
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa
File: 5835972CD53911EEB6855F57C4F9AE02.roa (raw, json)
Hash identifier: i1QYkOcINxLnYhvet7LkTzyxOBPYtXybrm+F7+PWlJk=
Subject key identifier: 0B:FF:F7:22:E2:C8:10:1F:FA:4C:7B:F6:9C:68:4E:C1:7A:93:74:5C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E995
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa
Signing time: Sun 31 May 2026 17:37:19 +0000
ROA not before: Sun 31 May 2026 17:37:19 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150656
IP address blocks: 2001:df1:e540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59797 (0xe995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:37:19 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c71cf-7674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:88:5f:6a:5e:e8:7e:45:62:5c:a5:36:dc:
26:f1:77:df:da:d8:d9:bb:44:06:9e:ea:30:45:28:
60:4e:14:6a:1f:aa:a9:90:e4:ae:17:3e:f8:2b:99:
84:2a:54:fb:21:a9:d6:e7:6a:31:f9:26:7f:3c:cf:
5e:6f:66:bd:8f:e2:fd:92:26:6e:ea:cd:48:15:45:
59:95:82:aa:16:08:20:d0:38:11:17:85:3e:f7:23:
d6:f4:b0:33:73:9b:12:24:42:2b:58:96:6f:ba:d0:
27:c2:6a:f8:8f:96:45:a4:67:29:77:08:05:90:66:
c3:ac:90:f1:bb:3e:b0:16:61:c1:ea:97:77:76:ae:
9d:0d:5f:22:f3:76:20:86:81:e4:8e:f9:d8:50:1d:
1a:80:ec:18:b7:97:0f:da:9e:2a:cb:6f:b5:71:2c:
4f:52:47:b5:c1:46:91:19:ab:fe:3b:aa:73:ff:b6:
c0:16:8e:6a:ee:83:50:1f:b9:b8:20:00:f4:d5:64:
ff:1c:5c:ea:50:16:94:38:ef:90:3c:7c:8e:c5:6e:
c2:31:35:d6:1c:40:9c:13:75:70:ae:6b:14:a4:79:
a2:0f:db:e0:34:c4:52:e0:ae:f1:b9:44:83:98:0e:
77:eb:7b:6c:4f:0b:49:f1:e0:39:e1:a0:dd:03:7d:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FF:F7:22:E2:C8:10:1F:FA:4C:7B:F6:9C:68:4E:C1:7A:93:74:5C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:e540::/48
Signature Algorithm: sha256WithRSAEncryption
75:53:bc:d8:8b:76:6d:8e:97:e9:e8:e9:07:a5:d7:b9:08:63:
e7:a5:b8:6e:be:0a:18:4b:7c:fd:8f:01:69:0b:9b:c6:5f:51:
c2:8f:a9:03:ce:86:8a:d8:41:bd:7c:c9:38:87:09:6f:d4:c9:
1d:f8:60:3d:55:c6:33:82:84:6b:d9:f8:ed:f6:dd:4e:08:71:
f5:aa:97:b3:94:c7:e1:be:e0:3f:d2:77:53:b9:b3:50:c7:3e:
df:29:ab:10:c0:56:4c:eb:94:65:23:69:8a:aa:53:ba:02:4b:
9f:94:03:5e:66:5f:0e:f3:c5:b4:7c:bb:36:40:ed:b2:a4:a3:
6e:12:03:f6:23:fa:50:ed:fe:3a:a4:f1:9c:50:06:7c:7a:46:
fd:0b:62:b0:1d:a6:21:84:0a:2b:86:bd:be:ee:04:83:d6:5b:
ab:11:ec:09:4c:21:43:3d:35:5b:64:6a:75:ec:8b:9d:d2:25:
7e:1a:51:ae:22:9d:8b:8a:5a:0b:ca:a1:ed:3b:c8:c5:65:fb:
cb:72:0d:5b:aa:23:fe:f4:9a:ed:5a:92:57:ea:36:c7:43:b2:
a7:20:ca:ba:92:88:7d:18:c6:36:7e:41:3a:50:6a:c9:57:a0:
05:97:1c:12:bc:85:a2:8b:5a:e7:12:05:cb:f0:4c:72:4e:2c:
18:c9:bf:2e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAOmVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzcxOVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcxY2YtNzY3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKikiF9qXuh+RWJcpTbcJvF339rY2btEBp7qMEUoYE4Uah+qqZDkrhc++CuZ
hCpU+yGp1udqMfkmfzzPXm9mvY/i/ZImburNSBVFWZWCqhYIINA4EReFPvcj1vSw
M3ObEiRCK1iWb7rQJ8Jq+I+WRaRnKXcIBZBmw6yQ8bs+sBZhweqXd3aunQ1fIvN2
IIaB5I752FAdGoDsGLeXD9qeKstvtXEsT1JHtcFGkRmr/juqc/+2wBaOau6DUB+5
uCAA9NVk/xxc6lAWlDjvkDx8jsVuwjE11hxAnBN1cK5rFKR5og/b4DTEUuCu8blE
g5gOd+t7bE8LSfHgOeGg3QN9fGkCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBQL//ci
4sgQH/pMe/acaE7BepN0XDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU4MzU5NzJD
RDUzOTExRUVCNjg1NUY1N0M0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfHlQDANBgkqhkiG9w0BAQsFAAOCAQEAdVO82It2bY6X6ejp
B6XXuQhj56W4br4KGEt8/Y8BaQubxl9Rwo+pA86GithBvXzJOIcJb9TJHfhgPVXG
M4KEa9n47fbdTghx9aqXs5TH4b7gP9J3U7mzUMc+3ymrEMBWTOuUZSNpiqpTugJL
n5QDXmZfDvPFtHy7NkDtsqSjbhID9iP6UO3+OqTxnFAGfHpG/QtisB2mIYQKK4a9
vu4Eg9ZbqxHsCUwhQz01W2RqdeyLndIlfhpRriKdi4paC8qh7TvIxWX7y3INW6oj
/vSa7VqSV+o2x0OypyDKupKIfRjGNn5BOlBqyVegBZccEryFoota5xIFy/BMck4s
GMm/Lg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:53 2026 by rpki-client