
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93767630B9B511EDBBD63E47C4F9AE02.roa
File: 93767630B9B511EDBBD63E47C4F9AE02.roa (raw, json)
Hash identifier: 3E3QCcQnKSWmGIneRIv1LdF5TWEeZML3tMEWsikvL90=
Subject key identifier: 67:5C:DE:B6:B8:1D:2B:27:CF:FC:35:90:AD:4D:4D:96:5E:92:1B:8A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D425
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93767630B9B511EDBBD63E47C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:30:01 +0000
ROA not before: Thu 08 May 2025 16:09:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 139.5.232.0/24 maxlen: 24
139.5.233.0/24 maxlen: 24
139.5.234.0/24 maxlen: 24
139.5.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54309 (0xd425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:09:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bde9-1c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f9:e8:99:98:ab:f8:d5:10:ef:93:17:2a:3e:
3c:38:63:82:ff:f6:07:e8:e2:74:ca:5d:3e:c9:df:
18:ee:08:e4:e5:99:db:97:4f:40:71:5d:c2:39:94:
09:2e:6f:99:fd:7d:7a:aa:ef:d8:1f:5b:a3:5f:c5:
4e:cc:14:fa:f5:12:6f:f9:fe:02:0d:99:39:8f:7b:
c8:f2:14:6f:65:71:56:49:37:4f:15:c8:0e:b1:bf:
2c:6f:60:84:94:9a:fa:5e:70:97:2f:52:8f:25:38:
81:4c:a4:6c:15:7c:7c:1d:58:6d:3e:57:e2:3d:b9:
98:1d:b4:ef:9a:53:67:f0:03:4d:5e:6d:e8:78:78:
c3:d4:24:3b:29:4e:53:d8:f1:3b:53:51:ce:21:0e:
43:78:50:d8:ba:db:51:9b:ad:38:eb:2e:45:8b:b4:
54:33:e6:4e:9a:09:f2:7c:a5:06:16:02:48:6c:f5:
ff:ec:fe:e8:e3:64:da:0e:f0:86:f7:e3:1d:3c:79:
5f:2c:42:30:f6:72:9b:b5:5a:ad:03:65:e5:ba:4c:
d7:64:3a:d3:32:f1:9f:24:62:9c:35:90:94:80:08:
65:dc:2d:6b:11:14:70:37:52:97:b1:79:86:b4:16:
bc:73:c6:cf:5f:8c:5d:f1:a4:89:f9:05:ca:82:2a:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5C:DE:B6:B8:1D:2B:27:CF:FC:35:90:AD:4D:4D:96:5E:92:1B:8A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93767630B9B511EDBBD63E47C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
139.5.232.0/22
Signature Algorithm: sha256WithRSAEncryption
01:3f:62:88:79:5b:09:55:5f:43:68:77:49:11:52:2f:81:a3:
8b:b6:80:ba:c7:f3:19:f3:78:c5:f0:d5:6a:62:a9:5c:81:7b:
14:3a:49:bc:62:7e:96:66:4f:2c:f9:e5:d5:db:96:c0:7e:e6:
67:a6:a1:a7:40:ae:8c:18:e6:03:a3:53:6c:86:aa:f4:0f:ef:
5a:5f:a4:05:50:19:45:b8:29:7a:e9:d6:c9:a3:13:4a:89:ba:
55:e3:c4:77:3a:ff:ad:5c:f8:6a:46:a3:e8:5f:ae:36:a2:0a:
bd:e5:04:e2:69:9b:6a:ac:09:63:6c:c0:2d:76:65:45:93:f4:
e3:4a:24:f2:3e:ab:db:2e:a2:d0:6e:80:9a:2a:48:4b:6e:c3:
ee:10:71:65:53:85:76:41:e3:0c:ed:30:e0:b7:b8:c2:9e:62:
2c:23:fb:99:29:6e:36:cd:12:e7:48:d9:74:ac:85:55:37:0f:
86:64:23:08:b5:da:ed:f3:2c:63:27:6c:00:88:6c:f7:8c:1e:
b9:3e:18:64:d8:9e:76:27:0d:c0:65:c6:f5:e6:e6:71:25:a1:
40:10:a4:1f:d9:b5:e0:a5:a9:07:e1:42:43:e0:8d:b8:6f:63:
3d:82:7d:a3:53:00:23:ed:60:d0:16:9c:5d:bf:11:9d:c6:59:
15:dd:c1:2d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANQlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDk0N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJkZTktMWM3YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIb56JmYq/jVEO+TFyo+PDhjgv/2B+jidMpdPsnfGO4I5OWZ25dPQHFdwjmU
CS5vmf19eqrv2B9bo1/FTswU+vUSb/n+Ag2ZOY97yPIUb2VxVkk3TxXIDrG/LG9g
hJSa+l5wly9SjyU4gUykbBV8fB1YbT5X4j25mB2075pTZ/ADTV5t6Hh4w9QkOylO
U9jxO1NRziEOQ3hQ2LrbUZutOOsuRYu0VDPmTpoJ8nylBhYCSGz1/+z+6ONk2g7w
hvfjHTx5XyxCMPZym7VarQNl5bpM12Q60zLxnyRinDWQlIAIZdwtaxEUcDdSl7F5
hrQWvHPGz1+MXfGkifkFyoIqb+ECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRnXN62
uB0rJ8/8NZCtTU2WXpIbijAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkzNzY3NjMw
QjlCNTExRURCQkQ2M0U0N0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAosF6DANBgkqhkiG9w0BAQsFAAOCAQEAAT9iiHlbCVVfQ2h3SRFS
L4Gji7aAusfzGfN4xfDVamKpXIF7FDpJvGJ+lmZPLPnl1duWwH7mZ6ahp0CujBjm
A6NTbIaq9A/vWl+kBVAZRbgpeunWyaMTSom6VePEdzr/rVz4akaj6F+uNqIKveUE
4mmbaqwJY2zALXZlRZP040ok8j6r2y6i0G6AmipIS27D7hBxZVOFdkHjDO0w4Le4
wp5iLCP7mSluNs0S50jZdKyFVTcPhmQjCLXa7fMsYydsAIhs94weuT4YZNiedicN
wGXG9ebmcSWhQBCkH9m14KWpB+FCQ+CNuG9jPYJ9o1MAI+1g0BacXb8RncZZFd3B
LQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:43 2026 by rpki-client