
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA2E9E8BDCF11EA8755D90DC4F9AE02.roa
File: 5CA2E9E8BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: Pe+HtJMvDyUsFpCJVdEtQqLYz/026kQvrcc9fNgnSxQ=
Subject key identifier: A1:97:83:6D:7D:25:97:42:24:74:D6:FD:C0:21:F2:BE:00:98:F7:92
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E5F1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA2E9E8BDCF11EA8755D90DC4F9AE02.roa
Signing time: Sun 31 May 2026 17:06:17 +0000
ROA not before: Sun 31 May 2026 17:06:16 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138740
IP address blocks: 103.140.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58865 (0xe5f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:06:16 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6a88-cf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:e8:31:c0:a1:e1:03:0e:88:bd:67:95:68:
9e:ff:7f:52:d3:81:55:38:fa:6e:3b:42:3a:1b:45:
aa:46:60:95:37:7f:85:04:5f:d0:5a:8d:a2:57:f3:
3f:c7:32:da:5c:4d:93:54:42:6d:e4:94:d4:4c:ed:
0f:12:44:d3:63:51:91:4b:6e:48:77:12:63:70:44:
ef:12:25:f2:68:6d:e6:d3:29:37:92:77:12:60:bf:
87:ea:01:d0:21:64:b2:23:e4:6a:59:8c:4f:22:6f:
90:2f:40:9f:ef:2e:96:31:73:e7:48:0e:da:d5:5d:
a1:ff:ce:9f:44:7c:d8:80:74:6f:b9:20:f4:15:df:
99:fa:07:e3:85:28:8c:ef:b9:72:a2:2f:79:09:e4:
54:b1:93:4b:c5:f3:63:e4:90:cc:08:f9:62:0a:05:
f7:fe:42:09:81:ca:b9:c3:2d:28:f0:e0:a1:fb:24:
f3:28:2b:8c:b9:d3:0b:d0:85:8b:e0:e1:a4:57:a5:
fa:10:46:72:00:cb:a5:a6:c5:fc:a6:64:b1:ab:60:
96:2f:18:52:bc:89:fd:9d:59:64:25:bd:25:ec:c3:
0c:0a:97:d4:ac:53:db:6c:8b:ce:a0:1e:ef:b5:66:
fc:3f:34:bd:73:0c:56:91:c1:bd:6d:c9:cc:ae:c5:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:97:83:6D:7D:25:97:42:24:74:D6:FD:C0:21:F2:BE:00:98:F7:92
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA2E9E8BDCF11EA8755D90DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.72.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:3e:05:26:7c:f8:58:4d:45:25:97:00:81:41:a7:2b:d2:c4:
d3:e0:0a:17:06:97:87:4c:14:5d:19:43:56:bf:4a:d8:1f:33:
a3:ba:b8:4a:35:ea:aa:53:4a:27:03:1c:61:55:77:52:94:40:
41:7f:c4:bb:24:43:1f:86:44:df:bb:7b:f5:01:30:c3:04:ae:
08:57:96:9e:79:83:42:4b:a6:7f:54:0c:72:d6:7d:9b:aa:f8:
a8:b7:de:f4:a8:ac:43:56:bd:47:1a:fb:49:cd:57:4d:e9:64:
14:0e:e4:85:51:ba:bd:cf:d7:b7:6f:6c:e5:e6:57:0f:f6:d3:
91:35:7f:01:c6:18:7a:26:65:0a:8d:ee:b6:02:51:b7:60:95:
85:f2:03:72:50:4d:18:28:bc:0b:da:da:f3:cd:4c:25:0e:b2:
34:15:cc:a6:0c:79:1d:99:57:94:c7:0c:c8:8f:b7:1b:db:de:
7f:9a:66:5d:f0:49:28:9c:81:f4:99:05:93:e1:41:71:07:5f:
56:41:03:e1:08:a2:8a:f2:e7:af:54:6f:1b:ad:e5:d3:1a:35:
90:31:3f:32:ac:de:78:45:a8:6a:89:94:4b:d9:5a:b0:30:f0:
ce:ee:35:79:0d:78:b5:a4:41:75:95:a9:07:a3:6a:f0:2b:9f:
31:c3:bd:99
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOXxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDYxNloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZhODgtY2YyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK/N6DHAoeEDDoi9Z5Vonv9/UtOBVTj6bjtCOhtFqkZglTd/hQRf0FqNolfz
P8cy2lxNk1RCbeSU1EztDxJE02NRkUtuSHcSY3BE7xIl8mht5tMpN5J3EmC/h+oB
0CFksiPkalmMTyJvkC9An+8uljFz50gO2tVdof/On0R82IB0b7kg9BXfmfoH44Uo
jO+5cqIveQnkVLGTS8XzY+SQzAj5YgoF9/5CCYHKucMtKPDgofsk8ygrjLnTC9CF
i+DhpFel+hBGcgDLpabF/KZksatgli8YUryJ/Z1ZZCW9JezDDAqX1KxT22yLzqAe
77Vm/D80vXMMVpHBvW3JzK7FqkMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBShl4Nt
fSWXQiR01v3AIfK+AJj3kjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVDQTJFOUU4
QkRDRjExRUE4NzU1RDkwREM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeMSDANBgkqhkiG9w0BAQsFAAOCAQEATj4FJnz4WE1FJZcAgUGn
K9LE0+AKFwaXh0wUXRlDVr9K2B8zo7q4SjXqqlNKJwMcYVV3UpRAQX/EuyRDH4ZE
37t79QEwwwSuCFeWnnmDQkumf1QMctZ9m6r4qLfe9KisQ1a9Rxr7Sc1XTelkFA7k
hVG6vc/Xt29s5eZXD/bTkTV/AcYYeiZlCo3utgJRt2CVhfIDclBNGCi8C9ra881M
JQ6yNBXMpgx5HZlXlMcMyI+3G9vef5pmXfBJKJyB9JkFk+FBcQdfVkED4QiiivLn
r1RvG63l0xo1kDE/MqzeeEWoaomUS9lasDDwzu41eQ14taRBdZWpB6Nq8CufMcO9
mQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:28 2026 by rpki-client