
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A8F3AE2E59711EC9B14CC09C4F9AE02.roa
File: 6A8F3AE2E59711EC9B14CC09C4F9AE02.roa (raw, json)
Hash identifier: rSEz7FXCzJRuwLuRmRPp98KIVIYZLxCaMkeYqk+aVEU=
Subject key identifier: 24:6A:CF:35:7A:8D:2B:F0:68:BF:59:FC:71:F8:7F:51:57:57:44:57
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D8DB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A8F3AE2E59711EC9B14CC09C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:56:41 +0000
ROA not before: Thu 08 May 2025 16:32:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9885
IP address blocks: 27.0.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55515 (0xd8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:32:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c428-080e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:a4:00:24:e4:52:e6:08:76:a3:96:e7:fd:
e3:d7:8c:bc:d1:fb:1c:49:e5:4d:c4:f5:ed:0e:0a:
f0:b2:27:b1:ff:97:16:96:07:4a:ef:61:1c:fa:36:
c2:19:88:fa:7f:84:3c:17:26:81:c4:ce:d8:f5:f7:
85:0f:b4:ad:f0:a5:3a:2c:3a:6e:09:eb:dd:2e:4b:
3b:a3:71:c5:9d:f2:2a:ad:72:6c:6d:1b:8d:d0:9a:
47:35:f7:9b:3d:6e:99:37:de:aa:4d:63:f8:37:bb:
ad:b8:09:66:90:e7:3a:5d:4c:e8:a5:56:54:3d:91:
84:a9:e6:59:9d:1a:6e:fd:96:3c:6b:c7:d1:d9:9e:
79:b4:64:94:f1:71:6e:4d:d5:ff:ea:69:6d:a1:33:
ee:09:ca:9b:ac:b4:c6:42:77:ba:d1:e1:75:a6:f5:
2d:eb:f5:21:59:d8:b5:ea:6e:e1:24:46:d7:fe:80:
fa:b3:16:a2:b5:74:af:10:af:28:b8:5a:8e:77:2f:
8d:b9:b3:bc:a0:bf:88:6f:5a:53:20:cd:f3:17:e7:
98:91:4f:ff:4a:6d:3b:53:eb:d7:5b:32:40:f5:f8:
cf:b9:a4:df:f2:4f:48:ac:e6:17:11:c9:ca:6a:06:
0e:53:9f:ed:79:88:30:88:bc:7c:cd:eb:f2:8e:32:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6A:CF:35:7A:8D:2B:F0:68:BF:59:FC:71:F8:7F:51:57:57:44:57
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A8F3AE2E59711EC9B14CC09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.252.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e9:e6:7f:13:a9:23:20:9a:89:e5:62:58:59:21:23:bc:9a:
38:e5:52:ae:b6:5f:63:8e:2e:66:5f:33:dc:b2:8d:5f:e0:ff:
ae:e2:55:fa:8e:42:63:22:43:ce:b3:6e:11:2c:ec:e0:e7:51:
34:b0:31:41:3f:79:06:fe:6a:59:06:26:bc:7f:39:7e:92:8c:
86:27:35:9f:71:91:be:09:62:a9:27:7f:5a:01:97:94:1c:af:
0c:3a:84:4b:40:0f:7d:7e:e4:17:08:dc:65:e5:41:10:18:49:
0f:8e:dd:ff:35:6c:7a:18:93:27:f0:42:d7:2c:01:fd:0a:5d:
8b:22:db:eb:ad:b5:5a:20:5e:6a:a5:fd:01:36:f5:a2:b6:aa:
c5:6a:a2:bb:08:45:c3:42:dc:68:d5:8e:b3:e8:fe:47:cf:b6:
87:02:0b:c5:3f:df:d3:0e:8b:7e:cc:7b:8d:e0:2f:ea:ed:46:
bc:b7:19:db:f8:cc:9f:d4:39:27:e5:42:3c:56:5d:12:02:3c:
fd:59:eb:b8:12:17:f1:25:2c:ea:b6:66:14:93:03:aa:9b:28:
35:55:e5:30:51:1f:6e:e6:e9:a3:22:74:38:e7:a1:3c:93:09:
8a:f3:97:a8:b7:72:e1:6b:c6:b6:f7:e2:0e:3f:e6:e1:f0:f5:
9b:4b:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:48 2026 by rpki-client