
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/A24902C8623B11F0BEB49510C4F9AE02.roa
File: A24902C8623B11F0BEB49510C4F9AE02.roa (raw, json)
Hash identifier: 9hWkzIMPHr3u4aBMV/4p5NjvOfvSqGpfsyIm9FgrEFk=
Subject key identifier: 53:E8:91:12:77:99:25:8B:63:8F:28:A1:3E:4E:34:79:C5:64:A3:D8
Certificate issuer: /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Certificate serial: AB
Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/A24902C8623B11F0BEB49510C4F9AE02.roa
Signing time: Fri 05 Jun 2026 07:41:02 +0000
ROA not before: Fri 05 Jun 2026 07:41:02 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 45773
IP address blocks: 2001:df5:d2c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Validity
Not Before: Jun 5 07:41:02 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a227d8e-09ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:5b:1e:c2:96:4d:ee:e0:41:57:f9:77:7f:
91:3d:7b:41:94:5f:3b:42:94:df:e3:2c:9e:6b:ee:
70:6b:aa:d8:fa:51:44:b9:5a:bb:81:b5:88:4c:41:
ba:0a:74:f4:52:e2:ed:a5:30:cb:ff:42:87:fa:fe:
e2:32:ab:5f:0d:05:ba:d2:af:70:ab:92:86:5e:2e:
0a:22:33:2e:f9:c3:b8:45:0b:8a:1e:a8:a8:73:8c:
14:5e:f0:2a:cf:49:61:9a:3d:ec:b1:01:cb:a8:1f:
5d:b6:b0:2a:4a:a6:8e:76:0b:96:79:fc:50:3c:70:
16:4e:a6:86:2a:2e:7f:70:39:c4:07:b7:91:db:f9:
62:29:39:97:71:f7:17:21:b9:36:11:7f:3e:ae:13:
3c:7d:d3:b3:15:19:82:ab:6a:19:2b:c2:18:80:87:
2a:e4:72:b8:22:c0:10:90:fa:bc:90:9b:1d:08:51:
ba:7b:3f:c3:0a:a7:e1:11:55:82:c7:f0:62:ef:22:
14:4b:a2:be:07:4d:ae:64:27:25:2d:de:56:cf:a4:
b2:e7:21:2d:10:18:29:96:27:6b:99:08:63:03:e4:
c1:b8:79:8b:93:58:4a:1b:db:32:e8:74:f5:01:f8:
9b:e8:f4:b7:d9:89:0e:ad:e9:9b:ff:6b:7e:29:2f:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E8:91:12:77:99:25:8B:63:8F:28:A1:3E:4E:34:79:C5:64:A3:D8
X509v3 Authority Key Identifier:
keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/A24902C8623B11F0BEB49510C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:d2c0::/48
Signature Algorithm: sha256WithRSAEncryption
6f:a8:55:92:7e:8b:eb:ac:2a:66:ba:61:ea:bb:00:5e:90:54:
5e:82:24:6c:52:ad:ed:76:40:a5:f4:4f:2c:c0:7a:20:a0:05:
2d:f9:54:d2:0f:e4:67:7a:d2:1f:f4:1e:c0:62:4e:2b:1a:32:
4e:0f:d2:d3:b2:95:c7:0a:37:78:63:66:a8:ae:75:e4:db:08:
a6:07:29:75:19:db:79:bf:48:19:d7:48:8a:b9:94:bf:db:fc:
84:dd:9a:fd:2e:bf:ed:ba:08:b4:b1:b8:5a:8d:05:bf:4d:47:
f3:98:b4:ad:d6:bc:e5:f1:20:02:5a:ae:23:c0:c7:0d:4f:18:
ba:01:7d:db:eb:9c:c4:9a:3e:01:0f:46:ce:db:0b:e8:43:6c:
58:31:14:49:6c:94:56:9e:5a:78:ef:1b:94:0c:92:82:fe:be:
38:35:d3:4a:b9:1c:12:0f:a5:10:84:5d:a1:d1:8e:7b:f9:c0:
64:c0:5a:65:c7:87:6b:f7:8c:1e:b1:a7:1d:42:99:87:6c:42:
46:99:81:14:50:92:bb:5b:2b:9f:7e:59:f6:48:90:bd:d3:80:
3e:b7:2a:05:9c:cb:32:2d:7e:f8:a0:3a:2d:9f:96:86:38:b0:
77:3b:7e:68:e1:b2:87:cf:ca:21:a1:0f:48:26:89:e5:d8:c1:
7b:d3:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:20 2026 by rpki-client