
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3A939FA9F1F11EEB55FC143C4F9AE02.roa
File: C3A939FA9F1F11EEB55FC143C4F9AE02.roa (raw, json)
Hash identifier: VVyGPIE9ZFk5OBjPXbNaX6LXl2f0vmA7LMLb9QthrTw=
Subject key identifier: 81:89:BB:8D:72:54:64:FC:B3:C0:B1:75:E4:F2:CA:F0:D1:7D:28:50
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA00
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3A939FA9F1F11EEB55FC143C4F9AE02.roa
Signing time: Sun 31 May 2026 17:40:37 +0000
ROA not before: Sun 31 May 2026 17:40:37 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151724
IP address blocks: 113.192.50.0/23 maxlen: 24
2001:df3:44c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59904 (0xea00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:40:37 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7295-1cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:fe:00:89:60:1d:f6:25:7f:09:1b:51:2d:
77:30:5a:fd:c1:ed:cf:ae:b5:38:bc:64:bd:31:10:
29:2c:d6:6f:60:8a:59:ff:08:32:8c:b6:47:bc:d1:
1d:bb:a6:3a:51:17:74:7b:87:ae:46:0b:48:25:39:
21:d6:77:17:b1:9f:ea:9d:c3:d9:6f:90:df:0c:b2:
c9:91:b9:bf:f4:b5:a9:f8:ff:be:56:d4:ce:03:24:
68:32:a5:b2:6e:16:15:c8:b1:1a:b3:6d:a8:46:1e:
49:3e:a7:75:b0:92:c4:44:5b:5b:c0:df:11:65:9f:
a0:da:37:87:81:35:b7:81:4b:35:79:14:9c:9a:70:
08:e3:29:b0:a7:1a:6b:2b:6c:34:3a:08:f3:66:e3:
3a:ca:7f:2e:38:34:95:37:92:ae:f9:26:99:56:94:
7a:68:b0:4e:ec:40:3a:92:b3:7e:95:15:28:8f:83:
91:da:02:27:ef:97:61:e9:72:46:cf:cb:cc:12:f1:
ef:44:ba:ad:a5:8c:06:b2:49:42:5f:80:a4:5e:44:
2e:fa:9a:35:4f:97:6c:a5:99:fe:61:7a:c2:a0:12:
52:d9:e3:cf:54:75:b4:2b:b4:92:ac:12:6f:7d:3f:
39:f7:a0:50:94:5f:17:88:62:8b:96:40:3b:8b:06:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:89:BB:8D:72:54:64:FC:B3:C0:B1:75:E4:F2:CA:F0:D1:7D:28:50
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3A939FA9F1F11EEB55FC143C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
113.192.50.0/23
IPv6:
2001:df3:44c0::/48
Signature Algorithm: sha256WithRSAEncryption
43:60:1a:e4:fc:90:4a:26:d6:58:d3:56:de:30:c4:4b:ed:35:
5a:3f:43:30:9d:ab:16:7a:76:92:03:3f:7c:37:b2:d2:4c:17:
08:4c:76:a1:49:43:13:1b:07:e0:db:0e:c2:b1:a1:8a:17:2b:
c6:7d:df:8b:fb:80:ac:67:13:4e:89:cb:a1:79:13:49:0d:e5:
cc:89:b5:cb:7c:94:c2:80:ef:96:46:31:70:42:d1:e0:67:ca:
cd:95:06:ca:fc:e1:8e:74:86:20:23:fd:16:2f:06:4b:bd:36:
4d:87:22:2c:04:32:53:7d:0a:0b:c6:cb:6f:43:45:f8:9a:d5:
cf:9c:bc:eb:80:15:9d:23:08:20:42:ae:d8:a9:19:0c:3e:59:
4a:91:97:11:4c:a3:e2:35:ad:f5:b7:5d:57:91:61:bf:d1:a5:
cd:53:28:9c:58:e8:a4:0f:93:17:03:ab:4b:56:a7:84:70:e2:
b7:fc:47:36:63:0b:54:1d:81:ec:b2:6e:e4:b5:0f:47:55:69:
9f:48:a5:0d:d9:a2:2b:7c:ab:6d:9d:52:c4:24:b4:9f:cc:c8:
f3:0a:ac:fd:da:1f:d5:c3:55:65:01:34:60:d8:4a:5f:a7:93:
1e:e0:75:86:b1:99:fb:7d:cf:67:93:50:42:3c:24:06:57:69:
db:bb:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:25 2026 by rpki-client