
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5574BD44E8811EBB583864AC4F9AE02.roa
File: B5574BD44E8811EBB583864AC4F9AE02.roa (raw, json)
Hash identifier: qujj/3rYEXurgm+hzrNNevmDuI7lJyZ+Y3UR8NRA97I=
Subject key identifier: C7:7B:13:60:C6:84:4E:39:E6:C2:8C:1B:2D:02:94:58:42:AD:CC:C5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D360
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5574BD44E8811EBB583864AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:25:39 +0000
ROA not before: Thu 08 May 2025 16:06:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135877
IP address blocks: 2001:df5:af80::/48 maxlen: 48
2001:df5:af81::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54112 (0xd360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:06:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bce3-dc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:ad:5d:fb:e2:c6:f7:63:d1:29:3f:8b:12:
57:8f:6d:aa:90:b3:52:57:14:d7:5b:85:75:c6:37:
42:c2:9c:6c:f3:65:e2:b3:9e:8a:a3:50:ce:70:32:
aa:7b:93:94:d0:b9:9d:90:ba:35:dd:c4:58:b8:85:
fd:be:43:de:2a:f1:cb:22:d0:4c:e0:a5:ee:e4:b8:
65:1d:ad:ce:3c:13:25:3b:0b:15:e6:4d:ca:9c:d4:
1e:f6:49:48:84:ff:65:96:e8:72:51:91:a2:ef:e0:
9f:4d:12:40:a7:a0:81:c6:cd:50:7f:d7:8a:5b:7c:
0b:ed:0c:4b:8a:21:c4:63:ca:ab:ea:d8:d3:29:81:
e6:1f:82:08:a6:36:d7:ec:34:12:e3:a1:c8:df:80:
86:07:94:54:c5:53:10:f6:95:69:40:99:f3:29:db:
bf:e0:12:cd:4f:a0:1b:1e:fb:c5:70:35:c5:fe:9b:
03:b5:3e:3f:4f:7e:a3:da:56:17:d0:26:4f:9a:e2:
2e:71:0e:8f:1a:ce:3d:cd:6c:a3:57:6f:1c:e3:c4:
6b:dc:6b:31:ea:ee:b5:dd:06:37:5f:26:28:e2:eb:
e3:2b:2c:63:d3:6d:55:16:7f:03:f8:d8:8c:ec:62:
8d:c6:f6:09:af:42:47:72:87:81:bc:bb:3d:57:1c:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7B:13:60:C6:84:4E:39:E6:C2:8C:1B:2D:02:94:58:42:AD:CC:C5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5574BD44E8811EBB583864AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:af80::/47
Signature Algorithm: sha256WithRSAEncryption
02:43:7e:32:88:94:02:56:2d:90:51:6f:5a:12:31:0a:c0:76:
5e:a2:e8:83:38:8b:bf:6a:29:87:d2:d5:0d:d6:ca:7f:87:ba:
4d:0a:74:53:ec:4c:63:ff:1c:0c:b2:69:f8:23:f4:9f:ca:2f:
01:53:21:ab:b8:68:74:d5:83:04:61:76:a0:dc:85:87:2b:84:
6d:f4:18:a2:db:99:ed:7d:9b:b3:04:3b:98:a0:8a:62:e5:53:
f9:0f:1c:25:18:eb:3a:b0:36:1f:31:ac:39:91:54:07:fb:74:
ae:aa:d1:38:a3:63:4e:a5:db:21:bb:a5:a9:8b:ea:e2:18:2c:
7f:68:dc:ca:ec:80:43:5e:5a:a8:48:c3:9c:bf:b5:bc:85:ee:
d7:0a:e5:75:01:58:50:d5:de:bf:11:a6:ce:32:2f:6b:bd:cf:
0d:d8:76:e9:10:3e:13:a1:7c:7e:55:d2:54:1d:b4:86:97:2f:
5b:b6:33:f1:ab:f7:71:08:70:49:89:af:cd:71:b8:25:d1:e7:
15:5e:1b:c9:5b:d4:bf:4e:b9:05:4f:8d:bd:d5:27:71:09:24:
da:9c:87:31:b1:42:e7:74:0c:d6:ec:c5:10:27:fd:cb:bb:cb:
44:25:d0:04:00:99:bf:f4:8b:41:17:60:b1:f9:90:35:6f:38:
85:b9:3f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:44 2026 by rpki-client