
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa
File: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (raw, json)
Hash identifier: oF8S7Pot7FDKo2GEEMdlADVMTbeltD2yj2mRKY200Ag=
Subject key identifier: 75:73:28:27:99:A0:46:B9:C9:D2:54:7F:D2:72:4B:6A:85:B3:3B:C8
Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Certificate serial: 02A6
Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa
Signing time: Tue 05 May 2026 02:33:27 +0000
ROA not before: Tue 05 May 2026 02:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56182
IP address blocks: 202.0.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Validity
Not Before: May 5 02:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f956f7-864c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:3a:ca:cf:9a:08:bd:3c:37:52:8a:09:63:
7b:bb:06:09:a2:d2:fa:55:72:d8:e4:20:47:94:82:
e6:7e:92:3c:49:23:a4:2f:f0:a9:d5:c5:96:ec:55:
63:2e:ea:b4:e2:f0:c5:50:e9:73:33:3f:1e:56:93:
65:71:6f:29:c2:0b:63:4b:6b:e1:7e:b9:7a:e5:fa:
88:ac:cc:26:74:b0:cc:2f:18:a6:d4:d4:ca:f5:d2:
93:f9:0c:ed:cb:2c:8a:45:b3:55:65:da:78:bc:10:
11:81:a5:79:9c:58:a8:1d:77:d8:66:e6:1d:ef:04:
19:b3:ed:cf:08:1a:60:59:be:bb:81:14:c8:ec:65:
02:f2:26:73:b3:d8:e3:d5:9d:50:43:01:a2:3b:16:
df:0c:73:69:2e:11:24:f2:45:f7:8b:9a:c6:01:bc:
fa:a8:44:3a:e8:16:03:5f:a7:5d:33:17:e4:9b:8e:
68:92:e3:fa:a1:ce:ce:36:c1:44:f7:ca:25:38:28:
a1:72:17:bf:b9:27:6c:8c:09:09:bb:78:30:d1:b6:
5e:d3:4d:64:ad:e2:df:a3:30:41:e1:dd:8d:82:38:
32:c1:78:51:10:47:b8:0c:1e:47:5c:74:f4:61:95:
da:43:a8:53:6a:a8:54:ef:63:2b:a2:9c:8b:fc:45:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:73:28:27:99:A0:46:B9:C9:D2:54:7F:D2:72:4B:6A:85:B3:3B:C8
X509v3 Authority Key Identifier:
keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.0.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:26:cc:c2:38:91:6f:ac:8f:05:06:64:b8:14:bb:0e:6b:ab:
a2:aa:8d:48:95:64:02:e5:dd:88:66:80:90:6e:11:81:9b:7c:
fa:ac:69:08:bb:67:e3:78:59:53:a6:26:7d:80:db:dc:af:6c:
50:c4:95:35:d7:82:43:85:fd:ec:eb:44:01:76:28:12:7a:c8:
72:45:dc:89:8c:d0:7f:c8:79:ef:3c:cd:63:d7:44:2b:db:75:
31:63:f1:d2:b7:22:cb:94:c0:93:5b:ed:5b:9f:4e:7a:76:fd:
5e:cd:38:84:42:3c:05:41:ba:6a:e5:ed:ef:62:cf:6c:8e:98:
9a:be:85:a6:8b:69:18:6e:d2:58:61:96:a2:72:04:61:d4:da:
8d:98:a9:0a:d8:5f:68:13:1a:f8:be:39:7a:ba:67:27:ba:e4:
51:77:85:f6:a7:22:de:2d:0b:4d:16:48:ec:32:24:22:bf:5d:
aa:53:1f:09:48:e3:eb:d1:b6:de:f5:4b:0c:8c:7d:63:07:77:
9b:c2:75:bf:e3:46:7f:c5:06:1e:6c:a9:8c:ac:f3:a4:2b:52:
99:e0:bf:e2:f4:1b:23:86:95:3c:ae:bc:b5:01:44:86:9b:0b:
e3:20:4f:82:e4:54:04:8c:7f:b3:20:9f:a1:d3:0f:f5:35:63:
9c:9b:29:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:42:45 2026 by rpki-client