
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/C53A8AF010AE11F1B1789E883B3D8C67.roa
File: C53A8AF010AE11F1B1789E883B3D8C67.roa (raw, json)
Hash identifier: 4ZswNm1S1tuZBYSv603fVKGMDXWp0nKSZE1TT9TsfuQ=
Subject key identifier: 46:8A:27:3C:6F:9F:F6:DD:77:85:F1:E4:03:D0:77:E9:68:4B:CD:24
Certificate issuer: /CN=A918D1BD/serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8
Certificate serial: 74
Authority key identifier: C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/C53A8AF010AE11F1B1789E883B3D8C67.roa
Signing time: Wed 06 May 2026 02:37:31 +0000
ROA not before: Wed 06 May 2026 02:37:31 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154284
IP address blocks: 138.252.20.0/24 maxlen: 24
138.252.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl
rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D1BD, serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8
Validity
Not Before: May 6 02:37:31 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69faa96b-a179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:ea:c7:44:06:37:45:dc:dd:f5:37:61:23:
33:42:2e:df:2e:a6:7d:a9:51:10:c4:f2:0b:2a:6f:
19:a0:46:7d:e3:9d:e9:3a:3e:d7:e8:d2:07:a1:5b:
09:36:e6:6f:c9:ba:57:88:94:7a:82:31:24:75:b5:
3c:23:1b:20:fc:32:a5:01:82:f5:53:28:f1:97:8d:
01:ce:d4:ad:62:7e:5f:ed:d4:2e:a0:43:e7:b9:b8:
72:a2:b1:69:d3:43:61:85:23:21:2a:5a:8f:93:8e:
1b:03:a2:1a:3d:2e:74:3e:c1:4f:85:90:dc:79:04:
90:07:02:0f:0b:b2:75:11:c0:2a:03:c4:0f:f1:ec:
70:e4:58:e8:4b:2e:f1:b3:66:e6:41:d2:9b:fd:1f:
2d:c6:95:51:8f:0c:d0:c6:37:ff:e6:53:6f:89:74:
68:94:14:2c:09:b4:7b:eb:8d:8f:9a:e8:e4:5d:85:
1f:87:e3:3f:c7:f8:a6:dc:f5:e4:e9:68:37:ab:b5:
f6:ea:52:a1:0d:0a:74:23:10:cf:d8:eb:e8:9c:06:
b0:f2:00:18:c2:03:b9:71:e0:79:51:2e:c2:41:3e:
7c:e2:99:81:a9:0f:75:21:1c:0e:b8:72:52:b4:38:
ed:54:98:d5:7a:50:87:f8:a4:52:f9:8a:8e:39:dc:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:27:3C:6F:9F:F6:DD:77:85:F1:E4:03:D0:77:E9:68:4B:CD:24
X509v3 Authority Key Identifier:
keyid:C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/C53A8AF010AE11F1B1789E883B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.20.0/23
Signature Algorithm: sha256WithRSAEncryption
af:91:b6:87:fb:f4:f1:5b:ca:fc:53:f4:95:ed:50:b6:82:e6:
a4:7f:5a:3b:75:e0:b3:95:d6:56:4e:4c:ab:1c:4c:fe:71:9d:
2a:58:dd:ad:2e:15:b4:b6:a3:79:40:58:89:49:5c:97:26:e7:
3b:26:c9:02:3c:76:88:1e:de:0c:c9:a3:38:2c:59:ca:03:52:
d9:52:47:aa:4a:22:67:ac:33:64:d6:57:8d:e6:34:65:18:37:
8e:3f:7c:98:cd:3b:ff:7a:36:81:77:dd:aa:0a:c1:53:22:c4:
0b:30:d1:10:54:40:ad:d4:a5:ac:c9:bb:d4:31:19:da:ff:cf:
5c:f8:d4:0b:b1:4f:ac:fc:d6:76:d6:48:d0:4b:a5:b5:0b:63:
12:21:f5:98:58:a1:94:3a:cc:44:43:58:69:47:d4:da:39:49:
08:71:3d:82:fd:0e:75:fd:c1:71:69:2d:d5:12:6a:17:4c:c6:
13:d3:2a:1a:7f:f7:82:dc:03:d5:0d:cc:d6:82:49:6b:f1:5d:
64:99:40:0f:59:11:09:30:35:77:3c:b8:57:d5:c3:36:42:9b:
d9:6b:38:e6:f6:87:fe:cb:a4:55:17:6b:e1:08:d5:31:90:3e:
2c:63:66:3c:06:7e:88:7e:13:cd:2e:06:9f:13:1c:81:be:e2:
41:e4:b7:42
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RDFCRDExMC8GA1UEBRMoQzM5NUQwMUEwOEMxNUEyMTExMDNDRTgxMDYxRTI2ODI0
RjU2QkREODAeFw0yNjA1MDYwMjM3MzFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZmFhOTZiLWExNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDS1erHRAY3Rdzd9TdhIzNCLt8upn2pURDE8gsqbxmgRn3jnek6Ptfo0gehWwk2
5m/JuleIlHqCMSR1tTwjGyD8MqUBgvVTKPGXjQHO1K1ifl/t1C6gQ+e5uHKisWnT
Q2GFIyEqWo+TjhsDoho9LnQ+wU+FkNx5BJAHAg8LsnURwCoDxA/x7HDkWOhLLvGz
ZuZB0pv9Hy3GlVGPDNDGN//mU2+JdGiUFCwJtHvrjY+a6ORdhR+H4z/H+Kbc9eTp
aDertfbqUqENCnQjEM/Y6+icBrDyABjCA7lx4HlRLsJBPnzimYGpD3UhHA64clK0
OO1UmNV6UIf4pFL5io453EIZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQURoonPG+f
9t13hfHkA9B36WhLzSQwHwYDVR0jBBgwFoAUw5XQGgjBWiERA86BBh4mgk9Wvdgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMUJEL0E3MDZGOEIyQTc2
MjExRjA4RkRFMzQxM0M0RjlBRTAyL3c1WFFHZ2pCV2lFUkE4NkJCaDRtZ2s5V3Zk
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdzVYUUdnakJXaUVSQTg2QkJoNG1nazlXdmRnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDFCRC9BNzA2RjhCMkE3NjIxMUYwOEZERTM0MTNDNEY5QUUwMi9DNTNBOEFGMDEw
QUUxMUYxQjE3ODlFODgzQjNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGK/BQwDQYJKoZIhvcNAQELBQADggEBAK+Rtof79PFbyvxT9JXtULaC
5qR/Wjt14LOV1lZOTKscTP5xnSpY3a0uFbS2o3lAWIlJXJcm5zsmyQI8doge3gzJ
ozgsWcoDUtlSR6pKImesM2TWV43mNGUYN44/fJjNO/96NoF33aoKwVMixAsw0RBU
QK3UpazJu9QxGdr/z1z41AuxT6z81nbWSNBLpbULYxIh9ZhYoZQ6zERDWGlH1No5
SQhxPYL9DnX9wXFpLdUSahdMxhPTKhp/94LcA9UNzNaCSWvxXWSZQA9ZEQkwNXc8
uFfVwzZCm9lrOOb2h/7LpFUXa+EI1TGQPixjZjwGfoh+E80uBp8THIG+4kHkt0I=
-----END CERTIFICATE-----
Generated at Wed May 13 06:22:44 2026 by rpki-client