
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/DB0532B2635411EF8B6D364BC4F9AE02.roa
File: DB0532B2635411EF8B6D364BC4F9AE02.roa (raw, json)
Hash identifier: 8PR1OXqIuV/6eRpG3icyql3dqzt2IVj4HZ8xAFN12Gs=
Subject key identifier: 35:95:18:2E:DE:A8:A1:1C:3A:CE:81:B3:5F:54:C4:B2:D1:4B:E9:5C
Certificate issuer: /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
Certificate serial: 0205
Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/DB0532B2635411EF8B6D364BC4F9AE02.roa
Signing time: Sat 27 Jun 2026 04:34:57 +0000
ROA not before: Sat 27 Jun 2026 04:34:57 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 134184
IP address blocks: 203.23.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl
rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E2A5, serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
Validity
Not Before: Jun 27 04:34:57 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3f52f1-bcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:19:da:44:d5:2e:b2:78:fd:36:c5:cc:f7:
6c:d1:e7:45:35:a7:94:2d:0a:c2:00:96:3b:eb:71:
28:b6:b9:30:32:9b:f8:fc:b9:04:c5:a1:3d:43:bf:
d7:33:bf:85:bd:d7:37:f3:29:8a:5f:fa:60:8e:9b:
9a:54:23:91:cd:e9:c3:fd:c3:f4:8d:4c:77:00:9f:
8e:af:62:ed:d0:51:7d:f9:ec:6a:c3:2b:d4:df:4a:
17:bf:93:37:a1:3d:ba:ef:b8:6d:07:b1:99:ae:68:
b6:d3:cf:39:d7:0c:e5:fa:ac:3f:e1:71:55:98:4e:
a4:8e:9d:eb:2f:07:01:ce:cc:8e:72:fd:f8:83:25:
a9:2c:1b:b5:f4:35:fa:e4:80:2a:82:d5:f3:3c:4b:
c1:a2:17:00:50:0f:ec:cb:c6:aa:72:4b:94:42:0b:
08:7a:c2:70:48:73:91:ea:2a:c2:b2:65:ba:1e:64:
34:ce:42:53:4c:66:9a:0d:7b:04:db:00:93:3d:93:
72:25:fc:39:58:2c:95:58:0b:f7:78:8b:f8:76:13:
11:38:c6:2b:c4:10:c0:2c:19:9d:b6:df:ee:4a:bf:
82:91:87:cb:28:32:6d:af:82:ca:5a:92:3a:ed:04:
ea:c8:f2:7f:0a:11:eb:0c:01:73:8a:e7:8f:3f:22:
d9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:18:2E:DE:A8:A1:1C:3A:CE:81:B3:5F:54:C4:B2:D1:4B:E9:5C
X509v3 Authority Key Identifier:
keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/DB0532B2635411EF8B6D364BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.23.90.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7b:55:a5:55:19:4d:98:b8:dc:e9:94:14:7e:26:6a:3b:6b:
12:93:4b:75:dd:04:a5:f5:5f:b9:ee:89:08:e5:8b:c1:e5:35:
ff:06:0d:86:5d:85:d6:d3:c0:9e:5b:1f:3f:8e:24:84:61:da:
24:d5:5f:1f:3f:2f:e4:b9:48:f2:63:8a:86:bb:3e:3b:6c:14:
28:cc:97:dc:2b:2b:f7:51:16:28:d6:bd:8b:c5:9d:03:0f:dc:
bd:b0:fd:5d:17:62:5f:fd:36:08:d2:3c:7e:dd:d4:b7:43:98:
dc:b2:e4:70:61:87:44:94:79:83:69:ed:fd:b8:ae:83:fc:5a:
a7:f0:f5:8c:24:52:39:81:b9:87:d4:32:26:57:e0:a0:3c:c0:
c2:8c:c3:a5:92:81:dc:4a:ec:26:40:be:5c:56:85:78:0b:0d:
30:b0:be:34:2c:71:fe:83:0b:8f:30:9f:4e:eb:be:21:d4:05:
9d:bd:27:47:86:96:0b:b1:07:78:15:b2:1c:81:c0:21:23:ae:
c5:17:89:2b:e5:5e:00:f8:62:bc:b2:c1:91:10:2f:ff:e0:14:
5c:26:57:8d:75:0f:07:ed:cd:27:8a:28:c9:84:f6:8a:a9:15:
87:eb:de:b8:ed:ed:20:0f:ae:dc:70:03:3a:46:34:54:25:ee:
6a:7a:83:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:22 2026 by rpki-client