
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa
File: D1E157DAD99411F0B61ED2F763D3641D.roa (raw, json)
Hash identifier: VLN9iJrOsO7r5LHfjwTXZrioMeeNeNlLXN7Yv6NgTGg=
Subject key identifier: DF:BF:F8:9C:34:3A:57:B0:0E:4D:C5:60:78:A6:B3:B1:74:B5:7A:20
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2EA9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa
Signing time: Sun 31 May 2026 16:19:44 +0000
ROA not before: Sun 31 May 2026 16:19:44 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136904
IP address blocks: 138.252.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Jun 2026 09:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11945 (0x2ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:19:44 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5fa0-09ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:61:60:cf:f1:ee:ad:8d:25:74:94:cb:7c:8e:
63:34:19:ed:ad:b5:a2:52:76:b8:73:cb:52:03:17:
d1:2a:b5:92:56:d8:3a:75:0f:4a:c8:e4:f6:33:93:
8a:03:9b:7f:2e:16:37:7f:8b:0f:c8:bf:62:d1:b8:
5a:a5:eb:1a:8b:91:52:62:c8:3d:51:d7:5d:fc:b4:
7a:aa:df:26:fd:8c:db:b3:48:e6:aa:c5:48:1a:59:
d6:b9:aa:13:14:46:83:e1:82:fe:e2:2f:24:3e:ac:
83:62:5e:04:5d:fc:14:49:89:61:a3:4a:2d:3c:70:
0a:fd:66:f9:4f:70:c0:f2:2d:c7:bc:57:e5:ba:29:
b7:67:1c:87:97:13:9b:59:44:3d:49:a1:44:bc:17:
b7:33:d8:d6:1b:84:5b:8a:f5:e1:cb:44:0d:4c:33:
75:35:91:00:59:9f:c0:3b:32:54:43:8f:58:3b:3b:
0b:e5:72:b4:38:8e:e6:f5:49:a6:f3:59:bb:4f:4a:
74:18:b8:95:68:63:04:3e:85:26:15:2f:fb:6c:e6:
78:72:4c:d0:cb:1a:a5:42:3e:2b:60:c5:f2:a6:21:
07:3d:44:57:a2:25:3f:b4:3d:28:2a:ee:1a:67:b5:
de:48:f6:d1:ef:e4:c3:35:ba:b9:88:32:76:f6:b2:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BF:F8:9C:34:3A:57:B0:0E:4D:C5:60:78:A6:B3:B1:74:B5:7A:20
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.246.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:5e:35:80:40:d4:3f:2b:10:b6:e3:33:21:77:9d:b3:c9:5f:
0e:f0:cd:e2:3b:3c:96:95:99:32:7f:32:8d:40:23:82:f1:a3:
e5:ef:5a:73:99:70:a5:96:6c:5e:92:78:6f:d9:6a:f6:0d:67:
16:df:cd:12:9a:74:e0:b1:3b:99:bd:95:f1:85:f3:ca:3e:8c:
64:00:13:40:07:ab:e8:1b:b8:eb:7e:2a:e7:f8:21:a8:2e:45:
19:81:39:33:a1:dd:36:bb:b8:ca:c9:94:d0:23:81:94:0f:5b:
87:8e:b8:14:b9:75:9b:ea:07:09:23:1d:67:33:12:f4:f3:d8:
68:c7:f6:cd:e4:47:b5:79:01:60:44:1a:4a:a7:a1:55:a7:39:
87:53:fb:c4:14:51:31:ac:09:d8:16:17:53:1a:d2:54:8b:82:
97:25:09:4f:27:dc:cc:d1:9a:7a:81:a8:0d:fe:9b:c4:b9:7a:
6c:f7:75:c0:2c:90:fb:38:2b:e6:86:25:eb:61:40:a7:e3:ad:
8b:78:f5:fe:3d:eb:2b:34:bc:66:59:63:54:59:7a:a8:1c:22:
ec:ed:eb:b8:00:dd:51:c2:71:b7:4f:2f:af:53:48:bc:01:6e:
ff:3c:6e:ce:48:25:2d:9b:eb:ae:64:3f:12:ea:51:1d:89:08:
e3:d6:38:8f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYxOTQ0WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNWZhMC0wOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkmFgz/HurY0ldJTLfI5jNBntrbWiUna4c8tSAxfRKrWSVtg6dQ9KyOT2M5OK
A5t/LhY3f4sPyL9i0bhapesai5FSYsg9Uddd/LR6qt8m/Yzbs0jmqsVIGlnWuaoT
FEaD4YL+4i8kPqyDYl4EXfwUSYlho0otPHAK/Wb5T3DA8i3HvFfluim3ZxyHlxOb
WUQ9SaFEvBe3M9jWG4RbivXhy0QNTDN1NZEAWZ/AOzJUQ49YOzsL5XK0OI7m9Umm
81m7T0p0GLiVaGMEPoUmFS/7bOZ4ckzQyxqlQj4rYMXypiEHPURXoiU/tD0oKu4a
Z7XeSPbR7+TDNbq5iDJ29rKoxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN+/+Jw0
OlewDk3FYHims7F0tXogMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDFFMTU3REFE
OTk0MTFGMEI2MUVEMkY3NjNEMzY0MUQucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBivz2MA0GCSqGSIb3DQEBCwUAA4IBAQC3XjWAQNQ/KxC24zMhd52z
yV8O8M3iOzyWlZkyfzKNQCOC8aPl71pzmXCllmxeknhv2Wr2DWcW380SmnTgsTuZ
vZXxhfPKPoxkABNAB6voG7jrfirn+CGoLkUZgTkzod02u7jKyZTQI4GUD1uHjrgU
uXWb6gcJIx1nMxL089hox/bN5Ee1eQFgRBpKp6FVpzmHU/vEFFExrAnYFhdTGtJU
i4KXJQlPJ9zM0Zp6gagN/pvEuXps93XALJD7OCvmhiXrYUCn462LePX+PesrNLxm
WWNUWXqoHCLs7eu4AN1RwnG3Ty+vU0i8AW7/PG7OSCUtm+uuZD8S6lEdiQjj1jiP
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:23:42 2026 by rpki-client