
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/0D0118A89A4C11EEB7AE8812C4F9AE02.roa
File: 0D0118A89A4C11EEB7AE8812C4F9AE02.roa (raw, json)
Hash identifier: z7xT0Q19l8as89JVcBqiCD1+uHSolXQv/bw/RnKomw0=
Subject key identifier: 38:4A:8A:0D:D7:02:2E:DF:F8:2A:78:9A:BC:E4:55:79:BD:A2:50:7F
Certificate issuer: /CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
Certificate serial: 01A7
Authority key identifier: 78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/0D0118A89A4C11EEB7AE8812C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:28:43 +0000
ROA not before: Sat 03 Jan 2026 03:25:39 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152152
IP address blocks: 210.79.170.0/24 maxlen: 24
210.79.171.0/24 maxlen: 24
2001:df3:38c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl
rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A9C8, serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
Validity
Not Before: Jan 3 03:25:39 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a414db-0cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:36:b6:f6:91:97:c9:41:32:af:3f:b7:68:
7e:d0:aa:90:bf:cb:27:db:f9:fb:1c:33:2a:49:58:
37:94:7b:20:72:7e:f6:6e:2f:ef:f3:e2:b3:86:94:
f0:43:a8:9c:1a:b3:2b:64:8e:2a:53:93:e4:d2:fc:
ac:5a:0a:36:50:2a:10:fe:19:4d:31:bc:50:59:cb:
d2:45:69:e6:ca:ee:94:ed:3e:12:b1:13:42:88:92:
a6:ec:2e:13:bb:da:5e:20:c5:11:f0:8a:cb:ea:35:
5e:91:fe:42:8b:9c:d3:5e:a8:2a:39:78:e8:7c:dd:
ec:f0:98:0a:4c:6b:8e:23:92:1f:f9:a9:61:dc:fd:
d2:b4:f5:d0:ed:19:ee:19:e8:e9:7e:db:58:4b:f3:
10:16:eb:6d:24:eb:f7:16:af:99:58:0d:4b:12:e5:
86:c5:09:64:85:42:d0:27:b1:41:42:25:6b:bf:a9:
3f:40:40:e2:5e:5b:70:fb:42:90:b0:ec:89:59:39:
6e:a8:62:56:db:d0:e1:a4:91:3f:28:6e:81:4d:27:
df:a0:6f:7d:db:2c:9b:48:b6:e5:82:94:de:50:e5:
35:1d:03:2c:1a:fa:50:7f:a4:44:a7:ec:9e:54:ea:
13:6f:67:63:ee:33:93:d7:cb:05:b3:6e:1d:b2:3d:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:8A:0D:D7:02:2E:DF:F8:2A:78:9A:BC:E4:55:79:BD:A2:50:7F
X509v3 Authority Key Identifier:
keyid:78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/0D0118A89A4C11EEB7AE8812C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.79.170.0/23
IPv6:
2001:df3:38c0::/48
Signature Algorithm: sha256WithRSAEncryption
41:be:77:b4:bf:29:ff:83:20:fe:48:07:66:87:cb:08:6b:97:
4a:e8:93:8c:21:c2:c4:9e:5f:e9:69:ad:5d:3d:3e:c9:fe:bd:
c5:47:18:b7:50:1b:7d:44:51:1e:95:b2:0f:55:bd:b2:c8:2d:
28:c0:c7:b7:2b:ba:91:1e:fb:df:48:01:77:09:54:53:ed:7a:
5d:f6:b6:51:0c:94:1b:a2:6f:7f:7d:44:aa:4c:05:a8:99:8b:
6a:ca:46:86:75:bb:8a:33:c9:b6:49:ce:da:d1:d3:5c:f7:2e:
c5:0f:71:03:d2:37:04:30:f2:1c:30:d7:7a:74:e0:02:ed:80:
ca:ad:14:36:98:2a:90:5b:e8:41:f6:d6:be:a0:29:ca:c7:9f:
b5:58:6c:89:43:e8:0d:fb:ad:f5:0e:fc:9d:19:6d:c0:c0:1d:
c9:6f:54:6a:fc:63:69:b8:b6:9e:21:f7:61:c1:31:4f:ca:3d:
e2:5d:31:43:28:8b:f0:1a:9c:2a:e3:60:77:83:91:6d:c8:ab:
38:6c:cc:e1:27:df:af:f5:c9:62:91:e6:a6:5e:f7:fa:75:a8:
20:84:1f:33:7c:a5:76:ea:2e:a1:03:e7:c9:7c:a3:d2:4f:8d:
07:54:4d:f4:d1:8e:a7:09:f8:42:ef:6f:01:2a:93:19:95:58:
20:8d:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:31 2026 by rpki-client