
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/7B144F6CB57F11F1BC37C19F6711F970.roa
File: 7B144F6CB57F11F1BC37C19F6711F970.roa (raw, json)
Hash identifier: kD/+SO70UYNXN3Kh7SDbkC5M5pbtQmhEj05NDxrZJIs=
Subject key identifier: DE:76:2D:89:96:4D:D3:08:46:D8:4C:61:E4:7C:77:A7:5C:16:71:48
Certificate issuer: /CN=A918C287/serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26
Certificate serial: C1
Authority key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/7B144F6CB57F11F1BC37C19F6711F970.roa
Signing time: Mon 21 Sep 2026 05:44:16 +0000
ROA not before: Mon 21 Sep 2026 05:44:16 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 131211
IP address blocks: 2401:4600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl
rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26
Validity
Not Before: Sep 21 05:44:16 2026 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=6ab0c42f-d654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:78:ba:bf:f9:7c:e2:7b:0b:d7:76:59:f0:
31:1e:87:12:7e:eb:1a:d0:b3:bd:23:8d:89:0a:2b:
38:3b:08:5f:27:2d:db:da:e8:22:d6:7d:4f:fd:63:
9e:82:cf:d7:87:5b:f8:b4:4e:86:76:50:10:18:14:
55:fd:44:37:c1:a3:cf:d3:0b:60:b7:2e:02:ef:77:
13:d9:be:39:1c:10:c9:08:24:b1:4d:f7:b3:12:68:
14:fc:23:07:02:b5:08:eb:1d:9c:4e:d0:65:4f:00:
ed:5e:be:ad:9e:93:82:d6:95:ee:69:a6:11:63:7d:
c2:23:cf:c6:8e:27:fd:ff:b7:25:69:07:b1:d3:e9:
79:4c:46:32:3b:01:5f:b6:8a:ab:76:b7:ca:2c:79:
06:f5:fe:98:dc:58:32:df:62:2f:48:12:02:f1:39:
36:77:b8:13:ee:76:0c:2a:23:b3:0a:b8:fb:4a:2d:
a5:63:17:5f:12:fb:a5:d6:19:6a:0f:68:cf:33:58:
b0:49:7d:c3:cf:8c:b2:39:1a:0b:74:d9:65:f7:a2:
4a:8f:44:f6:7a:3c:a1:8c:4a:9d:a5:f3:fc:f9:8a:
e1:89:ee:91:4b:20:86:43:dd:09:3e:0e:ea:aa:9c:
eb:ba:3d:ff:da:00:f0:53:9c:a6:a1:63:40:e0:4f:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:76:2D:89:96:4D:D3:08:46:D8:4C:61:E4:7C:77:A7:5C:16:71:48
X509v3 Authority Key Identifier:
keyid:BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/7B144F6CB57F11F1BC37C19F6711F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:4600::/32
Signature Algorithm: sha256WithRSAEncryption
5d:38:57:fe:eb:e5:74:95:a1:33:9e:6e:f8:6e:b7:23:74:e8:
86:c7:41:ce:e4:4c:c8:7d:5f:0a:65:e3:3e:55:47:c0:ad:b2:
bd:77:5d:f8:a4:cb:c3:2b:be:f2:76:ed:58:b8:2a:74:bf:25:
c9:33:f7:72:f6:11:b9:4e:6b:79:4c:07:19:c5:91:8f:77:b9:
19:c3:01:2d:d5:c3:60:a7:c9:16:ac:13:04:1b:d5:0b:1f:6c:
37:68:d5:97:2f:69:37:48:f8:d8:05:c5:40:80:00:77:57:dc:
a5:22:fe:b8:73:22:38:46:a4:2d:7e:92:df:dd:9f:70:62:19:
e8:d8:07:dc:5c:98:7f:19:8b:a8:52:bc:c4:09:a1:85:58:1b:
fd:cd:5b:64:9f:3f:e5:a5:b3:50:79:0f:e1:96:c2:c9:94:a4:
5e:ea:62:f2:5f:df:70:96:e6:be:e7:db:07:c4:0a:df:57:6d:
d7:8d:9e:ee:53:a5:c7:fc:a6:a4:be:94:7d:80:c3:6a:a2:41:
50:b7:17:ae:32:eb:dd:0e:c1:01:dd:f8:4b:21:71:bf:99:9d:
85:6b:d2:46:e3:41:c9:e1:e8:65:7e:d6:d0:8b:cd:79:6e:d2:
b1:c5:13:2f:5b:93:d6:bd:e4:ca:0a:5a:58:d5:ba:90:64:17:
07:ff:d7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:24 2026 by rpki-client