
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1326EF48F0011F0B7A9F731C4F9AE02.roa
File: B1326EF48F0011F0B7A9F731C4F9AE02.roa (raw, json)
Hash identifier: yonihsM+0Hl4dgP/PSVVO3KrLW4mPFxPhiwqdTLS5OI=
Subject key identifier: A0:23:B1:A1:93:09:5A:21:23:A1:09:62:AB:A0:B1:58:B9:BD:53:CD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E02B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1326EF48F0011F0B7A9F731C4F9AE02.roa
Signing time: Thu 07 May 2026 06:56:40 +0000
ROA not before: Thu 07 May 2026 06:56:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154192
IP address blocks: 202.133.70.0/23 maxlen: 24
2001:df6:13c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57387 (0xe02b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 7 06:56:40 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69fc37a8-8963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:60:3a:e0:95:5b:4c:58:17:f3:dc:eb:47:
85:01:dd:5d:d7:4d:30:4c:c9:ca:8d:53:ae:e3:ed:
38:8c:9f:58:9f:70:5e:f1:59:23:5e:3f:f3:07:f3:
5f:35:e9:11:c4:a5:d5:46:95:7f:fb:b2:06:50:52:
b1:ce:64:91:94:94:0f:13:43:3c:47:c0:d0:a7:18:
af:1b:b1:18:18:90:83:3b:80:5e:78:6c:2c:9f:69:
8c:60:32:66:99:58:06:c2:44:3d:88:66:70:f9:7c:
02:5b:23:49:41:94:24:bb:a1:4d:86:f6:d5:b3:86:
87:2c:87:27:5a:3d:06:e2:18:82:a7:96:e0:3b:f5:
5a:fe:81:be:eb:f8:99:d1:04:ce:2d:bd:cc:74:1a:
e2:67:3d:fc:1e:c2:94:d5:fe:18:ee:c0:59:50:f7:
b3:08:d8:0a:33:e0:9c:d2:d9:3e:b1:f3:5e:7e:05:
d4:83:93:c7:a7:39:d3:6d:ab:70:f5:b5:23:5e:6d:
49:08:1f:1d:00:07:19:36:60:35:7b:be:74:27:38:
33:43:78:89:92:68:fe:d8:f7:43:92:fa:a3:3d:07:
43:71:e3:7e:f4:03:7d:38:47:73:4e:cd:81:18:92:
bf:c0:08:8f:f6:d5:33:5c:c9:c2:6e:7f:e8:12:df:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:23:B1:A1:93:09:5A:21:23:A1:09:62:AB:A0:B1:58:B9:BD:53:CD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1326EF48F0011F0B7A9F731C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.133.70.0/23
IPv6:
2001:df6:13c0::/48
Signature Algorithm: sha256WithRSAEncryption
9d:40:b1:48:41:1b:7d:88:10:16:c4:3d:23:f0:0a:e9:bc:09:
b9:9f:e0:c6:c2:58:bb:53:bd:94:04:e7:95:14:6e:28:da:48:
bb:fb:d7:bd:a7:a5:6f:1a:0a:ae:f8:17:eb:96:41:15:8a:71:
57:0a:b8:04:09:15:4c:4d:e1:10:bc:9d:cd:0d:50:80:89:9c:
6f:8c:78:e3:54:c2:10:37:a1:73:fc:c3:2a:66:58:85:2e:d0:
cd:f1:d6:9c:f3:43:fd:44:9d:f3:92:2b:db:51:e3:c8:13:5f:
16:1c:26:79:58:37:c9:5b:de:a7:36:b8:10:d7:f4:fd:ef:7c:
5d:e3:b2:60:d8:af:bf:28:ec:36:ae:eb:cd:07:b0:96:4a:7d:
56:7d:29:79:a5:b4:a2:74:f9:20:16:e4:6e:1b:a7:8c:85:3a:
88:83:f7:14:de:a3:d0:d3:81:fc:31:b1:f2:b5:7a:91:03:9d:
7b:6c:f9:cd:a6:dd:c7:67:e1:b6:c8:a7:c1:59:f5:4b:80:08:
40:ca:2a:24:da:e8:8e:22:7d:12:7b:e7:61:dc:2b:0d:24:07:
57:aa:0f:0b:0a:f8:e1:b9:ce:f7:5b:58:9c:d7:a0:25:08:20:
f6:f2:d7:73:be:db:4c:9c:b4:b2:f7:dd:33:44:86:68:ef:e6:
3d:ee:7d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:58 2026 by rpki-client