
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/722C58FACE9311F0A2C11D25C4F9AE02.roa
File: 722C58FACE9311F0A2C11D25C4F9AE02.roa (raw, json)
Hash identifier: ERXxcYaD/BipGW6AIZDMmzRHcboCoePXi+aLABZ/mKA=
Subject key identifier: D0:FD:DD:AB:4D:B2:5E:D0:32:C4:92:CD:FA:A1:02:89:AF:03:03:BB
Certificate issuer: /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial: 34
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/722C58FACE9311F0A2C11D25C4F9AE02.roa
Signing time: Sun 01 Mar 2026 05:59:07 +0000
ROA not before: Mon 01 Dec 2025 08:55:50 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 153432
IP address blocks: 144.79.38.0/24 maxlen: 24
144.79.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Validity
Not Before: Dec 1 08:55:50 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a3d5ab-c9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:51:3e:c1:29:d7:5d:5b:32:15:0e:6f:f0:
1b:f8:3f:ab:8c:6d:51:3d:19:b1:a0:c4:56:06:5c:
10:3e:71:75:cb:45:df:51:d4:b1:e7:3c:4f:29:c6:
b9:58:aa:11:bf:d9:ac:77:d6:e6:50:44:9f:dc:e6:
0e:fa:fe:4d:bd:85:20:15:2d:4f:5e:41:2d:d8:7a:
5b:4c:86:06:be:e3:58:07:c9:32:8d:a3:77:97:5a:
96:c8:14:28:49:2b:4d:7e:ce:72:69:f3:3b:2f:b4:
3b:d6:56:ec:1e:ef:e3:f9:21:5d:07:ed:7f:02:67:
84:b6:5a:81:cc:e1:44:6e:78:48:2e:cb:9d:a0:a5:
7c:ca:11:fa:7d:a3:20:b2:d9:14:e5:5f:61:50:5e:
39:66:d6:5f:db:af:3a:e3:fe:43:28:fd:1e:61:b7:
9f:b4:2a:62:2b:f2:50:38:b8:9c:53:f0:08:cf:ac:
15:6c:a9:69:39:6a:53:29:5a:9b:5c:e9:2a:73:33:
45:46:57:10:e4:d1:5d:c3:89:97:b5:99:ee:45:ee:
6e:55:d8:6d:8f:0c:45:2b:4a:da:31:d2:39:82:b0:
10:eb:33:54:2f:0b:01:c2:c5:7c:42:e1:a0:78:9d:
7d:a4:c6:e1:84:01:a6:e3:a2:57:21:09:1d:40:87:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FD:DD:AB:4D:B2:5E:D0:32:C4:92:CD:FA:A1:02:89:AF:03:03:BB
X509v3 Authority Key Identifier:
keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/722C58FACE9311F0A2C11D25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.38.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:c8:d6:5d:69:35:64:50:e8:3a:32:d8:ca:74:db:80:41:dd:
7f:2d:f8:5d:d7:c9:8c:a1:f1:52:b2:9f:22:62:d6:86:e0:d8:
08:83:bc:c2:e1:f3:7a:7d:4a:ed:af:37:4c:a2:90:58:41:cd:
8e:35:e1:59:18:da:64:30:86:c8:6c:1e:15:d0:12:0a:30:84:
60:49:7b:e5:4b:e1:17:4a:8e:e8:4a:e8:32:06:f7:15:30:f0:
6f:81:cf:7b:81:e9:c9:e8:cd:95:fd:68:d7:30:97:8e:6c:ee:
fc:e2:68:f6:6b:18:e7:a8:80:a8:42:25:dc:12:60:45:24:19:
70:aa:14:be:df:c6:1b:48:08:11:81:cc:c7:d6:be:f9:00:b5:
06:26:af:d5:96:3a:fa:c1:fa:46:f8:2d:44:85:90:0d:b7:97:
59:c0:cf:e2:c0:27:24:3f:21:12:ef:65:61:28:d5:d6:37:82:
46:86:37:ee:cd:7d:76:17:56:c9:67:73:ae:27:ff:81:d1:17:
b7:0a:95:49:5c:8c:20:4a:c5:03:f8:e7:f2:78:2c:f9:59:05:
b1:93:8d:bc:85:73:d9:61:6d:63:42:32:27:ff:0f:fc:a0:30:
e0:30:a6:32:76:04:9b:57:ea:be:36:b8:59:77:85:37:d4:8a:
e3:33:f1:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:16 2026 by rpki-client