
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67311CB8C07111F082870620C4F9AE02.roa
File: 67311CB8C07111F082870620C4F9AE02.roa (raw, json)
Hash identifier: g6I48by09jCCurUHLmZpQr1eriXEicaNn9IG/538c2Q=
Subject key identifier: FA:A7:37:E2:79:E4:21:FC:A7:B8:82:F5:00:F1:33:0E:90:F2:B6:5F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CCE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67311CB8C07111F082870620C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:49:59 +0000
ROA not before: Thu 13 Nov 2025 09:16:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154360
IP address blocks: 138.252.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11470 (0x2cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Nov 13 09:16:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c297-977d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:af:b7:ec:38:da:1a:4d:11:1a:bb:07:44:
52:54:61:14:b4:a9:b9:9b:8d:c2:5f:eb:db:62:05:
25:ac:c0:a4:d7:54:36:91:43:f7:8c:90:38:a7:1a:
75:3f:52:a7:9a:24:93:b0:c8:2e:48:5d:1f:3e:c0:
e7:3b:d5:d9:0d:9e:ee:a7:60:b2:1e:7c:44:08:47:
6d:04:65:a9:8e:d8:90:ca:e7:f4:87:36:86:70:ef:
2a:04:17:2c:05:52:98:88:4d:a1:11:3b:22:1d:77:
e2:a2:c4:73:c3:fc:2e:63:ce:76:18:e0:81:05:dd:
72:75:7c:fc:bd:69:6b:a8:de:34:17:87:67:7d:ae:
16:c6:83:58:46:04:0e:6c:91:38:4b:5d:cf:3d:4a:
99:c1:75:be:15:c2:6c:bc:ee:6a:c9:71:d7:b7:e4:
76:93:57:55:5f:49:e9:1c:1a:01:fb:6e:eb:bd:a2:
e2:9f:30:b3:c6:87:a1:71:cf:a2:54:e5:96:42:cf:
7a:58:ae:c3:e3:7a:b8:e8:96:a1:4a:bd:36:cc:13:
93:29:64:3d:d6:d6:6b:d0:cc:86:a0:b7:bc:24:2a:
bd:6a:31:0b:c3:8e:a1:ef:d9:ec:14:be:c6:b0:4b:
32:37:02:0a:5c:b6:e8:4a:9d:f0:e7:cb:b9:d3:98:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A7:37:E2:79:E4:21:FC:A7:B8:82:F5:00:F1:33:0E:90:F2:B6:5F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67311CB8C07111F082870620C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.190.0/23
Signature Algorithm: sha256WithRSAEncryption
96:cd:68:f4:3a:db:d8:9d:88:4e:05:34:98:a0:c0:11:a1:20:
b1:cb:22:5b:3f:83:c9:79:78:a0:4e:7d:c8:45:1b:2b:db:e3:
79:c9:a3:9a:79:20:cf:da:42:bc:21:d6:fe:1f:e3:93:49:f5:
d2:a3:d8:90:2c:7c:1c:27:0f:fb:04:7d:47:74:3b:88:d7:9b:
02:8d:01:bb:31:54:5d:a3:29:79:4b:e2:c7:8b:0d:19:03:f4:
bf:8e:d1:04:17:8a:19:fe:81:ba:fd:85:f6:d7:f0:21:28:a5:
f3:37:bd:b9:7f:6f:92:bb:c9:3c:57:51:7c:b5:fe:3c:d4:34:
4e:f6:24:93:be:87:e0:af:11:7d:e2:e3:87:72:c2:43:f3:13:
18:67:3e:ec:4d:35:4c:00:d8:59:4b:d6:15:f5:41:98:cf:3b:
8d:c5:7c:e3:d2:8f:6c:2b:ec:c2:21:d2:24:4f:48:2d:5b:9a:
cb:49:0b:8e:67:29:65:08:f5:9d:8a:52:1e:12:64:df:e1:da:
a0:77:84:7c:e4:d2:7b:c1:30:52:3a:1b:39:ff:e6:ef:49:ac:
57:ac:54:b5:2e:12:e7:5d:0d:fe:c4:3e:01:46:c5:85:35:5f:
13:9f:c5:51:e3:60:8e:07:03:d2:29:4b:74:b6:87:a5:0b:54:
fa:1a:6a:3c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUxMTEzMDkxNjE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzI5Ny05NzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwDGvt+w42hpNERq7B0RSVGEUtKm5m43CX+vbYgUlrMCk11Q2kUP3jJA4pxp1
P1KnmiSTsMguSF0fPsDnO9XZDZ7up2CyHnxECEdtBGWpjtiQyuf0hzaGcO8qBBcs
BVKYiE2hETsiHXfiosRzw/wuY852GOCBBd1ydXz8vWlrqN40F4dnfa4WxoNYRgQO
bJE4S13PPUqZwXW+FcJsvO5qyXHXt+R2k1dVX0npHBoB+27rvaLinzCzxoehcc+i
VOWWQs96WK7D43q46JahSr02zBOTKWQ91tZr0MyGoLe8JCq9ajELw46h79nsFL7G
sEsyNwIKXLboSp3w58u505j35wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPqnN+J5
5CH8p7iC9QDxMw6Q8rZfMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjczMTFDQjhD
MDcxMTFGMDgyODcwNjIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBivy+MA0GCSqGSIb3DQEBCwUAA4IBAQCWzWj0OtvYnYhOBTSYoMAR
oSCxyyJbP4PJeXigTn3IRRsr2+N5yaOaeSDP2kK8Idb+H+OTSfXSo9iQLHwcJw/7
BH1HdDuI15sCjQG7MVRdoyl5S+LHiw0ZA/S/jtEEF4oZ/oG6/YX21/AhKKXzN725
f2+Su8k8V1F8tf481DRO9iSTvofgrxF94uOHcsJD8xMYZz7sTTVMANhZS9YV9UGY
zzuNxXzj0o9sK+zCIdIkT0gtW5rLSQuOZyllCPWdilIeEmTf4dqgd4R85NJ7wTBS
Ohs5/+bvSaxXrFS1LhLnXQ3+xD4BRsWFNV8Tn8VR42COBwPSKUt0toelC1T6Gmo8
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:38 2026 by rpki-client