
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/18F61C18939B11F0820C0E13C4F9AE02.roa
File: 18F61C18939B11F0820C0E13C4F9AE02.roa (raw, json)
Hash identifier: ywYpRYCAQwXCZMjr3c7Rlx0ujNmnV92c95uYASJL2t0=
Subject key identifier: 29:E2:32:FD:8C:86:FA:11:56:BF:F6:C2:68:DD:B8:26:F3:82:81:0C
Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial: 55
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/18F61C18939B11F0820C0E13C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:18:36 +0000
ROA not before: Wed 17 Sep 2025 07:51:20 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132883
IP address blocks: 2407:a980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Validity
Not Before: Sep 17 07:51:20 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3da3c-b60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:47:85:7c:a7:34:d9:3b:95:aa:e3:43:2f:
36:15:61:fa:24:42:17:78:ef:5b:2f:86:8e:3b:04:
a5:65:e3:4b:f8:ae:f7:0a:3b:71:14:84:c4:a9:b2:
d3:65:61:35:63:8c:dc:f0:a3:af:79:03:32:55:94:
de:8c:82:1a:d1:6b:ce:66:19:7a:9e:a4:40:f9:d3:
ae:ec:97:ee:91:66:48:7f:38:75:25:04:e7:b2:34:
46:97:34:8e:ef:1f:a1:12:cd:5b:a5:2b:91:d2:c7:
84:26:49:76:c2:bc:c9:8d:10:d5:44:b9:28:c4:65:
e5:88:0e:24:88:61:b6:08:43:ab:59:cd:a0:cd:0a:
b2:9f:f6:01:7a:0f:13:72:f2:70:57:59:79:c2:84:
0c:08:e6:5b:2a:98:a7:c5:e3:ac:9c:91:5e:37:63:
77:03:6a:6a:c4:3c:e4:37:bd:fe:a5:6c:20:3e:94:
47:59:4c:04:0c:4f:c0:da:bc:7f:28:1a:c8:e0:89:
41:f4:10:be:f5:c1:aa:eb:1f:9c:21:14:63:e0:0f:
dd:b1:f0:73:99:05:8e:8d:87:12:b1:90:b4:ef:ba:
14:ba:8f:c1:16:36:57:9d:f0:ca:2c:28:a6:17:78:
b7:32:32:b6:5c:77:cc:89:f9:72:c2:76:54:bc:21:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E2:32:FD:8C:86:FA:11:56:BF:F6:C2:68:DD:B8:26:F3:82:81:0C
X509v3 Authority Key Identifier:
keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/18F61C18939B11F0820C0E13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:a980::/32
Signature Algorithm: sha256WithRSAEncryption
25:9a:73:42:f1:6d:85:89:ad:da:1c:67:94:1d:ec:42:99:79:
d9:08:58:55:91:7a:70:92:15:0e:91:fe:f0:d8:d7:22:57:85:
05:99:7d:e8:2d:43:58:88:e2:12:2e:65:cb:6a:57:3b:6a:d9:
d8:c3:59:7d:53:28:7f:5f:bb:ee:f5:a3:e6:b7:ae:27:9c:60:
8c:07:fc:d1:fa:84:45:82:7c:db:66:e8:77:8f:02:de:a1:0f:
91:b1:6d:09:b7:1f:dc:d9:de:8c:2e:c7:12:f1:d4:94:e6:27:
7f:ba:e5:de:ce:c5:07:8b:d6:72:66:ea:1f:e4:65:8a:7e:2f:
54:6d:7d:35:bb:d3:ac:18:1e:73:4e:54:57:2c:ef:e4:cb:14:
5b:4d:23:9b:7a:65:2d:d3:04:24:0e:ac:c5:be:8f:d7:34:aa:
7f:88:f0:24:d8:ce:51:b3:56:e9:1f:45:a0:f3:7a:f8:1d:eb:
3d:19:9c:ba:fa:99:2e:24:99:60:0f:19:d4:8f:01:db:7f:5f:
42:aa:2e:d8:8f:c4:59:c8:ce:ae:5e:fe:c3:4e:bd:19:cd:fb:
fa:f5:20:d8:8f:cd:9e:3f:44:ac:cf:40:28:7c:b2:10:53:b0:
d4:37:53:86:fb:f9:47:1b:cf:fc:7c:74:46:1a:4c:9c:74:ba:
51:c0:55:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:17 2026 by rpki-client