
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05BD22E03C8911F0B48F9B6DC4F9AE02.roa
File: 05BD22E03C8911F0B48F9B6DC4F9AE02.roa (raw, json)
Hash identifier: 7ozq9uX7fDvSkzu4piz1Ou60XaXK31KYZ5lcGYjW3o4=
Subject key identifier: F8:FB:B5:AB:A1:60:A2:5C:11:7A:73:FD:A5:73:DC:B7:C0:1F:A5:C6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E326
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05BD22E03C8911F0B48F9B6DC4F9AE02.roa
Signing time: Sun 31 May 2026 16:43:06 +0000
ROA not before: Sun 31 May 2026 16:43:06 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 134315
IP address blocks: 2001:df5:8840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58150 (0xe326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:43:06 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c651a-34cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:5c:6e:6d:be:be:03:3a:f3:26:52:93:5d:
7c:2a:23:9e:74:fb:71:e2:80:30:62:00:2e:20:a6:
90:30:56:c4:43:8f:cd:54:3e:3a:68:9c:04:83:4b:
d7:e0:8e:90:0b:b0:c2:3a:5a:96:4f:7c:3a:a8:56:
1c:4b:1d:9c:66:84:a9:2b:aa:7e:99:95:2b:a8:e0:
87:12:41:4a:82:ca:52:53:32:e3:15:59:76:35:dc:
a5:e9:0e:d9:95:27:16:38:64:ac:04:b5:af:9f:f6:
6c:d2:1e:6a:ff:af:91:d7:80:b7:64:46:36:3c:2d:
3e:26:41:b5:3d:3e:0e:3a:2c:ad:d3:11:bc:9f:00:
cb:f8:df:b8:89:8d:75:fa:2e:20:72:f5:2c:c2:13:
8d:04:36:b3:a5:e0:87:04:42:d3:01:cf:e5:1c:ea:
8a:f1:51:3c:14:ab:c1:f7:f6:49:c2:ba:41:cf:bc:
a7:76:b5:af:31:7d:fa:2f:da:28:73:2a:41:f4:0d:
f6:21:1f:ed:bb:af:63:87:f0:16:7a:51:3a:54:d1:
64:93:95:15:e9:b9:f9:21:7c:9c:af:1c:4e:07:56:
e1:e5:cf:bb:b8:68:bc:5b:c4:17:2f:6c:b6:5a:99:
c8:0c:8f:10:43:db:8f:3a:b8:05:a3:11:eb:47:4f:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:B5:AB:A1:60:A2:5C:11:7A:73:FD:A5:73:DC:B7:C0:1F:A5:C6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05BD22E03C8911F0B48F9B6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:8840::/48
Signature Algorithm: sha256WithRSAEncryption
09:98:21:a4:b5:5c:ef:c9:51:8e:93:0c:f4:21:3e:02:d8:a8:
22:29:c7:a8:83:66:5b:5c:fc:bd:8a:0f:c5:fe:dd:1c:b1:1a:
12:96:bf:84:28:24:5f:e9:36:57:1b:10:b7:2e:a7:86:a2:d1:
21:9b:7f:34:13:e8:03:1f:a6:f5:14:f7:b8:4a:84:06:18:72:
83:a5:da:27:4d:da:00:ba:ae:12:97:8b:ab:42:ae:38:ac:2c:
2e:85:9d:4c:a3:64:ca:f0:a0:47:48:86:14:4d:8c:e9:a4:c4:
a3:15:d0:7e:24:54:f1:09:26:0f:20:bb:2c:da:38:5d:d8:20:
57:a7:23:29:a4:e2:ae:6f:bf:d9:1f:e9:b5:53:fb:2d:1f:f9:
06:fe:53:86:62:67:79:61:db:65:40:2b:c0:ba:22:ac:ad:56:
6e:b2:b6:90:47:92:32:0a:64:09:41:84:8b:be:b2:a2:a3:af:
be:4a:50:8b:71:46:b1:f6:b4:be:5d:4f:62:71:4d:99:39:60:
61:6c:5a:8b:8f:b8:36:c2:e5:67:1d:e5:4c:33:06:d5:c9:96:
6b:c8:1e:e2:9b:e2:4e:5b:e6:ee:1e:fd:57:31:ac:01:9b:fd:
00:15:48:15:57:25:4a:26:10:c3:e4:30:1c:27:a1:d6:cc:16:
91:e3:fc:ad
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAOMmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NDMwNloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY1MWEtMzRjYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ45XG5tvr4DOvMmUpNdfCojnnT7ceKAMGIALiCmkDBWxEOPzVQ+OmicBINL
1+COkAuwwjpalk98OqhWHEsdnGaEqSuqfpmVK6jghxJBSoLKUlMy4xVZdjXcpekO
2ZUnFjhkrAS1r5/2bNIeav+vkdeAt2RGNjwtPiZBtT0+DjosrdMRvJ8Ay/jfuImN
dfouIHL1LMITjQQ2s6XghwRC0wHP5RzqivFRPBSrwff2ScK6Qc+8p3a1rzF9+i/a
KHMqQfQN9iEf7buvY4fwFnpROlTRZJOVFem5+SF8nK8cTgdW4eXPu7hovFvEFy9s
tlqZyAyPEEPbjzq4BaMR60dPIlECAwEAAaOCAmMwggJfMB0GA1UdDgQWBBT4+7Wr
oWCiXBF6c/2lc9y3wB+lxjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA1QkQyMkUw
M0M4OTExRjBCNDhGOUI2REM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfWIQDANBgkqhkiG9w0BAQsFAAOCAQEACZghpLVc78lRjpMM
9CE+AtioIinHqINmW1z8vYoPxf7dHLEaEpa/hCgkX+k2VxsQty6nhqLRIZt/NBPo
Ax+m9RT3uEqEBhhyg6XaJ03aALquEpeLq0KuOKwsLoWdTKNkyvCgR0iGFE2M6aTE
oxXQfiRU8QkmDyC7LNo4XdggV6cjKaTirm+/2R/ptVP7LR/5Bv5ThmJneWHbZUAr
wLoirK1WbrK2kEeSMgpkCUGEi76yoqOvvkpQi3FGsfa0vl1PYnFNmTlgYWxai4+4
NsLlZx3lTDMG1cmWa8ge4pviTlvm7h79VzGsAZv9ABVIFVclSiYQw+QwHCeh1swW
keP8rQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:47 2026 by rpki-client