
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/E6E564502DD811EF8471C475C4F9AE02.roa
File: E6E564502DD811EF8471C475C4F9AE02.roa (raw, json)
Hash identifier: 6ep4pR81sAKHbDHGpSO8ksCVPqnu6G7luKMfjhGcOCE=
Subject key identifier: 10:AF:92:E9:5C:E4:E9:E1:E4:D4:2C:9B:D3:48:29:46:99:4B:3D:DB
Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Certificate serial: 0355
Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/E6E564502DD811EF8471C475C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:04:20 +0000
ROA not before: Thu 27 Mar 2025 02:08:32 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9009
IP address blocks: 36.255.207.0/24 maxlen: 24
2404:5d80:8600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BCEE, serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Validity
Not Before: Mar 27 02:08:32 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a45574-2002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:2f:20:1b:2c:c5:f4:36:63:89:8b:ef:92:
77:ae:48:91:d7:ec:7f:0e:10:80:e8:6f:b8:08:4d:
eb:3e:1f:6d:94:4d:29:06:ef:a2:63:f6:f1:e3:ab:
75:d3:15:83:76:a6:78:f5:a3:c4:c2:04:ff:f0:30:
59:a8:d7:4d:bf:65:0a:9b:6c:d8:23:ed:f8:91:aa:
f8:ec:51:30:a3:c2:d3:ff:43:3c:b9:bd:6b:23:d6:
b4:35:e7:fd:d2:56:a5:72:4e:3a:79:44:fd:3a:0e:
5f:4b:ae:c2:94:0c:3f:ff:57:83:a1:e3:35:4b:77:
63:76:48:e6:e1:86:19:fe:1f:02:76:86:67:81:79:
44:3e:70:90:72:65:ac:06:8d:49:39:28:83:20:1c:
dd:e9:3b:71:c6:16:72:d7:13:96:37:2c:70:d0:7c:
89:fa:26:02:95:d5:e1:99:24:89:64:b6:9f:e7:f6:
8f:15:c5:59:66:ad:30:47:0c:71:4e:8d:56:8c:2d:
42:be:5b:6f:e6:74:26:7d:19:80:d0:a5:aa:9e:22:
10:3c:6b:97:f1:94:ae:f8:dc:d0:42:7e:31:bc:fd:
9d:f7:9b:10:05:49:87:e3:6b:f6:a1:d0:4e:38:d4:
5c:09:4c:a4:5a:9f:63:2b:ef:b0:4f:66:1a:9d:bd:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AF:92:E9:5C:E4:E9:E1:E4:D4:2C:9B:D3:48:29:46:99:4B:3D:DB
X509v3 Authority Key Identifier:
keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/E6E564502DD811EF8471C475C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.207.0/24
IPv6:
2404:5d80:8600::/40
Signature Algorithm: sha256WithRSAEncryption
bc:5f:8d:72:e4:52:91:a5:31:71:dc:c2:a4:9a:c5:05:f6:b6:
7c:f1:e2:55:20:02:73:5f:08:5f:37:19:4b:5b:24:81:dd:10:
b4:94:f2:b8:44:72:94:43:cb:01:41:d6:e1:87:a9:c6:5c:f9:
7a:10:06:4d:c0:c0:89:3b:67:67:e9:b2:5b:77:86:89:59:fb:
c0:98:b3:2f:67:05:15:8a:5a:cb:6c:7d:58:5b:96:be:d6:82:
f0:fa:37:f8:a3:dc:cf:1e:69:51:c0:07:83:23:f8:20:c7:4b:
a5:e8:49:84:b7:70:25:92:c8:a4:04:ec:af:e5:8a:54:83:67:
18:c4:44:97:89:c4:1e:14:fb:6e:fb:7a:46:15:a5:be:d3:ea:
42:ae:c0:4d:69:f9:b4:fd:10:c3:d8:17:bb:48:2d:c6:12:0b:
4f:9b:2a:a9:47:9e:f0:82:98:72:d2:16:94:60:78:09:7d:f5:
ce:65:4d:03:0f:cc:cc:9f:2f:7e:cd:d4:a1:41:62:4f:4b:79:
de:0a:4b:28:61:d6:2b:20:0e:d6:35:4b:eb:56:c7:1d:fc:3b:
12:db:0e:f0:fe:e2:a7:3d:f9:d0:2c:01:0a:d8:b0:4c:b0:88:
06:a3:53:a5:04:1e:0f:b7:4b:88:60:f3:1b:1a:40:26:8b:55:
6c:bc:d5:29
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx
NDkzMUFCQTYwHhcNMjUwMzI3MDIwODMyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTU3NC0yMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAywAvIBssxfQ2Y4mL75J3rkiR1+x/DhCA6G+4CE3rPh9tlE0pBu+iY/bx46t1
0xWDdqZ49aPEwgT/8DBZqNdNv2UKm2zYI+34kar47FEwo8LT/0M8ub1rI9a0Nef9
0lalck46eUT9Og5fS67ClAw//1eDoeM1S3djdkjm4YYZ/h8CdoZngXlEPnCQcmWs
Bo1JOSiDIBzd6TtxxhZy1xOWNyxw0HyJ+iYCldXhmSSJZLaf5/aPFcVZZq0wRwxx
To1WjC1Cvltv5nQmfRmA0KWqniIQPGuX8ZSu+NzQQn4xvP2d95sQBUmH42v2odBO
ONRcCUykWp9jK++wT2Yanb3iJwIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFBCvkulc
5Onh5NQsm9NIKUaZSz3bMB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz
RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEJDRUUvNjhDMzU2MzAxM0ZGMTFFREEzRjMzOTQxQzRGOUFFMDIvRTZFNTY0NTAy
REQ4MTFFRjg0NzFDNDc1QzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM
BAIAATAGAwQAJP/PMA4EAgACMAgDBgAkBF2AhjANBgkqhkiG9w0BAQsFAAOCAQEA
vF+NcuRSkaUxcdzCpJrFBfa2fPHiVSACc18IXzcZS1skgd0QtJTyuERylEPLAUHW
4Yepxlz5ehAGTcDAiTtnZ+myW3eGiVn7wJizL2cFFYpay2x9WFuWvtaC8Po3+KPc
zx5pUcAHgyP4IMdLpehJhLdwJZLIpATsr+WKVINnGMREl4nEHhT7bvt6RhWlvtPq
Qq7ATWn5tP0Qw9gXu0gtxhILT5sqqUee8IKYctIWlGB4CX31zmVNAw/MzJ8vfs3U
oUFiT0t53gpLKGHWKyAO1jVL61bHHfw7EtsO8P7ipz350CwBCtiwTLCIBqNTpQQe
D7dLiGDzGxpAJotVbLzVKQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:14 2026 by rpki-client