
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/263A07A23B8711F0B11FF70CC4F9AE02.roa
File: 263A07A23B8711F0B11FF70CC4F9AE02.roa (raw, json)
Hash identifier: UroovIqvZiBlull3uhH4pOYy6TTWzVftnSLo9okTpZQ=
Subject key identifier: 2C:A7:D1:0A:FB:22:09:2C:90:D8:4A:5D:CB:C8:08:00:DF:BB:9B:E3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BC43
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/263A07A23B8711F0B11FF70CC4F9AE02.roa
Signing time: Wed 28 May 2025 05:46:50 +0000
ROA not before: Wed 28 May 2025 05:46:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140156
IP address blocks: 2001:df7:7c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48195 (0xbc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 28 05:46:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6836a349-28c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4b:3d:56:c0:46:f8:b4:d0:30:08:f9:b9:b8:
91:88:25:f3:ef:08:06:14:95:5e:7c:7a:93:59:c0:
1b:f5:c6:c3:bf:7e:fb:24:b6:3f:d5:17:e0:32:33:
8f:3a:ea:0f:54:3e:ac:f4:b3:6d:93:b7:15:e4:c8:
70:4f:c9:d1:6a:12:5d:21:51:d1:b5:54:b7:b2:b6:
25:43:23:e3:2c:1c:07:80:0e:c9:42:6b:be:21:f9:
cb:11:80:1a:76:a1:1f:d7:e6:7d:c8:a1:93:27:7c:
2c:34:17:47:85:59:fb:26:a2:26:60:7e:2c:89:70:
f5:8c:31:19:dd:66:a4:66:3a:4e:38:3c:dd:77:37:
96:93:b2:55:f6:e4:ad:03:a3:02:0c:47:5b:b4:9f:
3b:dc:38:08:fe:1c:90:48:6a:6f:01:f2:5c:b4:f6:
67:3e:29:07:e3:87:ba:96:ca:b2:35:27:6f:6c:f2:
60:f5:ec:fd:cb:cd:d0:50:78:15:8a:a0:c8:fe:34:
d4:f4:78:5b:1d:5b:85:ec:3c:9b:56:81:bb:2a:28:
9a:03:8f:06:33:a8:e2:7f:be:76:90:65:de:4f:d1:
6c:8c:8d:9b:5d:79:c5:23:b1:4e:d1:0c:92:74:f6:
6a:63:b2:b7:7f:e2:69:36:e9:d6:ba:2e:a5:dc:01:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:D1:0A:FB:22:09:2C:90:D8:4A:5D:CB:C8:08:00:DF:BB:9B:E3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/263A07A23B8711F0B11FF70CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:7c80::/48
Signature Algorithm: sha256WithRSAEncryption
21:de:b7:db:9d:55:66:be:3e:e5:ef:39:28:84:1b:f4:6e:48:
f5:40:7f:4c:73:34:77:68:e6:66:cf:73:6e:66:a5:30:ad:05:
29:c3:09:7f:d3:b5:f3:14:f2:0e:88:d9:c7:14:50:94:e8:d0:
88:5b:04:64:6c:d6:39:4f:7c:30:b6:f5:98:5a:e2:1a:5c:e0:
15:81:97:26:c1:d0:75:88:3b:a2:dd:7d:b4:97:2a:3c:f0:dd:
a9:69:46:77:e1:0d:c7:0d:b6:e6:e4:2b:9f:3e:92:af:91:c1:
96:4d:50:fd:f4:58:7f:b9:c6:dd:92:4b:9a:02:0f:0e:30:c6:
43:5a:19:df:b8:16:42:d4:b7:0e:09:c4:67:11:a3:92:88:3a:
11:25:a5:73:2b:5e:3e:f2:85:6f:ed:7d:b5:8b:fc:a9:6c:f0:
c8:70:f6:9a:50:0b:0e:01:6f:1b:9e:9f:68:31:3b:e5:80:cc:
0e:37:46:14:ff:91:48:42:ab:8b:9c:ed:bc:96:86:b9:1e:80:
18:83:ba:27:34:91:c6:cf:b2:03:91:86:13:9c:2d:6c:21:46:
13:ac:4b:00:2f:d2:73:52:5f:a1:22:66:32:62:c0:4d:1f:95:
0e:ce:54:51:c3:4d:af:e5:93:e2:8c:2a:b8:66:25:53:b2:47:
dd:ac:0f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:21 2025 by rpki-client