
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B11C6E6ACB9F11F18FD31DB84211F970.roa
File: B11C6E6ACB9F11F18FD31DB84211F970.roa (raw, json)
Hash identifier: ZSclxychC5fyoCQY0a7AhZi0eVfYn23omjvXWTR/Tis=
Subject key identifier: A3:59:6F:7B:6B:BD:D2:A7:29:BE:57:8A:1B:19:DB:44:DF:0E:FD:74
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FE7B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B11C6E6ACB9F11F18FD31DB84211F970.roa
Signing time: Mon 19 Oct 2026 09:37:20 +0000
ROA not before: Mon 19 Oct 2026 09:37:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154969
IP address blocks: 43.242.234.0/23 maxlen: 24
2001:df7:9dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65147 (0xfe7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 19 09:37:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ad5e4d0-d216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:69:74:09:c7:19:c8:44:0f:3e:46:fd:c3:9e:
9f:6b:c0:05:02:96:75:de:2a:5c:f3:c9:f1:10:63:
a5:30:67:db:26:3b:09:13:51:2d:47:6e:9a:26:cf:
7a:93:e3:50:1b:6a:92:9b:2e:12:e7:dd:d9:e6:b6:
e4:49:1d:16:86:ad:85:7b:2b:58:ea:c0:0e:09:63:
1c:a6:69:22:22:88:f5:c6:33:6a:e6:49:de:02:1d:
20:3b:fe:52:69:c4:81:07:cf:dc:17:42:b7:14:94:
46:54:bc:eb:dd:1c:a1:cb:e7:15:d6:90:12:0a:e8:
29:9c:2a:c3:34:24:ad:92:cb:49:15:39:c7:69:67:
20:8d:3d:66:dc:c5:43:a3:d6:41:fc:db:2b:c1:74:
2b:d9:7d:70:67:e4:ca:03:09:47:23:92:7b:38:93:
09:bc:dc:e2:ca:8e:5c:52:91:0a:63:0b:b0:06:b7:
f6:30:d1:ea:93:02:7d:95:d9:08:77:25:e9:47:53:
bb:f4:ac:75:cc:bb:44:d1:00:b7:de:56:49:14:45:
d1:c2:c2:9d:e7:e0:d2:82:8f:a7:51:85:b1:43:1a:
44:8a:5a:93:cd:16:a1:35:57:96:eb:e8:43:cf:1d:
18:e1:98:6e:c7:e6:c4:80:4e:4a:4b:0a:3e:4e:75:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:59:6F:7B:6B:BD:D2:A7:29:BE:57:8A:1B:19:DB:44:DF:0E:FD:74
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B11C6E6ACB9F11F18FD31DB84211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.242.234.0/23
IPv6:
2001:df7:9dc0::/48
Signature Algorithm: sha256WithRSAEncryption
76:ea:91:c4:2b:24:cb:11:93:8b:60:33:7a:7d:f2:bd:9b:c6:
1e:70:a1:c9:0c:80:8e:07:49:4e:f0:ae:73:26:c6:07:ac:2e:
da:a8:5e:e0:ce:06:e2:7e:75:da:79:0e:ed:9d:33:82:05:fc:
0b:76:da:19:5f:20:ea:75:46:97:43:39:dc:ff:83:7b:41:2e:
90:9b:ac:0d:84:be:67:52:3e:50:b7:a2:2e:0e:27:8f:87:28:
aa:fd:cc:06:64:f5:9e:12:ce:3e:cb:83:c5:8f:b4:6a:3c:17:
42:33:ca:b7:cc:69:ae:4c:31:56:63:c8:15:ca:0f:c5:58:e6:
6b:40:56:73:55:ec:90:0c:a3:e1:63:9d:a3:82:07:0b:95:2f:
a9:a6:9b:ca:04:4d:c8:16:bc:f5:e3:e8:82:ac:3c:3b:d1:30:
49:d7:77:7b:31:36:84:6b:70:1c:16:bd:c8:84:1d:57:39:4e:
81:66:07:b3:f0:94:9e:45:e9:37:f5:cf:bf:e0:92:8f:38:e8:
9d:d3:dd:70:1d:12:08:3c:a1:12:8e:27:5b:09:d4:0c:82:c7:
01:ca:db:85:b5:d9:83:dc:f6:75:ab:5d:22:2f:6c:13:e6:d1:
fc:b4:73:ef:6f:c1:36:18:9d:dc:8a:38:f1:17:69:1a:21:fc:
86:a3:b4:93
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAP57MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MTAxOTA5MzcyMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmFkNWU0ZDAtZDIxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJNpdAnHGchEDz5G/cOen2vABQKWdd4qXPPJ8RBjpTBn2yY7CRNRLUdumibP
epPjUBtqkpsuEufd2ea25EkdFoathXsrWOrADgljHKZpIiKI9cYzauZJ3gIdIDv+
UmnEgQfP3BdCtxSURlS8690cocvnFdaQEgroKZwqwzQkrZLLSRU5x2lnII09ZtzF
Q6PWQfzbK8F0K9l9cGfkygMJRyOSeziTCbzc4sqOXFKRCmMLsAa39jDR6pMCfZXZ
CHcl6UdTu/Ssdcy7RNEAt95WSRRF0cLCnefg0oKPp1GFsUMaRIpak80WoTVXluvo
Q88dGOGYbsfmxIBOSksKPk51LvkCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSjWW97
a73Spym+V4obGdtE3w79dDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IxMUM2RTZB
Q0I5RjExRjE4RkQzMURCODQyMTFGOTcwLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEASvy6jAPBAIAAjAJAwcAIAEN953AMA0GCSqGSIb3DQEBCwUAA4IB
AQB26pHEKyTLEZOLYDN6ffK9m8YecKHJDICOB0lO8K5zJsYHrC7aqF7gzgbifnXa
eQ7tnTOCBfwLdtoZXyDqdUaXQznc/4N7QS6Qm6wNhL5nUj5Qt6IuDiePhyiq/cwG
ZPWeEs4+y4PFj7RqPBdCM8q3zGmuTDFWY8gVyg/FWOZrQFZzVeyQDKPhY52jggcL
lS+pppvKBE3IFrz14+iCrDw70TBJ13d7MTaEa3AcFr3IhB1XOU6BZgez8JSeRek3
9c+/4JKPOOid091wHRIIPKESjidbCdQMgscBytuFtdmD3PZ1q10iL2wT5tH8tHPv
b8E2GJ3cijjxF2kaIfyGo7ST
-----END CERTIFICATE-----
Generated at Wed Oct 21 15:22:15 2026 by rpki-client