
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/AA456842107211F09A9E631FC4F9AE02.roa
File: AA456842107211F09A9E631FC4F9AE02.roa (raw, json)
Hash identifier: f6Cvx3N7h4aMk1PWUAl7FuI3n29BObBDdjQTOWyJ4SU=
Subject key identifier: 19:B8:F8:1D:2F:8D:1E:14:1D:90:E8:51:E1:79:59:62:02:53:2A:30
Certificate issuer: /CN=A918E28E/serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
Certificate serial: 0126
Authority key identifier: 5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/AA456842107211F09A9E631FC4F9AE02.roa
Signing time: Sat 29 Aug 2026 05:56:42 +0000
ROA not before: Sat 29 Aug 2026 05:56:42 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131581
IP address blocks: 103.234.194.0/24 maxlen: 24
202.52.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl
rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 06:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E28E, serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
Validity
Not Before: Aug 29 05:56:42 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a92749a-c906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:49:2c:9b:08:77:39:97:df:be:f6:e8:5b:
6a:cb:85:01:30:62:5d:1e:0d:6c:aa:fc:e5:ed:2b:
4f:d9:7b:c7:c6:db:78:67:f1:08:0d:d8:55:8d:cf:
33:82:b6:c7:9b:b2:5d:6b:a7:5c:03:54:a7:f7:18:
24:33:15:84:cc:be:ba:34:10:55:15:ed:ff:45:1a:
a0:bb:ff:cd:71:8a:24:01:07:c4:7a:a8:c3:e0:32:
67:2f:f4:68:55:dd:ef:34:ce:ad:92:88:ef:32:81:
be:d0:7e:ed:4b:04:96:b7:ac:cd:ba:85:41:2f:41:
d0:29:e4:d6:24:14:13:59:5a:5f:63:bf:cc:b2:03:
ac:94:65:ad:17:b7:da:8b:2c:02:94:e4:91:c8:c7:
91:6a:de:6a:25:26:55:c9:90:6f:7c:08:ba:79:67:
33:1b:7f:d6:02:05:96:0b:3a:63:7e:49:9a:e9:a5:
40:82:ea:6f:3f:a6:f9:b6:70:86:96:a9:8b:9b:05:
6e:f9:18:8a:dd:21:19:b8:5a:cd:a7:3a:ff:1f:1d:
66:7b:44:4a:04:58:c6:83:52:4c:d5:7c:d9:d7:91:
f0:f7:5b:df:ef:6c:38:76:c7:10:a7:6d:c4:1a:29:
10:7b:5f:e8:42:87:6e:d1:83:df:fb:7a:a7:86:0a:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:F8:1D:2F:8D:1E:14:1D:90:E8:51:E1:79:59:62:02:53:2A:30
X509v3 Authority Key Identifier:
keyid:5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/AA456842107211F09A9E631FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.234.194.0/24
202.52.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8c:9b:a8:80:19:32:33:79:55:16:cf:64:97:2b:c4:21:d2:
37:b7:1b:f0:96:fd:88:22:cf:75:58:2c:db:a4:fa:b0:72:bd:
37:a0:97:a5:ed:cc:53:d8:65:d9:57:c0:f9:93:bd:0d:bc:24:
ae:a1:ab:7d:63:44:85:cf:2f:6a:2b:95:cc:74:da:38:e3:7d:
46:a7:71:8c:92:22:b6:8c:ef:5f:b3:ea:a5:44:0b:b6:b3:ff:
09:a1:27:9e:2c:e4:e3:48:29:b9:37:c1:17:96:96:17:46:38:
4f:9e:b6:de:ee:fd:8b:aa:c5:54:a1:ec:94:5f:d1:70:f5:ea:
ca:62:f1:15:5d:e4:f9:6c:a5:e2:49:00:a2:79:27:62:e6:3d:
fd:65:f4:fc:b6:e6:8c:40:53:eb:73:87:38:e7:19:34:1a:16:
6c:a9:4d:da:59:1d:48:ef:e4:62:2c:a3:08:8d:7c:0b:2e:dc:
0c:b2:1e:96:7e:f5:c5:63:4d:b1:63:38:4a:78:39:12:27:e8:
a8:b3:46:e0:d0:12:34:af:01:dc:75:20:60:63:72:25:59:c9:
98:03:84:f2:75:7b:82:93:11:20:2e:2f:9f:12:dc:d8:21:46:
fd:89:94:01:b0:62:bd:2a:18:51:55:13:95:7c:7c:ae:99:5b:
f6:bf:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:43:11 2026 by rpki-client