
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa
File: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (raw, json)
Hash identifier: M42F29+lHWSZmf5X/47K8ifG1ySfiTbA4ZzoyOCU96w=
Subject key identifier: 01:59:4B:2F:09:02:EC:23:61:20:6B:EF:2C:C5:59:A8:C8:5A:11:CC
Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Certificate serial: 91
Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:06:39 +0000
ROA not before: Wed 28 May 2025 10:19:54 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 132475
IP address blocks: 2001:df5:9440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Validity
Not Before: May 28 10:19:54 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e57f-cd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:cd:46:7c:7d:34:21:6e:25:60:bf:ff:47:
a4:22:fd:37:5c:dc:31:11:54:bf:62:f7:47:bd:80:
94:49:bb:80:2f:14:77:99:db:8c:a0:a0:07:bb:6c:
e2:97:60:fd:cd:68:ac:fa:97:43:3c:f6:3a:38:ec:
a8:57:23:3d:53:b7:ef:ee:4d:13:da:70:11:a7:c9:
cb:20:dc:d2:1f:a1:7e:5d:c6:8e:e9:c0:0b:e2:f1:
1f:0d:68:e8:76:31:68:56:19:30:2f:34:c2:f9:f1:
6b:67:32:af:58:b5:dc:4e:2b:cd:85:eb:fa:f3:fd:
e8:10:02:59:3d:42:ff:2f:bd:fc:8b:ad:c4:6c:2c:
bd:e3:2a:fe:2b:6e:cf:8d:3d:09:e2:e2:99:ca:e3:
35:43:5b:b1:7b:ed:22:fa:74:14:f4:6c:4e:56:bd:
5d:fc:b6:12:94:47:8f:ce:bf:c7:49:c0:75:ed:e2:
2a:53:f0:33:91:3c:2e:92:ed:e1:a8:62:a0:ea:06:
e6:e9:c6:cc:9b:3e:23:4f:15:39:c5:b0:0c:97:ed:
bf:32:f7:3f:89:ee:5c:9e:65:b8:da:f1:a4:dc:93:
96:ca:12:ee:91:56:8b:18:57:41:b0:71:3c:2c:1c:
3d:2a:f4:0b:d6:3c:cc:26:8b:89:a5:02:4f:e3:ca:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:59:4B:2F:09:02:EC:23:61:20:6B:EF:2C:C5:59:A8:C8:5A:11:CC
X509v3 Authority Key Identifier:
keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:9440::/48
Signature Algorithm: sha256WithRSAEncryption
6d:55:86:d9:ec:10:b6:e8:66:4d:e9:8b:c1:1b:a2:c7:7f:78:
b0:b7:17:69:8c:b9:42:37:6d:d7:68:ad:2c:d8:16:1a:07:72:
a2:39:fb:47:e7:73:d4:2a:1b:8f:4f:71:97:ec:71:de:90:75:
65:06:d9:37:dd:d0:a5:dd:c2:c5:ce:7b:e9:5c:33:47:8c:14:
d7:65:d6:c3:84:3a:dc:7a:7e:9f:b9:16:98:4b:94:0b:da:8c:
80:e3:ac:4f:55:dc:dc:e1:39:2f:fd:7a:d7:53:79:bb:60:a0:
a1:ef:30:c4:59:d2:91:28:28:26:bc:ea:4d:1f:80:9c:06:25:
dd:01:23:4b:0a:56:88:7b:65:87:93:f2:72:44:21:20:93:2d:
00:bb:0d:05:c2:94:a9:5e:1a:e2:b5:91:e4:fc:82:d1:0b:87:
7e:8c:bb:ca:7f:bf:a2:09:70:f9:61:3d:d0:c5:9f:18:d5:73:
f6:15:5f:3e:fb:29:f2:ba:af:9b:4f:02:86:47:30:98:33:09:
01:6e:cc:34:f2:48:d0:50:80:12:49:70:8a:cc:11:30:52:2b:
77:16:f6:e1:17:26:10:a8:c2:2a:c9:59:1a:73:90:90:d8:06:
e3:67:bc:f0:ac:3f:d3:f1:f1:c3:e5:76:e8:19:dd:77:ff:ba:
ee:62:7c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:26 2026 by rpki-client