
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/68149F2AE56411F09A56EE753B6F56BC.roa
File: 68149F2AE56411F09A56EE753B6F56BC.roa (raw, json)
Hash identifier: wkSF99dmpwj8rwN3gG6rZFZnMMYoVUniDFlIzVKM6SI=
Subject key identifier: 83:A0:AC:D2:3D:28:18:FB:15:C1:4E:64:CD:92:FB:A7:05:70:D6:73
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CED
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/68149F2AE56411F09A56EE753B6F56BC.roa
Signing time: Sun 01 Mar 2026 22:50:41 +0000
ROA not before: Tue 30 Dec 2025 09:46:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154465
IP address blocks: 144.79.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11501 (0x2ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Dec 30 09:46:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2c1-0d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:97:39:e8:04:7e:dc:c2:a2:c5:55:df:fc:43:
d1:ac:3f:e5:e2:c1:df:17:42:75:0c:f4:2e:bc:1c:
72:45:d0:f5:d5:bc:ea:cc:47:99:d9:ab:51:aa:93:
56:55:2d:08:c3:ae:c3:9f:02:94:3e:2b:7b:ba:e6:
d4:d7:60:be:1f:3c:0a:fc:fa:96:13:c5:01:67:1f:
dd:13:34:db:f1:b8:1e:b9:85:90:8d:53:a0:8a:d8:
79:4d:5a:7d:be:b7:da:a8:20:72:0e:94:41:cd:6c:
22:17:b7:79:22:1b:5c:b9:0f:84:ad:a6:6d:27:26:
90:11:54:13:2b:9c:96:2b:e1:d6:55:5d:4c:40:43:
0b:74:60:a7:80:5f:91:31:19:1e:66:af:29:4c:c7:
52:68:01:b7:fc:4f:97:3f:6b:22:c3:a8:14:72:95:
d5:9d:43:c1:96:73:9c:7c:62:51:af:a3:e7:12:fc:
9e:8f:c3:60:b4:2a:f2:9e:5c:af:50:fc:bd:0c:9b:
df:b1:2e:3b:a2:5a:79:ae:c9:4f:92:9b:6e:34:96:
ab:f4:2b:ba:62:03:d7:84:c0:b2:95:4c:d9:ce:90:
b7:8c:15:a0:c2:80:71:02:38:fd:97:e9:29:8c:35:
48:94:d0:d5:e7:76:ed:69:df:54:e9:42:07:48:07:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A0:AC:D2:3D:28:18:FB:15:C1:4E:64:CD:92:FB:A7:05:70:D6:73
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/68149F2AE56411F09A56EE753B6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.196.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:c0:de:fb:b5:76:3e:38:4d:6a:4b:13:58:88:8f:ff:47:e1:
1f:9c:52:66:e7:56:4e:94:2d:77:a7:68:2c:c8:55:8f:33:c5:
a6:9b:a0:8f:86:1c:dd:4a:aa:6a:18:9c:fc:55:09:75:31:0f:
93:4d:f0:8c:dc:11:be:d3:db:82:5f:01:5f:27:95:55:1c:ec:
78:f0:e3:86:40:ca:8b:4c:80:35:82:ad:7e:9b:cb:c0:02:be:
9e:5c:ee:3e:36:26:26:cd:9a:d4:d4:9d:e8:1b:55:87:f2:0f:
5a:f8:b0:36:08:27:25:b2:b4:21:16:62:6b:fa:87:20:6c:b2:
4f:54:b2:4b:64:b1:9f:e2:9e:eb:52:62:58:c1:88:12:82:18:
f1:a9:73:89:af:d9:1a:2f:12:81:a0:ed:44:fa:96:4d:25:e6:
7d:16:84:44:cf:04:5e:4a:37:a9:f4:7c:ae:80:72:04:db:48:
ac:1e:ea:aa:50:34:d6:31:42:cf:03:24:c2:07:76:e3:ca:fc:
4b:ef:e9:a5:3d:0d:e4:ce:f4:a2:6e:22:ba:27:ff:86:01:eb:
5f:2f:65:40:25:07:ad:94:a2:34:4a:5d:5b:fa:52:1b:eb:6f:
f5:61:a7:59:6e:88:e2:87:fb:16:e9:5a:26:42:18:df:4e:dd:
cc:99:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:00:46 2026 by rpki-client