
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11B2532B8E911ED818D696CC4F9AE02.roa
File: A11B2532B8E911ED818D696CC4F9AE02.roa (raw, json)
Hash identifier: 32LqNXEJ0hY7dl+op42R4S8/ZfscSeY9BeQGMCcMgE8=
Subject key identifier: 42:E0:88:C4:23:05:5B:ED:F0:B0:6F:A8:A5:72:56:A0:3E:62:1A:7F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D605
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11B2532B8E911ED818D696CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:41:26 +0000
ROA not before: Thu 08 May 2025 16:18:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142495
IP address blocks: 2001:df6:ef80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54789 (0xd605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:18:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c096-fffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:e6:ae:a6:b9:10:81:da:93:7c:e8:7e:83:
70:0f:a6:5a:78:55:4b:6c:f9:a6:ba:01:c3:86:aa:
32:51:d3:0d:65:32:75:2d:09:25:b0:c7:5f:86:4a:
cb:4a:07:41:b3:70:21:44:c9:c4:d3:20:7f:d7:04:
b9:fa:44:f8:b7:5e:8f:4f:7a:77:6a:f6:4f:ef:aa:
91:17:52:d6:da:11:c5:ef:95:89:24:55:7e:ea:db:
0b:0b:34:0f:61:b6:94:4e:c9:40:5e:2f:3d:5f:fb:
09:78:f4:1a:7b:55:8a:3a:03:11:fe:5d:7b:17:a3:
ab:27:bd:29:42:08:16:17:b3:d1:5a:8b:92:60:d7:
b4:93:39:0f:f5:c4:12:3d:d5:a5:81:b8:8b:dc:3f:
ee:cb:0a:4a:76:57:bb:3d:88:0c:af:f8:a8:91:11:
bd:08:34:6f:f2:47:a6:87:18:af:a1:9d:20:98:71:
e2:ab:4e:20:62:34:39:38:1f:cf:b4:d7:90:d0:8c:
b9:53:9f:85:54:a2:ae:e3:c6:d7:d6:b1:b2:55:9d:
c3:31:05:00:2c:58:53:f1:08:c1:57:ca:5b:3c:c9:
ca:de:8a:f1:0e:ee:c6:19:d8:2b:88:92:56:1d:6b:
64:67:10:a5:d5:cb:e8:0e:4c:2e:53:c8:b2:e0:4d:
ad:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E0:88:C4:23:05:5B:ED:F0:B0:6F:A8:A5:72:56:A0:3E:62:1A:7F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11B2532B8E911ED818D696CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:ef80::/48
Signature Algorithm: sha256WithRSAEncryption
52:0d:b9:c4:07:31:e1:23:1b:f1:ce:ab:59:c7:19:99:76:80:
ec:7b:f1:5c:0d:92:d2:b3:02:f2:20:0c:1f:8b:4a:ef:73:f0:
60:60:0c:9f:36:d9:3d:52:2f:0f:ef:14:a4:b4:ac:fa:78:5f:
d5:0c:28:c1:27:25:64:e5:1d:eb:4f:6c:32:4f:1a:14:59:d7:
ef:78:e7:72:0e:ee:15:47:0b:04:b6:eb:b4:b5:39:26:41:54:
e4:fd:70:c5:d4:e2:44:46:a1:6a:e7:63:cd:4d:f3:0c:e6:ca:
a6:94:87:22:5f:97:2f:52:6e:21:34:d8:0a:ce:ca:5e:5c:6a:
8c:08:4b:10:5f:5c:e8:0a:58:83:c8:7e:58:7c:eb:e7:1e:f0:
49:b2:47:d1:b9:fe:fc:9a:64:1f:15:cb:e2:3b:86:41:3a:3f:
8f:57:7d:0c:f6:9c:58:6a:f5:d2:31:fb:7d:2f:39:26:b2:15:
28:52:97:c4:e4:fe:88:0c:5e:7d:97:7c:15:47:ea:14:ce:37:
18:e3:be:69:12:e5:d8:61:2b:07:d9:83:0f:10:9c:46:e3:66:
ef:48:6a:d1:45:08:fc:3c:e1:0b:da:95:47:c3:c0:98:8a:66:
0a:cb:75:93:fa:5c:4e:78:64:2f:42:ab:cb:51:b2:bc:1a:11:
f5:4b:de:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:35 2026 by rpki-client