
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa
File: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (raw, json)
Hash identifier: G7CUtd3m+KDiwG1MCgyxY5Ml5ZuJVANVfOkXBqSh68I=
Subject key identifier: 7E:49:19:ED:46:C5:2D:16:EC:0C:BC:D1:4D:23:A3:BE:CE:9D:05:B7
Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial: 1828
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa
Signing time: Thu 04 Jun 2026 17:19:40 +0000
ROA not before: Thu 04 Jun 2026 17:19:40 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135146
IP address blocks: 168.70.150.0/24 maxlen: 24
168.70.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6184 (0x1828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Validity
Not Before: Jun 4 17:19:40 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21b3ac-0bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:aa:f0:5b:d6:fa:ec:10:b0:f5:8f:38:84:
26:3f:73:14:8a:4b:0b:43:11:5f:25:38:06:05:fb:
41:30:a2:98:fa:3c:bf:40:13:7b:cf:91:56:e9:90:
fd:d2:08:c5:54:b7:63:1f:2e:4f:f7:3b:1f:05:55:
23:8c:c0:5d:05:b6:f0:81:1d:6f:f1:60:8a:30:f6:
a9:c7:1f:98:48:0c:16:a4:aa:7b:21:51:93:a6:6f:
88:08:b4:d1:fa:55:b6:ac:17:11:d9:ac:ea:6d:ea:
e0:16:60:0a:c0:f2:e7:f8:3a:db:f4:b8:12:ed:5a:
ac:c1:de:92:7e:c4:c2:47:c1:c4:ad:90:17:e3:dd:
e5:53:c8:3f:ab:a5:7f:48:dd:9c:09:b1:60:ba:3f:
15:c6:41:a1:1a:fe:ab:23:68:e4:cf:47:b3:be:06:
c0:f4:97:89:83:04:09:4b:c9:00:6a:f3:16:8d:ff:
d1:87:06:77:1b:ab:0a:83:9b:2d:98:6a:5f:57:83:
3e:81:ec:48:d2:23:5f:dd:a4:e7:83:03:36:7e:e3:
1c:2f:d3:4f:9f:b0:1b:6b:3f:66:39:a6:aa:7a:eb:
48:e7:12:b5:dc:14:0e:d8:30:16:90:ce:ab:6a:84:
55:19:5f:79:5b:8a:49:be:14:37:1b:03:f0:cd:9c:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:49:19:ED:46:C5:2D:16:EC:0C:BC:D1:4D:23:A3:BE:CE:9D:05:B7
X509v3 Authority Key Identifier:
keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
168.70.150.0/24
168.70.171.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:85:25:d0:69:88:b2:4f:fc:95:26:76:be:c8:cb:76:ff:4b:
88:ac:55:89:cc:19:6b:da:07:66:03:c2:c6:67:b6:ca:d9:12:
0e:34:53:e3:04:76:e5:41:df:06:b1:42:34:e7:0c:02:b6:5f:
96:90:51:08:57:be:c5:15:7f:68:1d:42:19:37:88:47:f4:1c:
45:13:c2:9e:42:cd:22:cd:44:29:3b:a2:09:d2:f0:a4:cb:9c:
b7:b0:de:f6:04:6e:8e:a1:29:e6:8e:7c:70:75:3a:f5:4f:a1:
68:63:37:25:96:cc:6b:57:95:2c:24:a2:2f:50:2d:9a:68:80:
0c:20:10:7f:87:40:72:e6:35:70:34:12:54:ab:e3:a9:be:8f:
6a:e0:7e:98:87:70:04:3d:35:b0:f4:86:b5:93:d8:d7:0e:c1:
a1:a2:c6:9f:be:03:3e:a9:3f:74:81:bb:bb:57:b5:2d:05:b0:
b1:e0:32:9d:a3:c4:37:74:49:e5:a2:26:16:35:3d:35:14:dd:
7e:9b:b9:38:2d:79:36:69:13:ee:56:74:00:af:ba:aa:03:cd:
70:2f:6e:f2:a2:76:fe:96:de:e6:06:dd:33:97:4c:83:1a:ab:
51:8f:e7:71:95:74:8e:70:af:ae:36:66:0a:5a:ae:ec:fd:e5:
10:e8:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:20:51 2026 by rpki-client