
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/517FE4829C6F11F1BEAB9CAD4B11F970.roa
File: 517FE4829C6F11F1BEAB9CAD4B11F970.roa (raw, json)
Hash identifier: QOIKe8t8Gaz8MvUZow9fWFawXPQSKqe/TR8qQ1n0wdk=
Subject key identifier: 72:80:86:33:CA:96:78:2C:1B:4E:07:F5:A9:D7:89:43:8A:27:15:99
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FADF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/517FE4829C6F11F1BEAB9CAD4B11F970.roa
Signing time: Thu 20 Aug 2026 08:15:35 +0000
ROA not before: Thu 20 Aug 2026 08:15:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154837
IP address blocks: 43.241.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64223 (0xfadf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 20 08:15:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a86b7a7-af7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:49:65:20:46:0b:0e:48:59:3b:6f:35:4a:
0f:f0:3d:1a:bf:68:1c:2e:44:42:9e:f4:2a:60:7a:
2b:a6:29:29:08:97:49:4f:b9:77:ef:7b:27:cf:4d:
b7:d4:59:1d:48:1e:3f:52:c4:a3:9a:ce:3b:40:d5:
62:d3:b1:22:16:83:2b:94:df:38:11:52:7e:71:e9:
0f:5c:50:45:d7:4e:18:d1:b0:40:94:7f:d6:6a:23:
e8:7b:46:90:b0:c3:b3:e2:f4:c6:15:c3:9e:d2:78:
bf:a7:28:45:1d:03:8b:e4:a6:7f:ef:7e:d1:18:c8:
17:12:8a:9f:f5:c4:ec:f1:be:a2:56:96:f3:b3:bc:
59:53:33:58:8d:2a:e9:b3:98:be:bb:98:52:2c:f8:
32:a3:df:c3:c6:4a:23:ad:41:80:2a:f9:39:21:0f:
42:fd:6b:56:45:11:f3:23:0d:a6:7c:b9:da:cc:be:
ef:ca:64:f2:b4:56:73:5f:cb:53:2c:38:e8:69:a6:
5e:b8:fa:8f:b0:72:5d:78:cd:87:e3:83:c0:c5:28:
79:31:b8:d6:b6:58:f4:f4:05:8f:8a:01:1a:cf:cc:
95:74:cd:0a:ea:b5:c8:ee:7f:94:8c:7f:b5:5b:d3:
e2:48:d7:7a:30:02:b5:79:0c:00:ab:b5:b6:48:5a:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:80:86:33:CA:96:78:2C:1B:4E:07:F5:A9:D7:89:43:8A:27:15:99
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/517FE4829C6F11F1BEAB9CAD4B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.241.116.0/22
Signature Algorithm: sha256WithRSAEncryption
36:5e:a0:e2:fb:fd:3c:de:60:09:0d:1a:64:e2:ee:0e:c1:6b:
0e:e1:8d:21:fc:7c:7e:fd:67:0f:68:f5:39:da:b3:80:39:bf:
d2:ec:01:40:9b:f3:6e:0c:13:75:ab:43:60:e1:4e:a8:97:b6:
66:ce:05:0a:c2:b8:5a:31:8a:8d:91:39:fe:ba:99:41:65:69:
df:ee:72:44:58:12:d8:57:a0:93:34:b1:cf:03:22:aa:f5:4b:
44:da:b0:98:94:bb:22:38:90:aa:eb:63:38:1e:d4:d8:d7:99:
58:da:15:2b:83:42:99:ed:dd:11:f7:a7:83:32:40:a5:9f:36:
3d:78:a4:4e:5e:e2:2f:f5:85:1c:22:65:e2:15:91:75:21:3d:
e3:0f:16:46:df:0f:de:07:b9:2b:2f:63:42:80:7e:87:60:05:
18:a8:a8:f4:da:f1:f8:97:cb:11:31:79:91:ce:85:ab:42:c7:
4a:21:97:cb:07:a6:1c:db:7d:2b:17:24:26:a3:9a:f0:33:52:
69:a3:ea:a4:1b:30:62:32:58:c6:52:b4:cd:88:4f:96:d6:d6:
f7:10:21:b8:6b:22:9c:58:32:42:9f:f3:47:d0:82:f8:34:23:
ec:50:a7:58:a8:cb:51:d7:3e:58:23:9a:a0:4e:37:7a:fd:fa:
78:42:92:77
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPrfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDgyMDA4MTUzNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE4NmI3YTctYWY3ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKhMSWUgRgsOSFk7bzVKD/A9Gr9oHC5EQp70KmB6K6YpKQiXSU+5d+97J89N
t9RZHUgeP1LEo5rOO0DVYtOxIhaDK5TfOBFSfnHpD1xQRddOGNGwQJR/1moj6HtG
kLDDs+L0xhXDntJ4v6coRR0Di+Smf+9+0RjIFxKKn/XE7PG+olaW87O8WVMzWI0q
6bOYvruYUiz4MqPfw8ZKI61BgCr5OSEPQv1rVkUR8yMNpny52sy+78pk8rRWc1/L
Uyw46GmmXrj6j7ByXXjNh+ODwMUoeTG41rZY9PQFj4oBGs/MlXTNCuq1yO5/lIx/
tVvT4kjXejACtXkMAKu1tkhaFc0CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRygIYz
ypZ4LBtOB/Wp14lDiicVmTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUxN0ZFNDgy
OUM2RjExRjFCRUFCOUNBRDRCMTFGOTcwLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAivxdDANBgkqhkiG9w0BAQsFAAOCAQEANl6g4vv9PN5gCQ0aZOLu
DsFrDuGNIfx8fv1nD2j1OdqzgDm/0uwBQJvzbgwTdatDYOFOqJe2Zs4FCsK4WjGK
jZE5/rqZQWVp3+5yRFgS2FegkzSxzwMiqvVLRNqwmJS7IjiQqutjOB7U2NeZWNoV
K4NCme3dEfengzJApZ82PXikTl7iL/WFHCJl4hWRdSE94w8WRt8P3ge5Ky9jQoB+
h2AFGKio9Nrx+JfLETF5kc6Fq0LHSiGXywemHNt9KxckJqOa8DNSaaPqpBswYjJY
xlK0zYhPltbW9xAhuGsinFgyQp/zR9CC+DQj7FCnWKjLUdc+WCOaoE43ev36eEKS
dw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:13 2026 by rpki-client