
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/338057C478FC11F08A64057FC4F9AE02.roa
File: 338057C478FC11F08A64057FC4F9AE02.roa (raw, json)
Hash identifier: NqNULcU51ievXYUdVTXP+Vtj9e9X49u+bu7D5JuC5yc=
Subject key identifier: 24:75:7F:43:46:C5:34:29:1C:CC:5B:DE:B9:33:C3:E2:92:35:A2:6C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E1C4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/338057C478FC11F08A64057FC4F9AE02.roa
Signing time: Sun 31 May 2026 16:31:39 +0000
ROA not before: Sun 31 May 2026 16:31:39 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 13150
IP address blocks: 118.94.81.0/24 maxlen: 24
118.94.82.0/24 maxlen: 24
118.94.83.0/24 maxlen: 24
118.94.84.0/24 maxlen: 24
118.94.85.0/24 maxlen: 24
118.94.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57796 (0xe1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:31:39 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c626b-1b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e7:2c:a5:35:c1:00:38:47:65:5e:19:88:7f:
13:9e:6b:13:04:99:b8:53:e1:aa:9b:5d:24:c3:bb:
ac:a6:35:cf:7e:46:bd:5a:a2:82:9b:39:5e:ba:76:
ab:1b:1a:ec:f0:f9:83:4c:77:3d:13:9f:8e:07:e7:
e4:0c:0c:53:0a:17:1a:52:5f:88:7a:04:06:71:de:
fe:3c:b7:65:4c:b8:9c:b0:52:98:a0:bb:09:65:ac:
4f:e0:98:4e:a1:08:79:58:6a:bd:ae:dd:74:d9:5c:
37:57:25:15:f2:42:04:4d:8a:89:aa:5a:20:ce:27:
1d:ef:ca:a6:12:1b:5e:c1:00:88:38:e5:34:cc:99:
6e:7c:99:c6:00:d5:49:dd:c1:9a:74:e7:e0:06:e3:
54:63:68:ee:fc:eb:fc:17:2d:79:59:54:75:92:c8:
f6:7e:55:90:ee:cd:0c:bc:08:94:3a:19:19:25:24:
57:56:12:ae:ec:2f:7d:6f:25:72:3c:c2:65:dc:11:
31:61:51:3e:7d:7e:15:c4:27:a5:8a:4c:cd:5a:36:
14:d8:66:f1:08:5e:bb:13:4c:00:cd:5f:9b:d1:94:
4b:ee:9d:95:f9:dd:87:44:22:46:09:4d:80:18:e6:
a3:8c:9f:19:97:68:1d:20:67:2a:80:ad:d8:95:12:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:7F:43:46:C5:34:29:1C:CC:5B:DE:B9:33:C3:E2:92:35:A2:6C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/338057C478FC11F08A64057FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
118.94.81.0-118.94.85.255
118.94.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:34:f2:a8:e3:0e:d7:e7:35:f5:be:78:54:2c:f9:24:67:59:
6f:2b:01:f4:e7:0d:4a:e4:4f:83:49:bb:67:88:3e:4a:0c:30:
8a:f4:76:78:40:bd:f2:97:de:f4:9b:dc:0f:96:84:77:7a:2c:
dc:46:15:ce:b8:d7:3d:bb:d1:fb:ad:65:bf:b4:e1:83:25:e9:
7b:3a:4d:03:e2:7d:02:b1:0d:49:b3:12:08:46:11:08:32:88:
ce:5d:1a:72:52:89:ba:ee:f8:b9:14:ef:bb:cc:48:69:74:58:
75:66:1c:23:24:ce:23:b3:5d:1e:c9:de:60:91:99:91:37:47:
43:39:d3:4b:4a:4b:de:50:d2:a2:58:a7:b4:51:86:74:bd:52:
2d:8c:13:ca:fc:88:ba:12:29:08:c9:2e:26:01:79:9a:30:95:
27:bf:1f:c9:24:57:e0:8c:ff:4f:2d:90:b8:d3:1e:f2:80:97:
bd:8c:65:62:0d:ad:8e:0a:3f:c6:af:cd:f0:d1:f8:a7:3b:d6:
79:25:de:f1:2a:e3:cd:ef:16:01:f9:18:6f:0f:6a:1f:4f:47:
89:46:87:1a:ca:ee:72:e9:05:3c:70:1e:ed:f9:62:32:61:3b:
8c:00:67:85:d7:d6:cc:fe:c1:24:ec:94:1d:f1:3b:b9:48:cd:
24:6b:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:33:05 2026 by rpki-client