
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/735B08EC3CF511EF9963F76FC4F9AE02.roa
File: 735B08EC3CF511EF9963F76FC4F9AE02.roa (raw, json)
Hash identifier: FmT8m5B3/vMGv8k5Hsjn3cFo2NUrEa+b7WADzT249OM=
Subject key identifier: A4:8B:E2:5F:AB:F8:95:1F:A3:57:EC:26:ED:FA:CE:A3:5C:6D:F6:34
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E1C2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/735B08EC3CF511EF9963F76FC4F9AE02.roa
Signing time: Sun 31 May 2026 16:31:34 +0000
ROA not before: Sun 31 May 2026 16:31:34 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 131459
IP address blocks: 43.250.40.0/22 maxlen: 24
103.5.112.0/22 maxlen: 24
103.242.136.0/22 maxlen: 24
2402:900::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57794 (0xe1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:31:34 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6266-acb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:cb:fc:1e:6a:d6:62:ff:b4:2e:6b:4c:7e:
61:0f:62:f5:68:0d:cb:32:92:16:37:13:07:7b:05:
1c:4b:50:e1:d6:ab:13:bc:d4:6d:32:59:27:48:c9:
60:93:01:8c:5e:42:47:68:76:df:1e:da:f7:1e:3f:
84:08:07:f3:58:0f:59:89:09:f8:dc:a8:03:7c:a9:
c8:2a:51:cb:fb:91:67:0d:3d:44:cb:96:27:f6:32:
96:ea:95:dc:43:b4:41:41:8a:a4:ff:8c:58:07:a3:
ea:0c:2c:d2:1f:56:61:a1:c3:37:80:df:49:24:e1:
95:52:8c:d1:ed:b1:52:a3:e6:e3:ec:41:cd:37:cd:
ea:a0:80:bf:47:e7:9f:3d:32:66:b1:31:a8:b3:b0:
5e:e3:a5:33:d3:ba:0b:cf:ba:68:39:ed:dc:51:32:
ef:a8:cb:36:65:b4:31:29:9e:ca:e6:ee:d1:bb:27:
6c:b4:4d:a1:b9:30:8f:6d:04:8d:60:05:b7:37:ed:
7c:70:8b:2c:2e:1e:bc:8f:34:b4:b2:fa:17:19:95:
4e:84:f6:4b:8f:0f:80:18:9c:40:6b:b3:bd:2f:da:
a7:d4:70:8e:74:ae:b9:85:5d:fc:57:ae:1c:80:c5:
3e:32:a7:be:2f:ba:a7:7d:6f:f8:01:4b:91:1e:fc:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8B:E2:5F:AB:F8:95:1F:A3:57:EC:26:ED:FA:CE:A3:5C:6D:F6:34
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/735B08EC3CF511EF9963F76FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.250.40.0/22
103.5.112.0/22
103.242.136.0/22
IPv6:
2402:900::/32
Signature Algorithm: sha256WithRSAEncryption
07:43:cb:c2:46:dc:1b:e4:3f:16:6f:1f:af:dd:11:d0:96:3e:
0a:71:06:f9:81:0d:bc:93:8d:e9:42:31:6e:a6:2a:8e:2b:78:
82:be:91:20:99:3b:9b:4a:78:12:d4:97:00:8e:2d:cd:1a:c2:
0f:b3:14:1e:26:aa:72:9d:87:2c:5e:b4:45:d2:eb:bb:37:99:
54:85:66:a5:21:79:93:61:c3:21:9c:47:8e:7a:dc:40:db:fc:
3c:e6:3e:a5:7a:8f:8d:7f:78:89:50:ea:05:9e:b3:74:ad:01:
ef:7f:60:aa:47:b7:8d:0e:b2:25:c0:1d:2a:6b:f1:7b:56:c7:
fb:a2:12:32:fd:07:1f:68:ec:00:ad:e9:83:73:d8:de:fd:f9:
32:f3:e0:5d:42:b9:07:65:bb:1b:90:e0:de:7b:61:60:0f:91:
e3:d1:81:d3:ca:95:5b:d5:3e:99:fc:2b:ee:d6:3e:82:ec:9f:
7c:5c:f5:23:fa:a6:72:19:de:d9:b0:89:88:43:23:67:02:49:
e9:68:60:3a:5b:cb:c5:a8:85:a2:3c:92:cf:6e:c6:4a:49:73:
06:92:32:df:99:e6:f4:7e:60:c6:26:79:3f:79:4b:a6:e2:43:
0e:84:7d:d3:8b:2b:05:78:63:dc:9f:18:e9:8c:5c:8f:0b:07:
83:b9:a3:1d
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDAOHCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2MzEzNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzYyNjYtYWNiMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANzxy/weatZi/7Qua0x+YQ9i9WgNyzKSFjcTB3sFHEtQ4darE7zUbTJZJ0jJ
YJMBjF5CR2h23x7a9x4/hAgH81gPWYkJ+NyoA3ypyCpRy/uRZw09RMuWJ/YyluqV
3EO0QUGKpP+MWAej6gws0h9WYaHDN4DfSSThlVKM0e2xUqPm4+xBzTfN6qCAv0fn
nz0yZrExqLOwXuOlM9O6C8+6aDnt3FEy76jLNmW0MSmeyubu0bsnbLRNobkwj20E
jWAFtzftfHCLLC4evI80tLL6FxmVToT2S48PgBicQGuzvS/ap9RwjnSuuYVd/Feu
HIDFPjKnvi+6p31v+AFLkR783c0CAwEAAaOCAnswggJ3MB0GA1UdDgQWBBSki+Jf
q/iVH6NX7Cbt+s6jXG32NDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzczNUIwOEVD
M0NGNTExRUY5OTYzRjc2RkM0RjlBRTAyLnJvYTA6BggrBgEFBQcBBwEB/wQrMCkw
GAQCAAEwEgMEAiv6KAMEAmcFcAMEAmfyiDANBAIAAjAHAwUAJAIJADANBgkqhkiG
9w0BAQsFAAOCAQEAB0PLwkbcG+Q/Fm8fr90R0JY+CnEG+YENvJON6UIxbqYqjit4
gr6RIJk7m0p4EtSXAI4tzRrCD7MUHiaqcp2HLF60RdLruzeZVIVmpSF5k2HDIZxH
jnrcQNv8POY+pXqPjX94iVDqBZ6zdK0B739gqke3jQ6yJcAdKmvxe1bH+6ISMv0H
H2jsAK3pg3PY3v35MvPgXUK5B2W7G5Dg3nthYA+R49GB08qVW9U+mfwr7tY+guyf
fFz1I/qmchne2bCJiEMjZwJJ6WhgOlvLxaiFojySz27GSklzBpIy35nm9H5gxiZ5
P3lLpuJDDoR904srBXhj3J8Y6YxcjwsHg7mjHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:04:26 2026 by rpki-client