
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5851940A1AAF11ECA9C70C78C4F9AE02.roa
File: 5851940A1AAF11ECA9C70C78C4F9AE02.roa (raw, json)
Hash identifier: LvMzdxbpw7n5Ax/0JfkBu2x0qbVaukPYCJIqVXzE7bo=
Subject key identifier: 7F:11:3E:52:74:6B:C2:E4:2E:6E:4D:1D:73:4F:95:9D:48:38:25:DE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F3AF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5851940A1AAF11ECA9C70C78C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:18:44 +0000
ROA not before: Mon 06 Jul 2026 17:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142445
IP address blocks: 103.168.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62383 (0xf3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be374-7359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:c9:18:06:07:ed:2b:b3:d7:8c:b5:2f:01:
2c:14:63:7c:57:9c:d1:9f:86:59:91:34:ea:51:ed:
bd:85:59:23:84:e8:53:d9:d3:5d:a6:40:5c:f5:38:
1f:38:38:65:ae:b9:a9:e1:67:ba:43:e9:63:08:58:
64:19:86:3d:0b:fc:5c:6b:91:f4:92:79:4e:51:aa:
49:b1:21:a4:86:c2:ca:12:3b:87:3d:27:b6:6b:2c:
ee:86:e6:54:38:da:71:4e:03:3b:3b:5b:f9:47:ee:
2b:e2:3a:4e:98:cf:e8:43:1b:46:a0:29:23:cb:09:
1d:5b:04:f7:d8:9f:28:39:f2:9b:8c:05:e7:e3:d1:
6f:cb:7f:b6:da:d3:34:9c:c2:9a:50:3f:d5:b5:87:
e5:92:9d:d3:44:32:38:aa:cb:f9:d2:e8:9d:bc:dc:
19:7d:24:c8:36:a9:fd:e1:7d:31:71:f5:81:43:22:
6d:0b:29:1d:17:f2:27:7a:7d:4b:29:5a:23:92:1e:
b8:c0:f7:19:46:b1:fb:3a:6b:20:0c:50:44:1f:05:
3e:cb:38:c5:b4:62:fc:b3:b2:b9:e9:f8:68:fb:52:
95:2c:c9:2b:b9:0b:b9:3b:18:b4:4b:e1:89:0f:9a:
b3:6c:22:77:21:f3:0e:47:1b:2e:8d:1b:94:56:67:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:11:3E:52:74:6B:C2:E4:2E:6E:4D:1D:73:4F:95:9D:48:38:25:DE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5851940A1AAF11ECA9C70C78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.234.0/23
Signature Algorithm: sha256WithRSAEncryption
98:e5:ed:94:e9:05:d0:ea:6a:35:9e:2f:83:ff:1a:5d:2c:ee:
f7:88:54:6d:74:52:d7:48:80:22:73:6a:5a:38:6e:4a:00:1d:
23:26:de:5a:aa:98:40:6f:02:d5:75:e0:df:80:67:4f:0b:a9:
b0:cf:60:8e:fe:9f:bc:ab:ae:e9:99:f7:60:8b:28:36:92:06:
31:4a:b6:58:fe:5f:68:e5:cd:9e:50:38:2d:d0:0f:82:84:85:
c6:33:59:78:98:cf:49:16:92:dc:91:bf:56:58:78:c8:6f:b6:
b1:44:4d:e0:c8:f5:68:f2:05:bc:c0:00:d3:98:90:aa:92:b3:
14:6b:13:d7:4d:54:be:ea:56:62:57:2f:44:61:8e:ce:67:2a:
e3:1d:dc:ea:8a:df:5a:55:fb:a2:71:eb:a1:a8:83:af:b3:eb:
8c:20:b3:25:fd:80:a9:4f:b9:ca:77:03:ac:b6:2a:37:de:6f:
c6:99:ce:6f:95:71:55:d3:3c:1b:b8:2b:c0:ac:18:49:5d:a0:
9b:15:87:86:42:d7:df:49:84:08:31:d7:9e:c1:d0:42:db:29:
dd:b6:b8:de:14:1c:cf:81:d7:3c:1e:6d:7c:4e:ee:d5:fe:44:
c8:44:c6:be:5c:28:f1:25:46:41:ef:f1:24:0e:18:3d:42:0b:
ab:41:4a:9e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPOvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTg0NFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUzNzQtNzM1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANaTyRgGB+0rs9eMtS8BLBRjfFec0Z+GWZE06lHtvYVZI4ToU9nTXaZAXPU4
Hzg4Za65qeFnukPpYwhYZBmGPQv8XGuR9JJ5TlGqSbEhpIbCyhI7hz0ntmss7obm
VDjacU4DOztb+UfuK+I6TpjP6EMbRqApI8sJHVsE99ifKDnym4wF5+PRb8t/ttrT
NJzCmlA/1bWH5ZKd00QyOKrL+dLonbzcGX0kyDap/eF9MXH1gUMibQspHRfyJ3p9
SylaI5IeuMD3GUax+zprIAxQRB8FPss4xbRi/LOyuen4aPtSlSzJK7kLuTsYtEvh
iQ+as2widyHzDkcbLo0blFZn9/sCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBR/ET5S
dGvC5C5uTR1zT5WdSDgl3jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU4NTE5NDBB
MUFBRjExRUNBOUM3MEM3OEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeo6jANBgkqhkiG9w0BAQsFAAOCAQEAmOXtlOkF0OpqNZ4vg/8a
XSzu94hUbXRS10iAInNqWjhuSgAdIybeWqqYQG8C1XXg34BnTwupsM9gjv6fvKuu
6Zn3YIsoNpIGMUq2WP5faOXNnlA4LdAPgoSFxjNZeJjPSRaS3JG/Vlh4yG+2sURN
4Mj1aPIFvMAA05iQqpKzFGsT101UvupWYlcvRGGOzmcq4x3c6orfWlX7onHroaiD
r7PrjCCzJf2AqU+5yncDrLYqN95vxpnOb5VxVdM8G7grwKwYSV2gmxWHhkLX30mE
CDHXnsHQQtsp3ba43hQcz4HXPB5tfE7u1f5EyETGvlwo8SVGQe/xJA4YPUILq0FK
ng==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:44 2026 by rpki-client