
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/986FD2A0366311EEB376DC3AC4F9AE02.roa
File: 986FD2A0366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier: 0/7xJgWRLTmOoUgmyN3zfYjGymllsM9+TOC1FjqOCVI=
Subject key identifier: CF:60:B8:E2:79:2B:49:17:EC:33:99:C0:CE:1C:CF:A9:EF:C5:3A:0B
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 024D
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/986FD2A0366311EEB376DC3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:31:18 +0000
ROA not before: Mon 23 Jun 2025 03:21:59 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 142609
IP address blocks: 83.118.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Jun 23 03:21:59 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a485f6-2b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:57:31:f1:c6:2c:08:27:89:cd:9a:02:ef:
72:36:0f:33:a4:0e:22:a5:25:95:ef:c9:51:fe:cb:
2a:cc:18:bc:e3:ee:43:8b:d6:93:0d:56:4e:d6:7f:
af:9e:3e:e1:40:1d:7d:b5:ad:cb:76:08:02:3e:fc:
f9:af:61:e3:b2:7a:d0:ad:1a:bd:73:da:d7:09:dc:
9b:9f:be:66:cf:d0:c2:ea:54:f3:c2:6b:26:8f:f6:
0c:a7:33:4d:36:b1:5f:72:25:97:84:39:82:db:91:
99:3a:f0:d3:0f:1a:67:2a:e5:f8:73:8e:cd:b1:fc:
3e:64:86:0d:da:9c:fe:c8:65:47:fa:15:f7:c2:5f:
cb:5f:26:1d:32:18:24:1a:09:60:0f:d6:f5:e7:5d:
42:9d:ba:7b:78:ac:ba:01:f1:60:6b:91:ce:80:66:
8b:1b:c8:c9:14:20:e9:53:e8:9d:b8:f8:83:e8:e9:
0a:4d:18:c2:3c:78:f5:42:b2:bf:49:4f:62:15:8d:
ac:c4:14:fc:67:0a:b7:0a:83:70:a8:9b:c9:6c:66:
c0:02:c4:1c:17:28:7c:42:85:5b:a4:a6:e7:a2:b2:
26:d2:00:82:40:a9:64:c1:af:11:d2:bc:c9:00:48:
93:b6:ed:a9:0b:23:b1:80:56:29:b2:da:0a:70:e0:
c2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:60:B8:E2:79:2B:49:17:EC:33:99:C0:CE:1C:CF:A9:EF:C5:3A:0B
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/986FD2A0366311EEB376DC3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
83.118.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:62:d1:10:ea:16:83:e4:ba:7d:c5:28:d1:bf:f0:5d:5b:8c:
88:61:94:a4:6c:91:f0:d0:e5:40:05:d6:a7:fa:21:5a:ec:29:
66:5e:b2:7f:31:c5:1e:f8:56:4a:7c:70:0c:ed:89:57:25:44:
f3:85:7f:c6:ab:33:52:d0:be:6b:86:91:76:6a:7e:21:32:e5:
3e:a5:0a:bb:4b:31:75:f0:20:e9:53:c1:11:12:6f:95:b3:77:
b8:f3:50:c0:7d:f1:40:2a:6b:b1:e6:27:ef:a5:8a:74:f0:9a:
8f:20:26:40:55:6a:67:bf:a9:7a:f2:72:30:11:5b:38:a2:80:
b5:14:6b:93:03:bc:34:47:e9:e9:cd:4f:1a:7c:61:f4:b5:c1:
28:6e:0f:7d:3f:63:77:99:1c:40:c0:94:08:a8:78:0f:a4:37:
04:f0:d6:74:7f:4c:c3:0a:0b:2a:10:6a:51:dd:0c:a5:aa:6c:
7d:4b:1c:10:29:8d:d7:c1:fb:15:3b:b9:36:ba:e2:05:dd:5e:
29:83:e8:1d:e4:cb:97:0c:d2:51:fd:f6:c9:45:19:05:cf:f1:
d5:d7:fb:14:00:47:7f:0e:3c:11:c4:8a:62:11:ca:e3:bf:17:
78:c0:ad:13:be:d8:7b:24:1d:92:6d:5b:b5:d0:aa:a5:ad:05:
71:5b:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:12 2026 by rpki-client