
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6E567B8D48411EE88C6EB27C4F9AE02.roa
File: A6E567B8D48411EE88C6EB27C4F9AE02.roa (raw, json)
Hash identifier: pBjgAg+K1M/WYgkCPg4TKTvUfuHD+tpBRIa5yzpBSBE=
Subject key identifier: E2:B4:2C:88:32:76:72:12:22:C9:38:57:FD:72:2C:F9:19:13:1C:F2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D811
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6E567B8D48411EE88C6EB27C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:53:19 +0000
ROA not before: Thu 08 May 2025 16:28:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152487
IP address blocks: 2001:df3:7cc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55313 (0xd811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:28:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c35f-d88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:5a:05:e0:e6:9b:84:06:7f:ea:08:89:15:
e5:3e:18:0b:ce:5d:00:87:e1:80:8d:19:dd:b3:b4:
aa:45:d1:54:46:26:8d:b7:d2:8e:9f:df:36:87:d9:
a0:6a:49:55:46:9a:51:b8:d6:fd:c5:db:ec:24:49:
22:e6:00:52:60:9e:4f:09:02:69:90:d6:f2:f0:19:
0f:79:4a:44:c7:f3:ad:fd:18:ae:c1:69:e5:58:27:
88:6f:1c:4f:de:7b:e8:4c:c3:74:c3:69:00:50:52:
7f:57:0f:48:29:2e:59:89:a2:1f:e0:70:f2:67:2d:
16:75:c5:68:ed:67:c4:f8:3a:bf:94:cd:96:38:dc:
04:09:82:92:80:e8:d5:14:31:a6:e1:b7:e2:a9:e0:
3a:9d:3d:48:82:ab:5d:96:9e:55:36:e1:30:b2:49:
ab:de:c7:30:d7:fe:c5:f1:c0:35:b8:19:8e:fa:4c:
43:62:bb:0f:2c:1e:62:a9:12:c0:17:72:6c:44:a4:
74:cc:1d:d4:9d:5f:18:92:b2:5e:f0:10:ab:24:97:
ec:c4:c0:ec:6c:a7:e9:5f:bf:ea:bd:0d:27:2a:d7:
d2:df:e2:2b:cf:23:66:09:b9:ce:40:a3:0f:2c:4b:
2d:5f:08:c9:93:83:c0:8c:a5:68:08:58:34:d5:d1:
d0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B4:2C:88:32:76:72:12:22:C9:38:57:FD:72:2C:F9:19:13:1C:F2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6E567B8D48411EE88C6EB27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:7cc0::/48
Signature Algorithm: sha256WithRSAEncryption
3d:10:d0:0a:85:86:7b:61:b1:86:e3:27:22:86:54:7f:38:34:
e8:d2:be:65:2f:d4:1e:d5:1f:40:a7:d0:5e:1f:b6:6e:f6:c6:
38:25:47:27:8a:67:5e:83:61:83:05:fd:2d:77:ce:25:0d:63:
c0:82:b1:3b:3f:e5:e6:b2:62:8c:6c:6f:58:96:b2:7c:5c:4e:
d1:75:64:c0:00:99:f5:72:6b:b8:3f:2d:d3:c0:eb:a1:0e:23:
ad:b7:c6:57:d5:15:3d:24:41:58:9b:c1:00:05:c4:8d:29:b5:
a2:b7:1a:0f:77:64:b9:19:c6:57:a0:22:b1:72:f3:d1:13:9e:
70:73:58:93:64:66:74:23:4a:8f:12:4f:fe:45:08:b4:31:9b:
97:ca:a9:0a:cc:40:20:c7:f8:a1:d8:95:fc:9f:e9:aa:14:6c:
6b:37:fb:f0:1d:e0:0e:9e:ad:34:3c:a2:59:80:71:9d:f7:6f:
5d:b6:2f:d8:21:61:e3:11:1b:3b:82:ef:64:d1:1a:a1:a7:c6:
21:53:37:1d:de:48:d3:a7:7e:21:07:a2:94:09:07:ec:a2:24:
b5:24:3f:aa:ea:42:45:1f:d7:ca:3a:25:56:9b:0d:4c:77:ac:
7d:08:a6:b1:40:3f:3d:01:43:e4:96:5a:a7:3b:7a:08:66:66:
d8:e0:fd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:38 2026 by rpki-client