
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa
File: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (raw, json)
Hash identifier: SV+bZOpveaF6gRb1xTwAjvC4Ahc21Acwt2F034JPZjM=
Subject key identifier: F4:C7:FE:EF:87:7B:B2:84:69:09:2D:C6:E1:7F:78:B7:94:A7:8F:16
Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Certificate serial: 0280
Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:14:11 +0000
ROA not before: Tue 27 May 2025 03:00:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56182
IP address blocks: 202.0.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Validity
Not Before: May 27 03:00:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3f553-5d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:3d:9c:04:f6:1c:d6:d9:5d:b4:2c:0e:78:
39:cc:fd:f3:62:dd:07:3e:3c:a6:b2:91:8f:d3:eb:
a5:66:90:46:6a:b1:be:83:9f:83:dd:4e:6d:5f:72:
89:9e:c7:c8:c2:36:74:5b:b4:0f:4c:7f:0a:8b:b1:
64:4c:c0:8c:88:e5:39:4c:3a:4e:51:c1:47:d0:70:
6c:c7:02:93:56:62:46:da:4d:43:a2:d9:11:89:ac:
14:64:2d:bb:88:94:2b:ac:6e:ae:ac:06:4f:3c:05:
5b:80:a1:34:99:7f:c2:f3:ec:0a:c8:dc:67:78:0c:
4b:ca:de:55:e4:81:ab:93:47:60:0e:8a:b4:75:54:
f9:f2:35:58:7b:d8:0c:84:88:ff:e0:31:28:4c:b9:
67:d6:91:5a:5c:58:42:70:f3:f3:14:b4:ce:dc:10:
9e:f4:f6:37:39:89:f2:da:f5:af:61:29:a9:a2:ca:
00:6f:98:a7:0e:99:bd:ed:d5:d0:80:ec:e6:6d:c2:
4b:03:16:3e:c0:e9:46:ee:09:9c:d0:d6:b0:b5:ce:
9f:41:8d:c6:9d:3a:d3:6b:55:31:c3:4a:14:78:f0:
ae:4c:95:79:83:e7:48:7f:e1:87:f3:f3:e4:d3:c5:
aa:dc:77:cd:29:ff:ab:04:63:de:c8:c6:27:de:91:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:FE:EF:87:7B:B2:84:69:09:2D:C6:E1:7F:78:B7:94:A7:8F:16
X509v3 Authority Key Identifier:
keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.0.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:52:a4:da:25:00:49:07:ea:47:4b:07:22:37:34:c5:b3:d1:
b9:32:58:9f:e3:27:ff:a1:72:2d:2a:6b:c2:b8:46:36:ad:c6:
d5:b7:18:8b:6d:86:1b:ff:d0:af:ea:06:09:b8:00:e2:3f:15:
09:aa:9e:05:0a:49:1e:89:4c:8c:ca:3b:8d:7f:e4:3a:55:bb:
06:5d:48:a4:54:87:34:6d:58:55:72:c0:a2:71:3f:80:73:07:
fc:11:c0:10:a2:a0:e6:3f:8b:44:4e:74:74:ef:e0:30:7c:eb:
b2:20:72:f6:83:3f:1c:57:00:b6:70:14:fc:cb:8a:5d:45:72:
b7:74:2d:ce:ce:33:4c:66:44:0d:92:0d:a2:df:3c:e1:a7:e4:
01:b3:17:65:72:3c:0e:ce:65:ea:70:1e:22:c9:68:90:67:b6:
d6:0b:b6:f7:00:36:f9:5f:33:a1:1a:88:e7:9c:9f:fd:aa:6b:
c7:c1:38:36:dc:b0:f2:36:4c:02:c5:71:5d:b9:93:f8:0a:02:
55:e0:9d:ef:42:b0:d2:00:b5:77:d2:9f:f5:0c:0f:eb:fd:f1:
b8:c8:f1:a3:d7:a3:7f:91:ec:31:4f:31:1a:ed:25:cc:45:78:
9f:d7:d6:3b:f5:e1:92:f1:1e:28:91:34:d1:39:7f:f3:0d:23:
af:70:eb:b2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0
MDMzQjM1MkQwHhcNMjUwNTI3MDMwMDM5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZjU1My01ZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuog9nAT2HNbZXbQsDng5zP3zYt0HPjymspGP0+ulZpBGarG+g5+D3U5tX3KJ
nsfIwjZ0W7QPTH8Ki7FkTMCMiOU5TDpOUcFH0HBsxwKTVmJG2k1DotkRiawUZC27
iJQrrG6urAZPPAVbgKE0mX/C8+wKyNxneAxLyt5V5IGrk0dgDoq0dVT58jVYe9gM
hIj/4DEoTLln1pFaXFhCcPPzFLTO3BCe9PY3OYny2vWvYSmposoAb5inDpm97dXQ
gOzmbcJLAxY+wOlG7gmc0Nawtc6fQY3GnTrTa1Uxw0oUePCuTJV5g+dIf+GH8/Pk
08Wq3HfNKf+rBGPeyMYn3pHwGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPTH/u+H
e7KEaQktxuF/eLeUp48WMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0
REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEM1MzgvRENBOTUzNjY1NERCMTFFRDlEMjA1OTY1QzRGOUFFMDIvMTFEREZGOEU1
NERGMTFFREI3NDA5MjY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCygC8MA0GCSqGSIb3DQEBCwUAA4IBAQA8UqTaJQBJB+pHSwciNzTF
s9G5Mlif4yf/oXItKmvCuEY2rcbVtxiLbYYb/9Cv6gYJuADiPxUJqp4FCkkeiUyM
yjuNf+Q6VbsGXUikVIc0bVhVcsCicT+Acwf8EcAQoqDmP4tETnR07+AwfOuyIHL2
gz8cVwC2cBT8y4pdRXK3dC3OzjNMZkQNkg2i3zzhp+QBsxdlcjwOzmXqcB4iyWiQ
Z7bWC7b3ADb5XzOhGojnnJ/9qmvHwTg23LDyNkwCxXFduZP4CgJV4J3vQrDSALV3
0p/1DA/r/fG4yPGj16N/kewxTzEa7SXMRXif19Y79eGS8R4okTTROX/zDSOvcOuy
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:36 2026 by rpki-client