
cf:7c:e6:fd:5d:fa:22:b0:fc:27:fd:c9:7e:77:fa:41:04:51:
18:5a:bb:5f:82:52:24:e1:c6:7b:de:8c:20:4e:70:0b:1a:d3:
e0:89:97:f6:a9:e4:51:97:18:53:63:25:c4:ce:ec:e5:69:0d:
e2:b6:b1:3f:50:4b:83:c8:7b:59:49:a3:51:71:e9:4e:ef:49:
50:39:fb:92:da:c4:0b:8d:8a:cf:50:50:05:3b:43:90:43:cd:
bc:fb:7a:23:cd:71:ba:ad:40:ed:8f:3c:38:5f:0c:a4:8e:3e:
f4:8c:f1:ca:e3:23:ba:05:c4:b1:ba:02:50:cd:88:f1:f0:ea:
19:a1:95:6b:3e:3b:b9:f2:3d:4d:63:29:f4:87:17:6a:82:02:
11:75:f2:39:c6:4f:1a:a4:bf:31:ce:51:00:6c:f3:2a:bc:01:
23:61:09:aa:d8:b6:49:a0:ba:b6:ac:be:71:66:dd:6c:45:e5:
bc:d1:a5:04:3d:80:c5:c4:c6:50:16:91:14:51:91:3c:cc:2a:
81:5c:62:d7:ae:8b:15:12:5a:c8:00:11:3f:cc:eb:43:d1:8f:
a0:82:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:05 2026 by rpki-client