
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF20DEA0767511F0A9F58113C4F9AE02.roa
File: FF20DEA0767511F0A9F58113C4F9AE02.roa (raw, json)
Hash identifier: Rat3wSS6fWdqpmKOZKn72lbVnemClSWAZJe0NC/ZzKg=
Subject key identifier: 54:C2:B6:F7:11:D4:A8:95:AA:C1:F4:55:D0:6B:CA:16:F6:72:B6:8A
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CB1
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF20DEA0767511F0A9F58113C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:49:19 +0000
ROA not before: Mon 11 Aug 2025 05:42:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154108
IP address blocks: 192.172.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11441 (0x2cb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Aug 11 05:42:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c26e-9389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:35:be:cb:7a:2e:e8:26:ad:0d:a9:a3:b3:
37:79:3f:9c:ca:dc:71:73:6b:e9:d0:8b:d1:71:6a:
dc:94:04:f4:bb:e1:6e:41:f7:59:f5:b5:0d:06:fc:
43:ac:67:55:ca:c7:8c:91:a6:30:15:34:d9:63:41:
2e:cd:8f:6d:32:a6:57:3e:76:a2:94:a0:32:c4:ad:
0a:b1:da:b4:36:7c:ec:c5:7f:82:da:37:02:04:71:
ce:c5:c0:0c:07:fe:68:ad:37:5c:a8:55:29:07:a5:
1d:0f:ca:57:09:fe:21:4b:f5:d7:1f:bc:04:e6:61:
2f:e7:50:ab:7d:31:21:01:7f:22:2e:16:9f:90:67:
02:63:fb:e6:3c:00:18:fe:bd:10:16:33:d8:41:62:
c7:83:6d:43:68:ca:15:03:91:7d:99:bb:58:e5:c5:
17:7a:c8:f9:e2:a7:d1:8e:aa:07:77:a0:90:58:4f:
39:62:fd:4b:66:50:9a:a6:e4:e6:2a:8e:94:0d:bc:
fc:2c:b9:db:82:8e:d5:89:d3:84:c4:c8:8a:8d:bf:
9f:7c:7a:0e:f7:b0:79:dd:33:90:8d:ab:48:63:10:
21:2d:27:f5:f3:77:b5:32:9e:54:eb:2a:e8:3c:ae:
57:98:82:0e:3e:ed:6b:65:79:7a:ca:97:bf:37:ed:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C2:B6:F7:11:D4:A8:95:AA:C1:F4:55:D0:6B:CA:16:F6:72:B6:8A
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF20DEA0767511F0A9F58113C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.172.245.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ba:95:56:d1:ea:99:49:59:1f:37:91:c7:e4:8c:c9:5b:a4:
4c:ff:cb:26:d1:23:49:48:b3:c0:b8:ac:c1:54:90:91:d1:1f:
ad:72:d1:5d:6f:4e:52:eb:d1:8f:60:9f:90:e8:25:6e:a4:df:
2e:2b:1b:c8:d0:40:e8:4b:06:ce:21:cd:44:06:36:cf:4b:66:
e8:44:7c:ea:24:9b:3d:0c:77:12:f0:86:05:f0:9d:f6:5e:94:
64:50:fe:63:3b:16:40:d1:af:68:6a:30:90:fa:80:d3:70:1f:
67:46:19:76:68:f9:5a:27:e4:90:03:52:68:21:d7:7b:83:b4:
4b:73:17:59:0b:4d:af:cb:79:27:0f:6a:4d:70:7e:8a:ff:d4:
a0:30:a4:9a:0f:3a:97:2b:52:fc:05:1d:c4:a0:91:00:e6:5b:
85:36:54:a3:0d:26:7e:4d:4e:07:8c:cc:da:3d:38:38:35:e0:
ad:15:eb:a3:35:f5:0d:b9:47:5b:4a:fb:5d:53:59:77:6c:82:
bf:77:97:7f:70:85:dd:72:11:3c:94:20:d7:c1:62:5e:0a:74:
c7:38:8e:f5:71:f3:66:26:78:d6:71:2e:2b:24:dc:a1:76:b6:
22:1f:de:e8:f1:50:84:a0:24:d5:23:3a:e3:68:98:ee:81:cf:
3c:a7:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:32 2026 by rpki-client