
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0EB512ED9D511EDA73CB351C4F9AE02.roa
File: A0EB512ED9D511EDA73CB351C4F9AE02.roa (raw, json)
Hash identifier: cEPnWDiPe1bUQM2bQ/Sa279D+3bSGfURKIpqw4uT/YA=
Subject key identifier: D1:90:18:BD:18:FC:FF:C5:24:8D:BF:28:15:B7:F8:D0:A6:54:3E:63
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FE54
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0EB512ED9D511EDA73CB351C4F9AE02.roa
Signing time: Thu 15 Oct 2026 06:58:23 +0000
ROA not before: Thu 15 Oct 2026 06:58:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149550
IP address blocks: 27.116.16.0/21 maxlen: 24
103.126.42.0/23 maxlen: 24
119.235.48.0/24 maxlen: 24
119.235.49.0/24 maxlen: 24
119.235.50.0/24 maxlen: 24
119.235.51.0/24 maxlen: 24
119.235.52.0/24 maxlen: 24
119.235.53.0/24 maxlen: 24
119.235.54.0/24 maxlen: 24
119.235.55.0/24 maxlen: 24
2400:f1e0::/32 maxlen: 32
2400:f1e0:100::/40 maxlen: 40
2400:f1e0:200::/40 maxlen: 40
2400:f1e0:300::/40 maxlen: 40
2400:f1e0:400::/40 maxlen: 40
2400:f1e0:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 15:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65108 (0xfe54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 15 06:58:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ad0798f-4918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:cf:3f:f1:b0:b2:50:3f:ec:d3:dc:b0:31:
c3:89:14:82:4e:10:5c:b7:6d:8e:d7:f7:0f:fe:ad:
c4:f8:f1:bc:ca:1b:f9:a6:c7:37:50:2a:d2:22:72:
cf:af:2d:d2:bf:16:c5:12:38:ad:57:a8:57:88:0c:
96:8b:2b:10:f9:09:c1:e9:76:9d:cb:b9:f2:45:6c:
96:00:be:62:67:d8:b5:63:f7:8e:58:2e:a8:27:86:
ea:42:94:f4:85:6e:4d:01:01:72:b7:d6:9f:22:b6:
a2:07:e2:09:a7:b8:77:96:79:c7:99:79:a4:34:6a:
e3:b9:39:75:cd:43:76:b0:06:14:91:62:55:8e:31:
11:24:87:34:00:72:49:57:f4:de:64:b7:22:f8:36:
76:c7:f4:78:8e:98:b4:c4:51:15:e4:b2:54:26:cc:
ec:ce:37:50:4c:7e:cb:31:f6:d2:76:ad:63:b7:4f:
39:0c:b7:e6:23:02:34:73:f7:68:1b:67:d8:c8:8e:
33:bd:5c:dc:e2:65:13:8c:9e:4c:4e:e3:23:db:ae:
43:d3:17:fc:7f:c5:d9:2d:3f:b5:20:19:01:cc:37:
49:0c:b2:9d:e7:4a:e3:c3:89:11:d5:a5:9b:af:a8:
2f:c2:fc:20:15:aa:43:e1:d3:dd:13:dd:3e:c5:2a:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:90:18:BD:18:FC:FF:C5:24:8D:BF:28:15:B7:F8:D0:A6:54:3E:63
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0EB512ED9D511EDA73CB351C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.116.16.0/21
103.126.42.0/23
119.235.48.0/21
IPv6:
2400:f1e0::/32
Signature Algorithm: sha256WithRSAEncryption
7b:c5:b3:18:02:2f:b3:41:36:74:bb:96:f4:8f:ea:0c:f4:09:
ad:1e:aa:3f:25:66:56:b9:d0:80:b8:4f:24:22:ec:da:6e:28:
14:a3:d5:41:b2:d6:0e:d3:90:ea:9b:10:c8:69:aa:29:1e:08:
30:ef:56:d4:e6:ac:2b:bf:3e:52:11:27:62:05:d4:8a:54:7e:
36:b5:26:70:d3:41:a9:76:b4:d5:bf:8e:54:a6:be:b8:2a:ab:
f0:13:42:08:27:c1:fb:c9:32:09:b0:ef:f3:e7:09:81:10:33:
ee:f5:5b:86:c8:bd:78:32:5a:7a:14:1b:b4:8d:76:3e:7c:ea:
cd:5d:2d:45:0b:d0:48:5f:10:db:ac:85:7b:40:83:1a:a0:11:
a0:1b:bf:12:93:7c:07:e0:a6:16:47:a8:5a:51:12:0c:fa:cc:
ae:f3:81:6e:30:a0:a0:52:83:d4:82:d9:92:82:75:a2:72:68:
44:e2:ec:3e:57:83:7a:47:f2:c2:6c:15:f6:6a:a3:bb:be:a3:
9d:4a:e3:7a:ab:3b:cb:b6:84:c2:6e:4f:dd:cf:bc:22:d3:dd:
e6:d2:6d:86:99:c8:bc:90:e9:00:6e:89:c3:d3:ea:af:91:2e:
ff:ff:9d:eb:30:98:5a:df:b6:f4:33:75:40:b2:3c:8e:08:9d:
01:0d:c6:97
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDAP5UMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MTAxNTA2NTgyM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmFkMDc5OGYtNDkxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJuJzz/xsLJQP+zT3LAxw4kUgk4QXLdtjtf3D/6txPjxvMob+abHN1Aq0iJy
z68t0r8WxRI4rVeoV4gMlosrEPkJwel2ncu58kVslgC+YmfYtWP3jlguqCeG6kKU
9IVuTQEBcrfWnyK2ogfiCae4d5Z5x5l5pDRq47k5dc1DdrAGFJFiVY4xESSHNABy
SVf03mS3Ivg2dsf0eI6YtMRRFeSyVCbM7M43UEx+yzH20natY7dPOQy35iMCNHP3
aBtn2MiOM71c3OJlE4yeTE7jI9uuQ9MX/H/F2S0/tSAZAcw3SQyynedK48OJEdWl
m6+oL8L8IBWqQ+HT3RPdPsUq+/ECAwEAAaOCAnswggJ3MB0GA1UdDgQWBBTRkBi9
GPz/xSSNvygVt/jQplQ+YzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0EwRUI1MTJF
RDlENTExRURBNzNDQjM1MUM0RjlBRTAyLnJvYTA6BggrBgEFBQcBBwEB/wQrMCkw
GAQCAAEwEgMEAxt0EAMEAWd+KgMEA3frMDANBAIAAjAHAwUAJADx4DANBgkqhkiG
9w0BAQsFAAOCAQEAe8WzGAIvs0E2dLuW9I/qDPQJrR6qPyVmVrnQgLhPJCLs2m4o
FKPVQbLWDtOQ6psQyGmqKR4IMO9W1OasK78+UhEnYgXUilR+NrUmcNNBqXa01b+O
VKa+uCqr8BNCCCfB+8kyCbDv8+cJgRAz7vVbhsi9eDJaehQbtI12PnzqzV0tRQvQ
SF8Q26yFe0CDGqARoBu/EpN8B+CmFkeoWlESDPrMrvOBbjCgoFKD1ILZkoJ1onJo
ROLsPleDekfywmwV9mqju76jnUrjeqs7y7aEwm5P3c+8ItPd5tJthpnIvJDpAG6J
w9Pqr5Eu//+d6zCYWt+29DN1QLI8jgidAQ3Glw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:38:29 2026 by rpki-client