
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/EEE9D096FB5911F0B335DD54496F56BC.roa
File: EEE9D096FB5911F0B335DD54496F56BC.roa (raw, json)
Hash identifier: 6OTjANbCsH7alVj8xUPBjTt3S0ForgUt8vNg7J7WznU=
Subject key identifier: BB:F0:51:1B:E3:04:C0:A0:CD:1D:4E:68:69:45:57:5F:6C:6C:65:F1
Certificate issuer: /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial: 22
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/EEE9D096FB5911F0B335DD54496F56BC.roa
Signing time: Sun 01 Mar 2026 05:47:16 +0000
ROA not before: Tue 27 Jan 2026 08:26:53 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152605
IP address blocks: 2402:4620::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Validity
Not Before: Jan 27 08:26:53 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d2e4-b707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:4f:7a:5c:30:2c:88:fb:23:b9:c6:20:41:
f1:d2:16:b0:29:2f:cc:e9:6c:02:14:95:b0:d4:9a:
e5:b9:da:c4:2b:e0:c0:5f:ac:57:fb:61:cc:54:78:
03:6a:87:13:18:57:16:2c:9c:eb:1e:aa:04:aa:4a:
ce:ba:fd:fc:b1:53:bb:84:aa:e7:ff:9e:9c:12:c9:
9f:4e:35:f7:11:a1:88:6e:7c:db:94:f5:8f:19:14:
77:e5:7d:29:9a:fd:10:23:ef:05:e9:cd:d2:66:a2:
62:2f:3b:27:15:a3:69:09:bb:bd:01:fc:f7:c9:e8:
ca:6d:d2:8c:4e:61:78:2d:e2:2a:08:83:18:90:33:
e2:36:70:cc:4d:c9:08:42:8a:6d:da:63:38:24:df:
d0:ae:e6:73:f7:69:1e:59:f1:96:55:ea:bd:76:b2:
5d:25:eb:44:1c:0d:c0:8d:70:46:d4:0d:7a:8c:35:
a5:ea:5f:67:45:da:d4:31:66:eb:22:b5:97:8c:52:
68:41:3e:16:49:0b:cd:33:50:a8:fd:65:d2:92:f0:
e7:3c:50:00:fd:70:67:59:03:86:9b:b7:bb:ea:76:
ca:5b:49:d6:d2:e9:20:62:1d:16:e4:4d:69:7a:09:
d9:98:6c:65:42:6b:51:0b:e9:fa:3b:f9:ef:15:10:
89:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F0:51:1B:E3:04:C0:A0:CD:1D:4E:68:69:45:57:5F:6C:6C:65:F1
X509v3 Authority Key Identifier:
keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/EEE9D096FB5911F0B335DD54496F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:4620::/32
Signature Algorithm: sha256WithRSAEncryption
3a:b7:f8:aa:bc:ca:85:26:b3:33:fa:53:9a:7f:10:93:06:b3:
40:a1:1e:87:d8:47:b9:2a:b6:f3:cd:56:79:38:0e:0b:a5:a1:
f7:f1:50:60:b0:e9:51:8f:b9:1d:e9:79:fa:eb:78:a9:71:da:
e2:5c:cf:8b:46:2e:b5:0a:22:40:a7:5d:80:6f:2e:71:a1:4c:
d4:f3:15:43:19:a8:91:50:11:86:ed:75:9e:60:41:cd:43:84:
f9:93:0c:03:26:ba:25:46:75:44:d5:72:e6:88:75:d4:6e:2e:
43:5e:c1:da:d4:3c:44:e5:44:20:e4:51:6e:5b:22:71:a0:83:
04:76:67:3b:c1:7f:d4:ad:c1:cc:ce:1b:8d:1b:aa:da:d5:cf:
b7:78:cb:95:70:dd:02:6a:19:bf:af:e5:ee:21:59:fd:e8:c8:
11:d9:e1:96:36:4c:45:b6:6a:8e:f5:7c:7d:1c:88:fd:35:c1:
92:66:d0:66:6e:da:7e:6f:f5:12:c9:59:4f:8c:52:35:12:3a:
9f:d6:6e:2f:8e:ad:58:e2:47:1b:ad:6c:f8:a8:92:e7:2c:29:
6a:23:4e:67:0a:5a:38:32:1d:60:18:43:07:f5:d4:9c:7c:cf:
b3:32:53:e4:7d:fe:05:45:ea:57:17:4a:e4:f2:59:0e:4a:94:
9b:bc:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:36 2026 by rpki-client