
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5851940A1AAF11ECA9C70C78C4F9AE02.roa
File: 5851940A1AAF11ECA9C70C78C4F9AE02.roa (raw, json)
Hash identifier: sAbg/7XdpxHvWiIflgc10eA7HH35wWEXNoZvrSa1AAc=
Subject key identifier: 47:E6:C4:F5:52:B7:E5:FB:B0:68:17:88:A6:85:2F:41:8D:3C:49:7C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E791
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5851940A1AAF11ECA9C70C78C4F9AE02.roa
Signing time: Sun 31 May 2026 17:19:55 +0000
ROA not before: Sun 31 May 2026 17:19:55 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 142445
IP address blocks: 103.168.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59281 (0xe791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:19:55 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6dbb-ae57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:fb:2a:30:b2:63:28:8f:7a:fb:54:b8:21:
e9:2b:fb:2a:4b:25:4a:09:d2:7b:7e:bc:21:9d:07:
60:fa:b2:8c:59:5c:7a:69:91:f2:2c:b6:e9:04:65:
76:6e:ce:62:36:4f:a7:89:69:46:f9:b7:4d:ef:33:
0b:62:ea:fd:8b:59:23:5b:bf:6d:61:17:1c:fd:13:
1b:86:5e:f3:9b:a8:4b:52:2f:9b:fa:e4:48:b8:da:
0d:23:13:0c:27:b5:2c:ad:67:2c:98:50:a7:73:e2:
9a:2b:e5:33:69:f0:ca:da:56:6c:cd:7e:11:29:35:
1c:9c:93:c2:10:a0:99:d0:5b:c8:06:5c:7d:36:64:
58:73:a5:b0:f0:1c:ef:1e:4d:db:b3:00:e5:3d:28:
db:7f:36:af:11:d0:76:82:9d:2d:47:3a:31:db:a7:
9b:fe:52:b7:c1:79:8f:4c:dc:25:2f:cd:55:7c:b0:
31:60:40:bd:dc:2e:ea:ee:7c:d9:fa:2a:fa:48:76:
9e:78:a8:e7:fa:1d:ce:ad:dc:fc:98:db:61:08:e1:
68:e0:58:fb:50:67:b3:c1:ee:5c:18:ae:77:6f:a7:
72:a5:7a:a5:0f:37:39:6f:ab:84:e2:e2:10:5f:1a:
2d:04:f5:28:f2:cd:18:34:c0:fc:2f:31:7b:79:46:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E6:C4:F5:52:B7:E5:FB:B0:68:17:88:A6:85:2F:41:8D:3C:49:7C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5851940A1AAF11ECA9C70C78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.234.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:45:58:77:69:ab:0e:21:b6:97:c2:82:ca:ce:28:79:41:4e:
6b:7b:20:49:d8:73:22:0e:e3:8f:72:c0:7f:91:1d:df:8f:d4:
4f:ed:0f:d3:c6:4d:8b:35:04:7d:df:4b:9d:5d:c9:4f:c4:3a:
e2:9d:9d:e5:85:36:9d:3f:13:61:81:d5:83:a4:2b:b6:f6:9e:
f4:33:5e:31:3a:9a:99:1d:17:d3:c7:b1:28:28:40:40:6a:8f:
c4:06:d1:9c:f6:2a:9a:42:0d:e2:c4:3d:f1:93:ad:98:29:de:
0b:40:df:41:f6:a1:2e:bd:05:f6:44:20:71:f0:97:93:54:63:
d0:63:0f:88:7f:8f:d7:97:3b:7d:e0:ee:32:a7:e7:be:70:07:
8d:3f:34:bb:b6:3d:24:48:24:e1:10:bf:e7:67:2d:24:68:d0:
ba:bd:0b:9e:58:d5:af:09:e3:6a:cb:78:31:e7:b6:ff:6d:f7:
c3:e8:9e:6f:10:ab:87:b2:4b:bc:4a:65:80:6a:f9:43:9e:3a:
03:bf:d4:46:bb:57:b7:c8:01:4e:24:7a:01:ac:ec:fa:05:d0:
e6:01:8b:80:88:85:1b:be:fb:b8:7f:52:87:be:31:cc:95:28:
d2:d6:b6:70:b0:61:84:d4:0f:00:a1:82:a3:30:d9:02:b2:5e:
3e:9b:c3:18
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOeRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MTk1NVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZkYmItYWU1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANVC+yowsmMoj3r7VLgh6Sv7KkslSgnSe368IZ0HYPqyjFlcemmR8iy26QRl
dm7OYjZPp4lpRvm3Te8zC2Lq/YtZI1u/bWEXHP0TG4Ze85uoS1Ivm/rkSLjaDSMT
DCe1LK1nLJhQp3PimivlM2nwytpWbM1+ESk1HJyTwhCgmdBbyAZcfTZkWHOlsPAc
7x5N27MA5T0o2382rxHQdoKdLUc6Mdunm/5St8F5j0zcJS/NVXywMWBAvdwu6u58
2foq+kh2nnio5/odzq3c/JjbYQjhaOBY+1Bns8HuXBiud2+ncqV6pQ83OW+rhOLi
EF8aLQT1KPLNGDTA/C8xe3lGC9kCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRH5sT1
Urfl+7BoF4imhS9BjTxJfDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU4NTE5NDBB
MUFBRjExRUNBOUM3MEM3OEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeo6jANBgkqhkiG9w0BAQsFAAOCAQEAoUVYd2mrDiG2l8KCys4o
eUFOa3sgSdhzIg7jj3LAf5Ed34/UT+0P08ZNizUEfd9LnV3JT8Q64p2d5YU2nT8T
YYHVg6Qrtvae9DNeMTqamR0X08exKChAQGqPxAbRnPYqmkIN4sQ98ZOtmCneC0Df
QfahLr0F9kQgcfCXk1Rj0GMPiH+P15c7feDuMqfnvnAHjT80u7Y9JEgk4RC/52ct
JGjQur0LnljVrwnjast4Mee2/233w+iebxCrh7JLvEplgGr5Q546A7/URrtXt8gB
TiR6Aazs+gXQ5gGLgIiFG777uH9Sh74xzJUo0ta2cLBhhNQPAKGCozDZArJePpvD
GA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:59 2026 by rpki-client