
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62C41F5A130911F1A8ED7179163D8C67.roa
File: 62C41F5A130911F1A8ED7179163D8C67.roa (raw, json)
Hash identifier: q0j5pqtPHUHpbKmxFcAhz1YCksRAPqzBy+F/phaladU=
Subject key identifier: 94:4C:F2:FC:EC:78:BB:5E:47:D9:88:87:CF:9B:15:0D:4F:42:85:42
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DB3E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62C41F5A130911F1A8ED7179163D8C67.roa
Signing time: Sun 01 Mar 2026 23:07:28 +0000
ROA not before: Thu 26 Feb 2026 11:55:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151755
IP address blocks: 45.126.144.0/22 maxlen: 24
180.94.16.0/23 maxlen: 24
2001:df3:4540::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56126 (0xdb3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 26 11:55:54 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c6b0-87cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:e4:0c:e9:9c:df:51:45:ca:d6:5a:dd:51:
5e:be:3e:da:c2:15:53:b4:1a:aa:fe:cb:b5:c9:52:
b2:c4:bf:42:31:7b:b2:84:01:12:a8:88:ee:6d:1e:
67:c6:43:ad:a7:6e:c6:2b:c5:1d:fd:73:d5:52:d7:
9b:ee:f5:d0:5b:4f:9d:42:7f:6c:e1:ae:08:50:76:
8f:c4:bb:48:7b:d0:8d:2b:4b:90:66:a3:ba:16:53:
47:54:c4:82:d2:92:05:22:0b:54:a1:42:59:69:8e:
c2:94:f4:6c:22:6e:cb:98:e4:da:5a:f0:0a:38:94:
9c:09:3e:42:6b:f5:e0:1e:df:66:a4:74:24:9c:fb:
3c:7f:d0:70:d6:b3:58:76:1d:1b:b1:c4:71:e0:39:
8c:b5:d7:37:06:02:88:70:2e:ba:f8:34:f7:02:17:
df:d2:66:a3:fe:26:fa:e1:8e:ca:92:9a:7f:5b:a9:
c9:b3:f6:33:48:b3:ca:f4:67:76:a3:0e:0a:b8:f2:
5e:ba:cd:f3:a1:f2:af:c3:7f:22:b9:58:dc:d4:51:
ad:33:91:16:fb:48:2c:b2:24:a1:00:bb:a4:6c:05:
99:1b:56:e9:6f:a5:af:57:0d:a8:84:90:f2:8a:67:
d0:24:36:97:2d:fa:60:46:fa:93:a6:c3:02:32:d5:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4C:F2:FC:EC:78:BB:5E:47:D9:88:87:CF:9B:15:0D:4F:42:85:42
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62C41F5A130911F1A8ED7179163D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.144.0/22
180.94.16.0/23
IPv6:
2001:df3:4540::/47
Signature Algorithm: sha256WithRSAEncryption
37:ae:80:ac:2f:57:c0:e7:7b:9a:8b:be:aa:d2:1c:6e:37:17:
12:cb:f5:1e:49:3b:bc:4c:e9:32:21:06:c8:ea:66:89:e6:8e:
36:5e:50:1f:9e:11:3f:05:ec:79:00:c9:c0:a5:33:7d:55:e6:
29:9d:59:da:74:e7:97:05:01:b0:32:ac:1d:05:c6:00:6f:8e:
8c:89:92:fa:78:7c:0b:bf:d0:08:c4:b5:b2:83:65:fe:0a:58:
f2:6f:9f:d1:31:78:7f:1a:1c:97:ec:98:21:10:9d:d3:89:f1:
6b:a4:80:e9:4b:10:a6:43:d8:f3:12:94:82:f1:e4:8d:17:1a:
8a:6f:c1:85:3c:9b:96:8f:1f:f6:09:67:d6:b9:1b:a1:dc:a1:
32:f6:36:78:fb:54:86:b4:92:5f:d8:1a:93:c9:2e:3a:23:3e:
fb:70:74:fc:b4:4d:3e:45:91:86:90:e8:e5:73:69:e2:5c:ff:
bc:3c:d8:36:e9:43:a1:17:a4:48:0d:ef:70:1f:10:14:f6:6a:
ed:53:ac:52:20:3e:80:d2:a4:fb:f4:a8:fc:e8:b9:1b:53:90:
98:a9:6a:c3:da:3d:18:18:56:81:1c:38:60:db:08:a9:b3:b3:
a0:5b:fe:48:74:6b:75:8d:bf:c3:b3:f6:c6:bd:3f:14:d0:b3:
aa:a5:b2:fd
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDANs+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDIyNjExNTU1NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM2YjAtODdjYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMwl5AzpnN9RRcrWWt1RXr4+2sIVU7Qaqv7LtclSssS/QjF7soQBEqiI7m0e
Z8ZDraduxivFHf1z1VLXm+710FtPnUJ/bOGuCFB2j8S7SHvQjStLkGajuhZTR1TE
gtKSBSILVKFCWWmOwpT0bCJuy5jk2lrwCjiUnAk+Qmv14B7fZqR0JJz7PH/QcNaz
WHYdG7HEceA5jLXXNwYCiHAuuvg09wIX39Jmo/4m+uGOypKaf1upybP2M0izyvRn
dqMOCrjyXrrN86Hyr8N/IrlY3NRRrTORFvtILLIkoQC7pGwFmRtW6W+lr1cNqISQ
8opn0CQ2ly36YEb6k6bDAjLVqwcCAwEAAaOCAncwggJzMB0GA1UdDgQWBBSUTPL8
7Hi7XkfZiIfPmxUNT0KFQjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYyQzQxRjVB
MTMwOTExRjFBOEVENzE3OTE2M0Q4QzY3LnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw
EgQCAAEwDAMEAi1+kAMEAbReEDAPBAIAAjAJAwcBIAEN80VAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3roCsL1fA53uai76q0hxuNxcSy/UeSTu8TOkyIQbI6maJ5o42XlAf
nhE/Bex5AMnApTN9VeYpnVnadOeXBQGwMqwdBcYAb46MiZL6eHwLv9AIxLWyg2X+
Cljyb5/RMXh/GhyX7JghEJ3TifFrpIDpSxCmQ9jzEpSC8eSNFxqKb8GFPJuWjx/2
CWfWuRuh3KEy9jZ4+1SGtJJf2BqTyS46Iz77cHT8tE0+RZGGkOjlc2niXP+8PNg2
6UOhF6RIDe9wHxAU9mrtU6xSID6A0qT79Kj86LkbU5CYqWrD2j0YGFaBHDhg2wip
s7OgW/5IdGt1jb/Ds/bGvT8U0LOqpbL9
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:25:21 2026 by rpki-client