
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EFB95852D03E11F0B137526BC4F9AE02.roa
File: EFB95852D03E11F0B137526BC4F9AE02.roa (raw, json)
Hash identifier: O9ekR7R3Ql7qgjkIsMounR2u/6gX4SogfKThmZrwa3Y=
Subject key identifier: C3:84:BB:A1:5D:84:8F:FC:04:0E:5A:B7:53:E8:E1:54:F2:07:4F:46
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CE2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EFB95852D03E11F0B137526BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:50:26 +0000
ROA not before: Wed 03 Dec 2025 11:55:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147221
IP address blocks: 138.252.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11490 (0x2ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Dec 3 11:55:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2b1-c9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:b7:2c:80:85:0a:83:9f:87:31:bd:f1:65:
b4:64:a5:bd:61:58:ec:55:a2:02:66:b6:9c:f3:41:
b0:a5:6a:b5:a1:77:fd:34:41:51:b4:8b:1b:01:57:
5f:62:62:c3:69:c0:00:59:2d:44:eb:3c:90:df:46:
57:07:8f:f7:c3:48:f0:0e:45:70:82:8b:d6:3f:95:
89:32:94:f0:8e:a3:98:f6:1e:b0:8f:e0:05:d3:c1:
6f:95:f5:9f:00:4a:82:62:74:f3:cb:e9:5c:75:31:
52:b6:c6:ef:9b:aa:86:b9:c1:ed:af:97:45:c9:71:
b0:3f:2b:e5:46:65:dd:bc:5b:eb:9d:e0:a8:70:b4:
a8:f0:6b:f9:6f:e4:18:2a:e7:f7:e0:73:27:ed:cc:
8b:59:f4:79:ed:9a:9f:15:0e:03:d8:aa:5c:ec:69:
a6:74:77:a9:5b:a8:87:69:52:ad:d0:55:7f:30:a8:
2f:f3:56:be:86:26:3e:ad:21:50:55:d2:36:00:bf:
3f:e4:47:05:7e:e9:3f:66:65:be:42:c8:76:c7:a1:
ed:c2:f5:48:f5:15:9b:43:60:b8:eb:0e:75:08:d3:
a2:03:48:93:76:d9:49:61:f1:e7:0c:82:fc:88:64:
1f:dd:c8:aa:91:ec:2a:58:d2:5b:8e:b7:2b:9f:eb:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:84:BB:A1:5D:84:8F:FC:04:0E:5A:B7:53:E8:E1:54:F2:07:4F:46
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EFB95852D03E11F0B137526BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:75:c2:03:7e:b3:7a:91:8a:23:0d:5b:02:89:94:54:24:cc:
b1:0b:e2:eb:a0:ec:1a:94:58:75:d3:b7:6e:c0:c7:4e:16:cf:
1d:dc:0d:50:1f:71:fc:29:1d:c3:24:6d:0b:5b:b1:1a:18:fa:
65:53:1a:0d:9a:81:17:4f:06:ac:92:8d:d7:81:d7:9a:a3:6a:
13:13:d9:00:0f:4d:ee:0a:34:ed:0e:ad:92:5e:c1:2b:0a:20:
43:0c:5b:67:5d:7f:0b:cb:3d:b3:d2:1b:ae:4e:2d:06:27:69:
14:ad:b8:54:d3:04:aa:23:cb:6e:aa:f2:a2:8c:32:27:bb:3e:
6e:ec:b3:ac:6b:0e:6b:77:89:b1:5c:10:3e:28:91:97:89:07:
d2:c2:65:bf:b0:8b:a0:94:cc:2e:84:d7:4e:46:7e:74:59:f1:
88:4d:09:2f:31:97:56:c6:01:2d:02:bc:b5:b5:67:ad:12:7c:
d9:14:b6:c5:ee:7b:1d:4c:a9:4d:60:e5:17:f4:df:5a:e7:03:
16:7f:ae:07:b3:18:d7:4c:79:9e:54:8d:b3:f1:f2:a1:44:c8:
b9:0e:c8:13:9d:9a:08:a7:94:e9:77:41:a6:fe:5f:2b:d6:22:
52:d0:44:3b:57:07:d0:4a:8e:b5:2a:a6:03:21:8a:13:a6:b8:
34:ae:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:21 2026 by rpki-client