
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2ACF9E0C855C11EB8C076013C4F9AE02.roa
File: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (raw, json)
Hash identifier: yis9VVzi8QRwExdYmq7nHD83ZqP/ATPYVFBUyxAnRF4=
Subject key identifier: 4D:93:50:A5:9B:ED:C6:CE:89:DF:4F:E1:49:76:D3:DC:E9:72:A3:F7
Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial: 3566
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2ACF9E0C855C11EB8C076013C4F9AE02.roa
Signing time: Thu 08 Jan 2026 15:10:54 +0000
ROA not before: Thu 08 Jan 2026 15:10:54 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 38196
IP address blocks: 203.124.26.0/23 maxlen: 23
203.124.26.0/24 maxlen: 24
203.124.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13670 (0x3566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Validity
Not Before: Jan 8 15:10:54 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=695fc8fe-ea03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:3c:9b:8a:08:db:28:6b:40:24:90:b4:fc:
ce:d6:f0:50:03:26:b1:86:1c:81:20:73:60:88:84:
39:ca:97:16:bc:e0:8b:5f:59:eb:79:3c:de:bd:4a:
c3:7d:f4:a1:d6:6b:e1:cf:66:30:02:92:d1:40:25:
bb:b8:3b:05:38:06:75:d7:61:79:4f:0f:57:a3:f9:
c8:56:69:5a:3a:43:9e:bb:c5:1d:39:70:73:8e:56:
87:19:20:e5:a7:8f:01:7d:70:de:aa:3a:c2:ff:5b:
ad:cd:cd:fe:fb:39:07:80:e4:e1:57:38:a1:48:d8:
8a:ff:51:bd:58:aa:25:01:c5:9a:ea:e6:46:33:67:
2f:74:d8:63:fa:87:fe:8f:1a:f7:3a:d9:fd:e1:92:
a8:63:70:81:45:1e:6d:fb:ce:b7:a5:cc:49:6f:79:
a4:91:73:7c:e5:1a:78:37:6d:be:c9:02:c2:7b:58:
a5:d3:c7:cd:f6:67:e1:4d:55:d8:82:24:27:1b:4c:
ef:d1:ee:1a:59:cb:27:5a:ff:a6:84:21:c4:41:c0:
10:03:3a:84:9a:cc:42:60:b6:5e:20:1a:78:fc:1b:
be:96:c9:9d:5d:c0:56:27:41:b8:95:13:58:e8:93:
39:42:ab:26:83:20:09:01:b2:29:06:46:41:4c:5d:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:50:A5:9B:ED:C6:CE:89:DF:4F:E1:49:76:D3:DC:E9:72:A3:F7
X509v3 Authority Key Identifier:
keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2ACF9E0C855C11EB8C076013C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.124.26.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:f2:d7:9d:6d:71:8a:00:0c:06:56:af:91:ba:0d:ce:07:67:
73:6a:e3:19:4b:b7:32:9e:6f:07:27:71:41:b8:6d:2d:fa:ce:
97:81:7c:88:4f:55:b7:d2:19:70:6b:41:46:73:d6:54:6f:5e:
82:99:bc:cc:dc:55:be:7c:19:3d:a7:dd:5e:8e:02:37:73:9c:
85:58:fc:84:38:dd:8a:0e:e6:55:98:b8:ce:89:3e:66:6c:e5:
32:cd:22:cf:83:2f:f5:65:40:a7:f8:c4:fc:0a:1f:68:ee:95:
b1:e9:a7:40:df:a5:4c:fb:bf:86:95:ec:9b:0a:5c:44:b0:b5:
48:3f:e3:4d:20:02:a0:98:be:3c:86:b0:c7:be:d2:c4:08:8f:
2a:6b:ad:ef:cd:cc:55:2a:bb:8b:f9:14:c8:f4:e5:d1:91:89:
ae:3c:60:ce:e9:a1:9f:7a:53:1e:32:e1:7c:73:5e:9e:39:bf:
cf:ca:ed:8c:af:4a:90:6b:b2:9b:b5:78:7e:b3:89:ba:14:54:
02:3e:0e:58:74:28:7c:e1:d7:98:16:89:53:14:d3:b1:d0:a4:
61:69:59:a4:16:1d:d1:61:ed:33:f0:69:c3:d2:94:eb:b8:a6:
38:7b:6e:95:84:7d:72:0d:08:17:c5:d7:47:17:62:fd:88:0e:
37:7d:25:a2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OEQ2QjcxMTAvBgNVBAUTKEVFQThBRTgwRDcxM0U2QjIyREIwRUM2MDkxNTdGMEM1
OUE1MkZEN0YwHhcNMjYwMTA4MTUxMDU0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTVmYzhmZS1lYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0J48m4oI2yhrQCSQtPzO1vBQAyaxhhyBIHNgiIQ5ypcWvOCLX1nreTzevUrD
ffSh1mvhz2YwApLRQCW7uDsFOAZ112F5Tw9Xo/nIVmlaOkOeu8UdOXBzjlaHGSDl
p48BfXDeqjrC/1utzc3++zkHgOThVzihSNiK/1G9WKolAcWa6uZGM2cvdNhj+of+
jxr3Otn94ZKoY3CBRR5t+863pcxJb3mkkXN85Rp4N22+yQLCe1il08fN9mfhTVXY
giQnG0zv0e4aWcsnWv+mhCHEQcAQAzqEmsxCYLZeIBp4/Bu+lsmdXcBWJ0G4lRNY
6JM5QqsmgyAJAbIpBkZBTF2HuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE2TUKWb
7cbOid9P4Ul209zpcqP3MB8GA1UdIwQYMBaAFO6oroDXE+ayLbDsYJFX8MWaUv1/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCNy8xQzE2NjQxQzFE
OTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVySXRzT3hna1Zmd3hacFNf
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdxaXVnTmNUNXJJdHNPeGdrVmZ3eFpwU19YOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQ2QjcvMUMxNjY0MUMxRDk3MTFFMjk2RDAzMDgwMDhCMDJDRDIvMkFDRjlFMEM4
NTVDMTFFQjhDMDc2MDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHLfBowDQYJKoZIhvcNAQELBQADggEBAIzy151tcYoADAZW
r5G6Dc4HZ3Nq4xlLtzKebwcncUG4bS36zpeBfIhPVbfSGXBrQUZz1lRvXoKZvMzc
Vb58GT2n3V6OAjdznIVY/IQ43YoO5lWYuM6JPmZs5TLNIs+DL/VlQKf4xPwKH2ju
lbHpp0DfpUz7v4aV7JsKXESwtUg/400gAqCYvjyGsMe+0sQIjyprre/NzFUqu4v5
FMj05dGRia48YM7poZ96Ux4y4XxzXp45v8/K7YyvSpBrspu1eH6ziboUVAI+Dlh0
KHzh15gWiVMU07HQpGFpWaQWHdFh7TPwacPSlOu4pjh7bpWEfXINCBfF10cXYv2I
Djd9JaI=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:03:12 2026 by rpki-client