
$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/33B40FB8826D11F095A2E27BC4F9AE02.roa
File: 33B40FB8826D11F095A2E27BC4F9AE02.roa (raw, json)
Hash identifier: jrSaLDXaVnrCw36ElXQQUz6hClTnDoHk+UBFzoNoFW4=
Subject key identifier: 6D:3C:B9:A8:FB:C8:B0:EF:24:9E:C9:FC:2B:23:99:39:6A:CC:18:C9
Certificate issuer: /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Certificate serial: 6B
Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/33B40FB8826D11F095A2E27BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:18:43 +0000
ROA not before: Thu 05 Feb 2026 17:26:18 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 14618
IP address blocks: 112.121.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Validity
Not Before: Feb 5 17:26:18 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a43cb2-6b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:26:b5:d3:e9:8c:35:d1:bd:2b:4e:37:1c:
2a:44:1b:0e:9a:7c:2e:95:e4:fe:ef:9a:ab:6b:fa:
be:03:28:9c:2d:63:c2:e7:a0:06:64:25:02:69:29:
59:54:fa:67:71:3f:e4:83:fb:d3:0b:42:ee:e7:b3:
5e:fe:fb:e6:3a:24:ac:6d:f7:bd:03:50:19:46:80:
c6:38:aa:8d:b0:93:96:42:66:7c:43:f8:14:fd:a6:
0b:f2:22:27:29:c1:ce:26:03:92:fa:31:cd:65:57:
4d:93:3a:91:73:99:34:6e:83:7c:86:d8:85:c3:58:
d0:87:c4:53:36:75:3e:13:ea:4f:b2:9a:f0:3d:5f:
8d:53:a3:3b:df:28:8b:35:f2:7d:17:53:6f:ec:2d:
fa:e2:82:07:80:b4:34:0a:32:98:d9:99:0d:af:03:
43:e5:01:02:28:39:0c:db:a9:93:a2:88:f8:ce:18:
6b:38:91:16:a1:e5:1b:3c:8a:59:8a:b5:63:34:23:
27:30:19:fd:1b:2d:f5:2d:13:ca:fd:c9:54:da:c8:
c6:f2:13:b6:d1:30:9f:3c:56:49:9d:93:fe:f9:b4:
ef:37:e4:45:4c:5f:c1:bf:1f:e5:ea:81:0c:9b:a2:
ec:3b:84:b4:b4:bf:ca:0f:2e:a0:79:86:d1:25:92:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:B9:A8:FB:C8:B0:EF:24:9E:C9:FC:2B:23:99:39:6A:CC:18:C9
X509v3 Authority Key Identifier:
keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/33B40FB8826D11F095A2E27BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
112.121.47.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0a:8e:ac:22:3f:18:bf:75:65:b3:cd:4e:63:87:96:11:2b:
09:09:0c:27:5e:c5:79:8c:a1:13:e8:33:66:fa:c9:8c:dd:36:
07:c0:d3:72:dc:6d:fd:b5:e1:64:74:48:2a:f0:c3:25:fa:e7:
2e:31:a0:24:d1:ae:10:d4:af:ed:fb:4c:5b:ed:d8:dd:25:0e:
0e:37:bc:ef:05:ce:58:df:1e:f3:9d:92:3b:91:0c:23:6b:04:
65:39:e8:e6:27:db:1a:96:c7:a4:42:d7:64:d5:4f:18:3f:bf:
af:cb:5a:5d:af:61:ab:73:d5:cf:36:1d:e5:5a:d1:f4:71:57:
14:d8:dc:7c:60:16:9c:25:75:6b:26:b8:33:3c:ac:67:4d:44:
69:d1:86:f6:1d:b0:2d:d4:ee:e0:ae:a6:04:83:57:1d:89:17:
14:88:35:c3:9a:f4:80:61:41:ea:1e:0d:07:5e:42:6f:f9:8d:
5b:3a:03:3d:e1:36:3e:85:df:56:1b:a7:41:54:b8:14:5c:fa:
45:35:e8:95:84:6d:0b:c0:7c:f4:3f:37:5e:86:64:17:13:e8:
99:4a:9e:79:fb:91:18:46:9b:48:28:de:cf:55:80:da:45:5f:
b5:bb:ed:91:aa:e0:dd:a7:48:4f:44:81:75:fc:7f:7f:cb:4c:
4e:9a:88:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:16 2026 by rpki-client