
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/B1B36E8A691911F08409AD61C4F9AE02.roa
File: B1B36E8A691911F08409AD61C4F9AE02.roa (raw, json)
Hash identifier: 66/XgNkPntn6ZCLUdIlShdtvQNxqQKtMxCnyBuees9Q=
Subject key identifier: 5F:36:72:A5:27:82:0D:41:C1:B8:F0:26:5F:95:57:4D:73:C9:0B:9D
Certificate issuer: /CN=A918A2D9/serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B
Certificate serial: D8
Authority key identifier: 7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/B1B36E8A691911F08409AD61C4F9AE02.roa
Signing time: Fri 11 Sep 2026 06:57:28 +0000
ROA not before: Fri 11 Sep 2026 06:57:28 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154083
IP address blocks: 2402:1c60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl
rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A2D9, serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B
Validity
Not Before: Sep 11 06:57:28 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa3a658-a12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:8f:79:e8:c0:d5:e5:f5:55:d0:e5:98:5a:
b7:d2:e8:50:8a:a5:29:ba:5c:77:d0:43:f8:61:62:
ce:d7:19:ac:72:df:96:ca:99:df:ae:5b:9f:92:a5:
6b:0b:0f:17:24:9a:9e:9c:01:80:3f:22:f9:c1:55:
b4:d7:4e:18:d0:88:50:0f:32:e8:27:73:7b:5c:e0:
7f:36:17:d1:8a:49:c0:1e:d7:a3:01:40:7d:c7:90:
7e:12:0f:03:23:7b:08:45:9e:c3:90:71:8c:40:bd:
39:df:eb:9a:6c:e0:49:e9:82:81:dd:8b:4f:99:c5:
3d:69:bc:fa:92:02:39:d7:9a:fe:48:44:a8:d3:e8:
3a:90:da:b4:33:ef:dc:c7:a6:e3:d7:0a:5e:a1:1a:
e8:5d:45:37:39:03:0b:f9:ef:40:61:d2:33:e3:7d:
82:b0:d6:3f:3a:c8:68:fa:e6:b6:d0:02:77:40:1b:
4b:0b:cb:97:c7:13:2a:92:5d:f8:c0:b2:18:83:d2:
65:4a:9b:92:bf:91:5d:a8:e5:23:a8:2e:ed:78:f5:
01:6c:dc:1f:94:1e:32:c9:49:ce:f3:f4:33:91:71:
3b:51:d6:b1:ea:14:2f:d1:57:0b:4a:c4:9b:d8:39:
ac:03:66:d6:d1:9e:8f:b7:71:a1:25:8b:0c:56:39:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:36:72:A5:27:82:0D:41:C1:B8:F0:26:5F:95:57:4D:73:C9:0B:9D
X509v3 Authority Key Identifier:
keyid:7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/B1B36E8A691911F08409AD61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1c60::/32
Signature Algorithm: sha256WithRSAEncryption
61:85:7a:80:86:02:2f:f3:ff:2c:d7:e8:36:22:d0:f2:0c:2e:
00:6f:1d:15:69:c8:3a:1a:e9:ca:a1:a9:81:dc:21:21:a5:8e:
11:ea:a5:b2:55:79:4a:9b:1c:ea:12:90:30:bd:4c:4e:35:db:
5b:af:31:45:5f:40:5b:f1:04:4a:dc:59:39:d6:ed:22:de:e1:
e8:9f:59:06:4c:66:9f:d5:c7:29:7f:b5:02:62:f0:72:04:69:
5f:e3:62:28:44:21:0b:d1:39:4c:46:04:4a:d0:9e:2c:72:1f:
ca:60:f5:0e:5d:94:4f:af:43:a2:92:db:c9:9a:5d:3b:d4:b4:
47:d6:d3:60:a7:82:db:8f:9d:33:c8:b0:e9:c1:21:22:3a:a7:
2b:c7:93:f7:31:4f:02:b6:29:ad:48:80:5f:3e:11:bf:cc:0e:
41:9b:78:a7:a9:2d:c5:87:c1:9c:e3:ba:18:af:3c:5d:77:98:
fe:a1:c6:84:c8:c0:98:c3:8e:10:cc:a4:1a:02:4c:1d:c8:55:
b9:7c:f3:c7:7a:db:9a:8b:38:38:06:82:21:48:72:86:31:8c:
9e:7d:6a:63:d5:7f:d9:78:13:36:a4:9c:19:82:47:ea:76:ee:
13:1a:18:a7:b8:58:51:f3:c8:ad:9b:b8:f8:fb:a7:e5:44:23:
88:b6:f0:36
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEyRDkxMTAvBgNVBAUTKDdDMkNBMTc4MzA5M0E5QjlBRjhFRTQ1N0RBMDk0ODgy
NDIxNTI1MEIwHhcNMjYwOTExMDY1NzI4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEzYTY1OC1hMTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxHaPeejA1eX1VdDlmFq30uhQiqUpulx30EP4YWLO1xmsct+WypnfrlufkqVr
Cw8XJJqenAGAPyL5wVW0104Y0IhQDzLoJ3N7XOB/NhfRiknAHtejAUB9x5B+Eg8D
I3sIRZ7DkHGMQL053+uabOBJ6YKB3YtPmcU9abz6kgI515r+SESo0+g6kNq0M+/c
x6bj1wpeoRroXUU3OQML+e9AYdIz432CsNY/Osho+ua20AJ3QBtLC8uXxxMqkl34
wLIYg9JlSpuSv5FdqOUjqC7tePUBbNwflB4yyUnO8/QzkXE7Udax6hQv0VcLSsSb
2DmsA2bW0Z6Pt3GhJYsMVjkjDwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFF82cqUn
gg1BwbjwJl+VV01zyQudMB8GA1UdIwQYMBaAFHwsoXgwk6m5r47kV9oJSIJCFSUL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTJEOS9GMjk2NjY4ODY5
MTgxMUYwQTEwRjhCNUZDNEY5QUUwMi9mQ3loZURDVHFibXZqdVJYMmdsSWdrSVZK
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZDeWhlRENUcWJtdmp1UlgyZ2xJZ2tJVkpRcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEEyRDkvRjI5NjY2ODg2OTE4MTFGMEExMEY4QjVGQzRGOUFFMDIvQjFCMzZFOEE2
OTE5MTFGMDg0MDlBRDYxQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAIcYDANBgkqhkiG9w0BAQsFAAOCAQEAYYV6gIYCL/P/LNfoNiLQ
8gwuAG8dFWnIOhrpyqGpgdwhIaWOEeqlslV5Spsc6hKQML1MTjXbW68xRV9AW/EE
StxZOdbtIt7h6J9ZBkxmn9XHKX+1AmLwcgRpX+NiKEQhC9E5TEYEStCeLHIfymD1
Dl2UT69DopLbyZpdO9S0R9bTYKeC24+dM8iw6cEhIjqnK8eT9zFPArYprUiAXz4R
v8wOQZt4p6ktxYfBnOO6GK88XXeY/qHGhMjAmMOOEMykGgJMHchVuXzzx3rbmos4
OAaCIUhyhjGMnn1qY9V/2XgTNqScGYJH6nbuExoYp7hYUfPIrZu4+Pun5UQjiLbw
Ng==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:06:23 2026 by rpki-client