
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22FD52722B4D11ECB230A64EC4F9AE02.roa
File: 22FD52722B4D11ECB230A64EC4F9AE02.roa (raw, json)
Hash identifier: qxbf+9b82EvAidmbh4lwPNQKoh9aorYESnZaBOhlJlM=
Subject key identifier: A8:58:94:76:D4:BB:A2:38:D0:AF:51:9F:89:1F:0C:4E:58:88:33:8C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E64E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22FD52722B4D11ECB230A64EC4F9AE02.roa
Signing time: Sun 31 May 2026 17:09:18 +0000
ROA not before: Sun 31 May 2026 17:09:18 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 139543
IP address blocks: 103.171.188.0/23 maxlen: 24
2001:df7:7b80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58958 (0xe64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:09:18 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6b3e-6085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:74:0e:3c:18:1a:f8:b5:8f:b6:e4:e2:32:
4c:e3:7f:23:28:68:a5:c1:b1:f4:67:99:57:95:b2:
75:25:80:a5:f5:e4:f4:83:3e:87:10:a7:58:f1:23:
23:bb:f4:97:c0:65:d2:8d:47:a3:17:71:fb:c0:d9:
08:b1:24:67:34:ca:17:a7:40:88:12:a8:4c:08:4f:
85:e2:57:ca:9a:68:0f:e9:7b:7d:02:9b:c9:08:3c:
af:a2:e6:bb:dc:f3:3e:9c:5d:31:d3:1e:69:4a:d2:
90:2b:38:91:04:1e:12:79:9a:76:55:dd:a3:82:0a:
77:e4:51:32:71:fc:2c:3c:c1:3f:c5:ba:90:e6:63:
81:18:33:f5:92:21:e3:90:93:9f:a8:64:37:b3:59:
65:bb:1f:0a:6b:96:e4:ef:3c:c9:1b:c8:25:8c:e2:
4f:fb:9d:88:df:b6:10:ee:0b:dc:36:31:c3:50:31:
1a:02:56:52:be:01:26:62:5f:68:2d:76:88:ee:96:
32:27:02:d9:9b:8b:9e:3e:0a:53:ec:9c:f1:61:95:
b9:3c:b8:a7:fc:6a:9f:b3:55:53:e4:91:d0:50:35:
5e:27:bd:de:42:5a:1e:4f:d1:28:5a:92:76:c3:75:
f1:33:f2:98:ae:ed:17:ad:ba:8f:93:75:40:0f:5f:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:58:94:76:D4:BB:A2:38:D0:AF:51:9F:89:1F:0C:4E:58:88:33:8C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22FD52722B4D11ECB230A64EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.188.0/23
IPv6:
2001:df7:7b80::/48
Signature Algorithm: sha256WithRSAEncryption
1c:99:88:98:58:93:03:97:5d:28:33:73:d5:cf:7b:95:29:0d:
55:7f:54:ad:07:ec:0a:c9:a5:f2:1d:59:45:fb:5d:a0:a2:98:
2c:ca:fd:6f:48:08:95:f3:71:5f:ea:5a:ee:25:9d:81:a1:df:
36:8b:a9:90:dd:2f:b3:d4:44:60:f2:1c:cf:86:99:c3:0d:74:
2e:89:3a:d1:0b:f2:b2:f3:98:f4:27:be:ad:12:74:f1:65:f7:
85:a2:e9:9c:ea:1d:43:74:7f:b1:06:9d:d4:5c:19:18:a4:9e:
a7:38:d2:ba:fa:f0:1d:bd:fc:dc:44:07:54:d3:84:ba:1f:0b:
87:c3:cc:ec:f4:5b:0e:67:f2:06:65:44:e8:84:38:a7:5b:df:
d5:80:65:d3:d5:09:e1:9a:49:1e:9d:1f:42:e7:cc:57:ae:9e:
00:ee:05:aa:0b:29:d6:f6:45:78:bc:cf:2e:3a:d1:c1:58:2c:
39:af:2a:a1:04:a8:87:96:9f:c1:45:a7:8e:40:1c:19:10:6f:
43:88:a1:08:b5:df:a9:97:cf:c4:ec:86:dc:87:44:7b:70:e2:
78:3a:26:aa:69:7e:ce:12:ca:71:21:10:35:f5:2d:90:d0:17:
e1:d3:b3:97:d4:fb:1a:ed:86:6a:8d:b6:0b:65:b2:3d:d9:82:
1e:e6:10:f6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAOZOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDkxOFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZiM2UtNjA4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALkjdA48GBr4tY+25OIyTON/IyhopcGx9GeZV5WydSWApfXk9IM+hxCnWPEj
I7v0l8Bl0o1Hoxdx+8DZCLEkZzTKF6dAiBKoTAhPheJXyppoD+l7fQKbyQg8r6Lm
u9zzPpxdMdMeaUrSkCs4kQQeEnmadlXdo4IKd+RRMnH8LDzBP8W6kOZjgRgz9ZIh
45CTn6hkN7NZZbsfCmuW5O88yRvIJYziT/udiN+2EO4L3DYxw1AxGgJWUr4BJmJf
aC12iO6WMicC2ZuLnj4KU+yc8WGVuTy4p/xqn7NVU+SR0FA1Xie93kJaHk/RKFqS
dsN18TPymK7tF626j5N1QA9fi60CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSoWJR2
1LuiONCvUZ+JHwxOWIgzjDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIyRkQ1Mjcy
MkI0RDExRUNCMjMwQTY0RUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWervDAPBAIAAjAJAwcAIAEN93uAMA0GCSqGSIb3DQEBCwUAA4IB
AQAcmYiYWJMDl10oM3PVz3uVKQ1Vf1StB+wKyaXyHVlF+12gopgsyv1vSAiV83Ff
6lruJZ2Bod82i6mQ3S+z1ERg8hzPhpnDDXQuiTrRC/Ky85j0J76tEnTxZfeFoumc
6h1DdH+xBp3UXBkYpJ6nONK6+vAdvfzcRAdU04S6HwuHw8zs9FsOZ/IGZUTohDin
W9/VgGXT1QnhmkkenR9C58xXrp4A7gWqCynW9kV4vM8uOtHBWCw5ryqhBKiHlp/B
RaeOQBwZEG9DiKEItd+pl8/E7Ibch0R7cOJ4OiaqaX7OEspxIRA19S2Q0Bfh07OX
1Psa7YZqjbYLZbI92YIe5hD2
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:51 2026 by rpki-client