
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB82D86C0BED11F18F72A3C9363D8C67.roa
File: AB82D86C0BED11F18F72A3C9363D8C67.roa (raw, json)
Hash identifier: JUfcv/7lcafXVnb1pQkYET3BC2hQFi9UDnkB8fmXC3E=
Subject key identifier: 39:50:B0:10:10:FF:42:DA:2E:AC:91:90:DB:DD:F2:A0:F2:1F:48:9B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DB28
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB82D86C0BED11F18F72A3C9363D8C67.roa
Signing time: Sun 01 Mar 2026 23:07:04 +0000
ROA not before: Tue 17 Feb 2026 10:44:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133252
IP address blocks: 203.78.128.0/22 maxlen: 22
203.78.128.0/24 maxlen: 24
203.78.129.0/24 maxlen: 24
2001:df6:ac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56104 (0xdb28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 17 10:44:44 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c698-429a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:5b:e8:af:fe:08:e6:4f:9e:d4:13:a8:79:
20:d4:d4:52:0c:85:5a:31:29:56:50:11:7d:eb:1b:
58:94:96:c7:1f:0e:40:8e:af:1e:0c:19:0f:61:a8:
3b:2b:49:52:e1:c4:0a:f6:c3:9d:02:a9:c0:ff:e2:
05:04:38:a8:df:92:ef:ea:8a:a0:3e:8c:4f:27:14:
70:ca:35:90:6d:57:45:96:f5:e4:49:eb:ca:37:bb:
46:2f:39:aa:95:e4:86:a0:dc:52:c4:54:13:23:1a:
5b:72:da:fb:aa:da:b0:f3:d7:d9:b3:5f:14:25:c5:
a8:b3:ad:f5:61:fa:0d:50:8a:54:00:ec:a2:27:c6:
2b:34:3d:92:ba:2f:3f:ff:fe:bb:f9:d9:dc:f1:f0:
c7:3e:55:06:06:0e:0f:c8:98:f9:4c:2f:c7:8a:59:
74:d3:0f:14:b5:82:e4:65:80:bf:1a:97:ef:47:c0:
37:63:c3:f3:0c:94:cd:81:cf:3d:1b:d1:53:01:7d:
9b:22:17:a1:7d:a6:b0:51:8f:15:33:ee:4f:be:44:
89:d0:d5:ba:5e:68:aa:45:4f:b5:0a:80:cc:94:ef:
4e:9d:bd:fc:50:63:05:7f:9d:15:41:dd:d7:85:82:
3e:d0:bd:20:1c:dc:5b:3f:e2:7a:20:4d:8f:21:33:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:50:B0:10:10:FF:42:DA:2E:AC:91:90:DB:DD:F2:A0:F2:1F:48:9B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB82D86C0BED11F18F72A3C9363D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
203.78.128.0/22
IPv6:
2001:df6:ac0::/48
Signature Algorithm: sha256WithRSAEncryption
ad:2c:2d:15:5f:3c:2d:5b:63:88:a7:ae:a6:e5:38:fb:aa:6a:
e2:22:db:4e:2e:50:2f:45:f0:08:cd:91:cf:f0:82:26:84:70:
50:13:10:03:a5:81:89:f8:b1:3e:2e:66:4c:95:c6:ee:dc:05:
9d:8b:b7:7a:a9:c8:45:0e:6f:54:28:ff:a0:a0:bc:4c:90:3c:
5a:db:70:a4:f6:9d:30:d0:44:32:08:93:75:06:e9:c8:f1:96:
a7:0f:38:eb:b4:f2:52:6c:b8:13:38:d6:f0:48:fc:a1:4b:f3:
98:9e:17:92:2e:3e:2e:0a:00:e2:46:74:b0:7c:e2:76:b4:e0:
1c:21:b4:ae:fd:1d:22:6e:ed:f1:3d:82:de:f4:d2:4c:fe:ea:
52:75:63:96:4a:a1:89:3f:5d:b8:82:f7:62:fc:c8:25:99:50:
b2:4a:65:9f:94:66:0b:e6:7a:17:c3:e7:75:f4:80:e2:c9:79:
1c:b1:dc:cd:03:6b:47:15:ca:b4:10:cf:48:b3:ee:a0:f5:d5:
7a:a9:d8:e4:3e:57:a1:2e:45:fe:e4:ac:12:e5:a7:a5:4c:a3:
92:3a:14:c7:f5:c7:80:51:97:5d:e7:f5:93:ef:b2:59:1a:1b:
02:11:06:55:e8:03:7b:79:12:73:c1:a3:fb:f6:e9:1d:7d:53:
8c:fd:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:52 2026 by rpki-client