
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/F78ED0BAEBC911F0BD3A2F28686F56BC.roa
File: F78ED0BAEBC911F0BD3A2F28686F56BC.roa (raw, json)
Hash identifier: mYlmgGrl1cpOVwk/yfFMWaMRlu5qvK9L3PPljtxzekI=
Subject key identifier: 2E:C9:88:D0:5D:03:B7:05:76:91:D9:21:71:94:BA:5D:37:AC:F8:D3
Certificate issuer: /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial: 21
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/F78ED0BAEBC911F0BD3A2F28686F56BC.roa
Signing time: Sun 01 Mar 2026 05:47:15 +0000
ROA not before: Wed 07 Jan 2026 13:08:32 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142175
IP address blocks: 2402:4620::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Validity
Not Before: Jan 7 13:08:32 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d2e3-77e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:4b:48:c0:fd:96:01:07:82:0f:4e:47:47:
a9:6a:58:d4:c5:6f:0d:be:f0:34:88:08:4b:03:6a:
cc:88:73:30:b6:90:f8:ba:1c:a0:40:97:aa:ca:0b:
68:ce:51:b3:64:78:e7:2c:60:49:20:df:d1:cc:63:
22:94:ab:a4:ea:26:cf:26:c8:1f:ef:c0:23:a3:5a:
91:8b:e4:4d:c1:f1:40:b4:cf:20:8c:59:ee:71:80:
e3:ba:ed:b0:63:bd:6c:dd:fc:81:92:0c:84:47:e0:
d3:ec:ad:da:ab:df:38:b4:9d:e7:2b:fb:fb:d6:46:
b2:ed:ed:7c:ca:59:7f:f2:58:e0:54:ce:a4:e5:46:
fa:62:d2:8b:15:33:8c:9f:cc:e0:e0:7a:b5:04:cd:
09:ab:59:5b:f3:1a:34:ac:c9:04:a7:70:d8:3e:97:
b0:44:06:f7:cb:0d:2e:2e:cd:21:0c:46:24:48:83:
c7:15:c3:02:72:25:c5:6d:2e:13:a2:23:f6:cb:23:
b7:01:81:92:28:86:3f:9b:14:7e:87:fa:34:86:0b:
42:db:97:81:e2:49:be:69:0d:e5:91:5a:cc:fb:32:
89:15:85:a4:6d:26:27:f1:fc:f0:a5:56:ab:e4:ba:
df:a8:04:21:28:c8:d0:74:47:09:70:78:27:1f:da:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C9:88:D0:5D:03:B7:05:76:91:D9:21:71:94:BA:5D:37:AC:F8:D3
X509v3 Authority Key Identifier:
keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/F78ED0BAEBC911F0BD3A2F28686F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:4620::/32
Signature Algorithm: sha256WithRSAEncryption
70:cd:2f:fb:8d:1e:14:da:48:5e:6a:3a:5e:0c:c9:37:e1:dc:
d0:20:48:da:bb:2e:3c:67:d1:b3:70:c9:34:07:c9:72:1a:75:
de:cc:10:8b:22:b4:3f:72:b3:c9:40:2e:c8:60:39:91:af:b0:
c6:b7:d6:8e:7e:b8:8c:b7:be:75:5d:65:a2:41:81:6e:51:1e:
b5:a4:c7:40:0f:5d:2d:79:a9:bd:de:53:fd:33:e5:d6:3d:ea:
8a:34:d1:ad:df:0f:af:f3:83:cc:59:d6:51:7d:f2:8a:39:ae:
74:42:08:2d:72:92:b3:01:80:4c:af:dd:1f:37:c6:9a:55:cd:
69:fe:88:9d:21:5c:6f:05:eb:7f:c6:51:6c:e5:32:3b:5f:2a:
6e:ca:83:aa:26:28:fb:c5:c0:04:90:ed:12:cd:cb:83:0d:b0:
0a:13:e5:6a:ca:fe:b1:80:1c:6d:ed:df:00:5c:cf:60:fe:ef:
01:51:93:89:e5:b7:a2:a0:09:94:f9:7b:57:65:b9:ba:39:1f:
cb:46:0d:1a:f6:2a:b7:53:ca:34:e9:2b:71:4f:7c:86:4a:1a:
0a:80:d2:b0:a7:40:ae:db:b8:03:a4:b4:59:d1:4d:2d:4e:80:
b6:c5:1f:cf:88:5c:7e:0b:ad:d3:c1:72:19:cc:14:01:4a:03:
a5:ce:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:42:33 2026 by rpki-client