
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/957D5E14366311EEB376DC3AC4F9AE02.roa
File: 957D5E14366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier: 6wzAFmK1oKcHYB5SFohw0EdTZeF0a0loD9XXJGBArB0=
Subject key identifier: 82:8E:F2:2C:01:E2:07:9D:10:90:6A:65:0D:1F:65:F9:0D:3D:1E:FF
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 0246
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/957D5E14366311EEB376DC3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:31:12 +0000
ROA not before: Mon 23 Jun 2025 03:21:53 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132920
IP address blocks: 83.118.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Jun 23 03:21:53 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a485f0-b84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:d4:f8:56:90:e1:38:d7:b9:32:9f:f9:4c:
fa:eb:0f:cc:36:ec:87:77:75:d9:e1:b7:d3:77:c9:
27:8c:d2:68:86:16:9f:23:34:28:9f:b4:7e:24:31:
f9:de:e0:13:68:a4:e0:66:cb:df:63:1c:99:92:18:
28:79:88:ff:2d:9f:10:c4:95:df:14:d4:13:ce:3f:
50:d1:22:d5:23:2d:7b:c2:b9:39:4a:36:05:0c:1f:
3c:8e:17:d5:9d:a2:9d:bd:03:0c:32:84:ca:73:17:
e3:0a:9f:0c:ed:70:04:6b:52:17:0c:25:9e:c8:93:
82:20:8b:6b:d9:d2:e5:13:1b:e9:d7:18:19:61:c2:
a2:c7:19:11:6e:00:c5:ac:02:45:3e:fd:d8:52:63:
c0:5a:b2:f3:99:c6:99:fe:45:ae:2a:d9:05:87:be:
c9:68:33:04:9c:51:3f:36:b1:0d:c3:d8:31:f5:2a:
89:81:ec:38:39:c6:91:5d:69:2a:10:a4:85:ca:2e:
20:52:0c:5a:86:97:dd:54:8a:59:c2:8b:94:6c:0a:
60:00:80:b7:9a:99:82:01:2a:a2:a9:92:cc:af:d0:
7a:1f:81:46:3d:83:34:17:45:c1:bb:c2:ac:9c:9e:
24:6f:f2:84:0b:0e:25:5d:72:8f:31:d7:e5:42:b9:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8E:F2:2C:01:E2:07:9D:10:90:6A:65:0D:1F:65:F9:0D:3D:1E:FF
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/957D5E14366311EEB376DC3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
83.118.70.0/24
Signature Algorithm: sha256WithRSAEncryption
86:12:e6:3c:47:e4:bd:fa:49:3f:25:8a:29:a6:a9:85:10:db:
ba:2b:1c:7e:eb:38:d7:51:d6:2c:f2:cc:df:b8:9e:97:d0:94:
02:2c:f3:8e:eb:92:63:6c:eb:28:58:32:b6:73:7c:2e:07:1f:
dc:5a:09:a3:18:f0:15:0b:92:c9:33:cd:77:63:ed:85:b4:ff:
2c:49:c6:e3:67:62:bf:18:dc:98:7b:b8:4d:fb:22:24:46:cb:
f5:c1:f5:42:d9:f9:cb:ca:0f:dc:49:a4:bd:ee:9f:6a:d7:b0:
09:5a:a6:de:f3:d8:ea:9a:c7:d5:e7:91:05:40:ff:e6:5a:a6:
da:96:f7:ef:98:a2:53:c2:7e:97:8b:22:ec:32:1a:2f:4a:ab:
36:09:77:e9:1e:d6:44:3e:c4:c3:a1:55:c1:f9:59:f0:c7:3d:
74:58:4b:76:93:02:a9:0d:34:ba:54:e4:b8:c6:c2:3f:ba:b4:
45:f4:4e:07:e2:54:b6:8d:01:af:be:32:71:2b:52:11:d6:f9:
46:4f:56:43:6d:9f:fd:3b:53:ba:50:09:8e:4f:87:1c:82:9b:
0d:02:18:70:2c:d6:af:ca:eb:47:60:02:ce:2b:f6:2a:de:7d:
66:f5:2f:a3:d3:49:4d:be:6f:78:64:e0:54:2c:41:95:7b:56:
92:0a:08:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:46 2026 by rpki-client