
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49873D90F68711F086D8512F376F56BC.roa
File: 49873D90F68711F086D8512F376F56BC.roa (raw, json)
Hash identifier: VlWYwNH/6dn+xhMB8ZhkFopnINWoFLVirmzPNTMCNCQ=
Subject key identifier: 7E:47:36:11:09:0B:C2:07:76:3B:B2:F4:57:70:70:F7:BA:33:D8:CF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DAE8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49873D90F68711F086D8512F376F56BC.roa
Signing time: Sun 01 Mar 2026 23:06:01 +0000
ROA not before: Wed 21 Jan 2026 05:08:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135685
IP address blocks: 2402:a20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56040 (0xdae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 21 05:08:56 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c659-9e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:d2:00:21:b8:56:5e:c6:92:55:5a:9e:ae:
6b:15:b4:39:d0:61:14:df:1c:b2:b0:b5:9e:3f:75:
f3:91:aa:e5:9e:d8:35:d1:f0:6e:1a:10:2e:70:2b:
d2:83:d0:a4:e0:bc:27:d6:13:e7:ea:b3:7d:da:23:
7f:8f:83:11:8f:36:d2:94:ed:32:03:f8:d4:fc:aa:
50:28:8c:e2:a2:62:09:f9:c0:5b:60:44:1a:cd:e4:
1a:cf:46:ab:97:fa:87:3c:1e:10:11:b8:75:c6:1c:
0f:fe:02:28:bd:16:01:c1:92:f1:67:92:85:5c:67:
99:fc:a0:71:e5:db:45:03:de:bf:1d:9d:76:96:0e:
06:e7:ec:43:06:e8:44:d7:c3:d6:e1:05:da:c4:8e:
ff:23:cf:f2:3a:97:9a:b1:22:33:d4:46:49:2b:d4:
b6:b0:81:4a:72:a2:28:eb:3c:60:49:1e:8b:e2:79:
60:ca:3a:32:39:9c:09:fe:3c:fd:18:cf:aa:79:c6:
ef:f6:4c:0f:3b:ad:1e:a9:f6:94:6d:4b:a5:39:49:
7f:61:c4:a6:7f:a7:b8:8c:98:06:75:a2:20:4d:1b:
7a:96:81:9a:9a:02:e1:7b:29:09:57:9b:5a:65:a9:
50:c6:6d:eb:95:c2:30:f0:7b:48:bd:4b:08:7a:14:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:47:36:11:09:0B:C2:07:76:3B:B2:F4:57:70:70:F7:BA:33:D8:CF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49873D90F68711F086D8512F376F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:a20::/32
Signature Algorithm: sha256WithRSAEncryption
33:78:99:de:ec:a8:33:6a:02:1a:cc:53:b1:8d:17:53:ed:17:
cf:97:db:1a:59:58:41:bd:7d:11:42:c8:6b:39:94:2d:bf:32:
7e:a8:ba:66:14:98:c9:c9:9b:86:24:8f:f0:de:e3:34:cb:6e:
43:01:95:75:24:81:81:43:ed:51:10:e5:16:ec:2b:65:03:6e:
a4:53:0e:30:4a:54:c8:9d:c5:e3:91:dc:40:dc:1d:fc:49:8b:
ce:0d:fa:e7:cd:3f:81:ab:a6:90:87:87:de:f8:98:40:38:41:
21:c3:ff:5e:75:33:61:45:6f:06:a8:bb:bc:73:77:fc:ad:e9:
2e:17:4f:9d:32:6a:43:f8:c2:0e:31:09:73:7e:b0:fc:68:eb:
4e:31:54:dc:d5:76:3b:1a:bf:45:4c:db:22:c1:e6:b9:84:1a:
97:8f:93:87:68:32:34:a6:33:59:02:cb:36:aa:12:ac:4f:40:
40:f8:4e:30:f2:13:4f:54:7f:b5:b4:42:d1:a3:f8:d2:02:8f:
12:f3:00:b1:be:f1:09:03:ed:05:c4:78:76:40:a0:0f:b9:32:
f7:f5:70:3d:77:af:2e:ac:9f:2e:82:e5:3e:ff:26:93:61:bb:
c8:29:fc:78:d3:25:42:dc:91:fa:92:1d:a2:9e:c8:d2:21:0c:
ba:d2:f3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:53 2026 by rpki-client