
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/AF00AECABBF511ECAA816D52C4F9AE02.roa
File: AF00AECABBF511ECAA816D52C4F9AE02.roa (raw, json)
Hash identifier: aH4iu9X+4P6MZeDtIF9t7IKHGLI6a0EK+DvaoXs0IFs=
Subject key identifier: 17:D1:BE:16:CC:98:03:AB:86:4B:77:38:54:6B:1B:BA:80:4D:64:2F
Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial: 3560
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/AF00AECABBF511ECAA816D52C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:58:27 +0000
ROA not before: Thu 31 Jul 2025 15:20:56 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 45871
IP address blocks: 180.94.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13664 (0x3560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Validity
Not Before: Jul 31 15:20:56 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47033-9ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:e9:ce:af:bc:2a:61:f8:4e:df:4d:4f:00:
6b:4f:5f:b8:3d:22:b9:a5:e7:6a:3c:0d:45:5c:ad:
55:d7:1f:ac:d8:48:7a:bc:a6:91:82:31:09:db:64:
c1:76:18:e8:b3:91:cb:3d:10:e7:10:ba:2d:7c:69:
fa:07:60:cf:b8:70:a6:72:49:61:39:95:22:41:dc:
d1:7d:1f:34:47:32:e6:fa:65:cc:51:ee:16:82:62:
28:02:6f:49:8a:ff:ef:f0:41:08:90:3a:7d:f9:b9:
6b:84:07:0f:9e:ad:3b:9e:80:7e:99:a1:16:d5:e0:
e6:14:f0:e7:06:f9:50:95:a2:49:a6:bd:2f:d6:ce:
5c:11:44:80:1a:a4:73:17:a6:86:63:1e:e0:42:f3:
50:30:fe:48:21:66:f6:62:ec:46:1c:db:98:73:91:
4c:52:c9:07:c1:bb:2b:23:19:87:45:40:1b:da:98:
c3:07:6c:e3:6d:11:a0:4e:15:1a:50:f4:7e:14:1a:
0a:56:48:ef:96:9e:fe:90:85:92:08:f1:c1:a2:1c:
34:f3:5a:a6:3b:c1:56:7d:da:94:90:10:e2:05:21:
4c:0a:14:cc:30:e8:33:c6:6d:e9:45:f4:5b:ef:17:
67:29:c8:f8:03:dc:94:05:33:29:ea:19:09:4b:31:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:BE:16:CC:98:03:AB:86:4B:77:38:54:6B:1B:BA:80:4D:64:2F
X509v3 Authority Key Identifier:
keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/AF00AECABBF511ECAA816D52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
180.94.232.0/22
Signature Algorithm: sha256WithRSAEncryption
89:03:00:fd:22:70:c9:6d:2a:f2:95:2d:d6:04:e5:d6:84:8c:
d8:f9:34:a1:f7:c7:db:fa:70:c3:11:2b:57:f6:de:f9:74:cc:
dc:85:c7:88:2f:b0:46:90:8f:30:c3:80:76:b8:1e:0e:90:d8:
58:95:04:ec:ff:8a:ae:01:a5:ce:a7:9a:cb:77:95:de:3c:eb:
e2:29:fc:62:06:46:86:a5:97:8e:69:d3:60:e9:9d:f2:c8:29:
b0:10:f8:14:81:ff:e0:bb:cd:58:5f:c8:c8:dc:a5:25:f5:8c:
12:fc:30:83:aa:c6:0e:34:a3:31:0b:49:e3:4f:87:f5:ec:43:
a2:00:09:03:0e:d2:9d:09:a3:b0:25:15:7e:db:14:4b:f1:1b:
89:a7:dc:12:fb:02:6b:fa:d0:01:18:76:ac:7c:ee:21:e3:c7:
5f:d7:fa:5c:67:86:af:68:ba:99:92:9f:f1:23:f2:95:32:d1:
55:f3:41:3c:68:36:04:78:3f:22:13:db:95:1d:ec:10:4f:12:
67:3e:bf:0d:cc:88:b2:e0:e7:03:85:58:93:b8:9b:38:b7:0b:
83:17:93:3d:24:f6:a7:04:e1:68:70:a0:f5:6c:08:4a:50:29:
5a:9b:fd:3e:61:98:86:33:e6:44:04:a3:98:f6:d0:e7:9c:a6:
09:53:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:54:45 2026 by rpki-client