
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56AC9AA60A8F11EEB13EAF44C4F9AE02.roa
File: 56AC9AA60A8F11EEB13EAF44C4F9AE02.roa (raw, json)
Hash identifier: kO3i2EUnWstXiLRwzKaSGERDh5diLPbQm7dwhbZicV0=
Subject key identifier: 2C:45:47:DA:BD:45:69:F0:D8:09:FD:C0:40:68:42:87:BF:DA:ED:6F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D7A9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56AC9AA60A8F11EEB13EAF44C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:51:29 +0000
ROA not before: Thu 08 May 2025 16:26:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151100
IP address blocks: 218.185.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55209 (0xd7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:26:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2f1-a9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:e3:75:88:c5:25:27:34:1b:35:e3:62:65:
48:d9:42:40:4f:7d:1e:ff:ca:95:45:5d:31:7a:ee:
3e:f2:ba:cc:2b:65:26:06:51:fe:37:e5:06:94:da:
9c:b0:57:d4:f4:5c:20:86:5c:03:4a:e9:05:02:97:
86:d7:2c:cf:20:4e:2c:9f:5e:62:2e:b1:9f:ca:f0:
1c:d7:d8:49:7e:39:89:d9:d6:d4:b6:4e:ca:cd:51:
fd:87:74:67:b3:79:1f:34:b6:db:08:30:c3:de:5a:
40:ad:99:7d:4d:c8:de:61:b9:fc:25:6f:11:d0:58:
8a:8e:92:30:53:9b:c4:61:fb:41:79:61:09:b2:ec:
45:ec:86:ab:86:82:22:e1:8b:2b:ce:ec:16:30:c1:
cb:72:9b:31:34:29:e9:c3:72:35:12:6b:b4:29:9d:
09:38:30:b0:1e:cf:6c:23:93:3d:22:96:77:d6:22:
d8:b4:85:79:35:99:32:cc:e1:3f:e7:52:47:66:66:
48:e3:45:cd:3f:4a:09:ff:38:b4:16:22:50:f1:28:
d9:7a:71:fe:b8:f6:d0:b8:b4:e2:37:8a:2e:79:89:
ab:f4:3c:2e:d7:06:31:fc:80:f8:2f:71:8b:7f:71:
45:4e:a1:44:c4:16:cc:4f:07:da:3b:a8:2a:80:7c:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:45:47:DA:BD:45:69:F0:D8:09:FD:C0:40:68:42:87:BF:DA:ED:6F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56AC9AA60A8F11EEB13EAF44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
218.185.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:c2:40:a4:5a:14:85:82:2f:68:00:4f:7b:4a:43:ab:e6:49:
26:95:4e:2b:97:fb:4b:da:65:73:ae:aa:00:35:f9:4e:e1:6d:
bb:5b:e2:93:5b:df:1a:95:04:46:ed:53:4d:1e:a8:76:84:5b:
d2:bd:b1:59:67:94:b2:20:1c:b5:a6:38:ff:15:83:8b:70:1f:
be:51:4f:0f:4e:b7:fd:26:6d:fa:29:3f:ef:d8:3c:10:89:84:
87:a9:bc:53:d8:7c:fe:ea:73:4e:68:ea:c4:ff:01:ca:aa:d3:
e0:ea:83:40:b4:63:3f:4e:98:58:4b:03:bb:73:c1:21:3d:55:
df:41:f8:54:76:14:c3:b7:ba:2b:81:b7:d9:50:04:91:be:4f:
b0:b0:2c:47:bf:af:23:ff:7e:66:b9:6c:da:24:00:c3:0c:71:
12:37:ff:a9:b3:0e:b1:02:24:fe:d4:a8:2c:8a:b7:dc:c0:39:
ef:0e:b4:02:22:9e:94:e3:9c:89:16:8d:5a:6b:61:8d:db:81:
2e:bf:14:fc:c9:e3:37:12:33:ef:07:9b:5a:68:f7:cb:1f:26:
8e:33:61:83:26:a9:61:57:5d:f2:d0:4a:9c:7a:0f:16:73:6b:
ae:f3:6c:67:12:a4:aa:42:85:6e:4d:7b:30:99:48:cb:51:6d:
9b:33:79:cd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANepMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MjYyM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMyZjEtYTllMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMPH43WIxSUnNBs142JlSNlCQE99Hv/KlUVdMXruPvK6zCtlJgZR/jflBpTa
nLBX1PRcIIZcA0rpBQKXhtcszyBOLJ9eYi6xn8rwHNfYSX45idnW1LZOys1R/Yd0
Z7N5HzS22wgww95aQK2ZfU3I3mG5/CVvEdBYio6SMFObxGH7QXlhCbLsReyGq4aC
IuGLK87sFjDBy3KbMTQp6cNyNRJrtCmdCTgwsB7PbCOTPSKWd9Yi2LSFeTWZMszh
P+dSR2ZmSONFzT9KCf84tBYiUPEo2Xpx/rj20Li04jeKLnmJq/Q8LtcGMfyA+C9x
i39xRU6hRMQWzE8H2juoKoB8KbkCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQsRUfa
vUVp8NgJ/cBAaEKHv9rtbzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU2QUM5QUE2
MEE4RjExRUVCMTNFQUY0NEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAtq5/DANBgkqhkiG9w0BAQsFAAOCAQEAasJApFoUhYIvaABPe0pD
q+ZJJpVOK5f7S9plc66qADX5TuFtu1vik1vfGpUERu1TTR6odoRb0r2xWWeUsiAc
taY4/xWDi3AfvlFPD063/SZt+ik/79g8EImEh6m8U9h8/upzTmjqxP8ByqrT4OqD
QLRjP06YWEsDu3PBIT1V30H4VHYUw7e6K4G32VAEkb5PsLAsR7+vI/9+Zrls2iQA
wwxxEjf/qbMOsQIk/tSoLIq33MA57w60AiKelOOciRaNWmthjduBLr8U/MnjNxIz
7webWmj3yx8mjjNhgyapYVdd8tBKnHoPFnNrrvNsZxKkqkKFbk17MJlIy1FtmzN5
zQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:39 2026 by rpki-client