
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DF3B04368FC811F1AAB4C1526A11F970.roa
File: DF3B04368FC811F1AAB4C1526A11F970.roa (raw, json)
Hash identifier: VDT1jwCO2K93dhX6IiFjvNHpFvu64c/p4OIZe28bjhc=
Subject key identifier: F4:27:90:68:5F:2F:A4:D0:00:15:52:3A:67:1B:57:3B:DA:2F:51:38
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3279
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DF3B04368FC811F1AAB4C1526A11F970.roa
Signing time: Tue 04 Aug 2026 05:53:53 +0000
ROA not before: Tue 04 Aug 2026 05:53:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154763
IP address blocks: 161.248.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12921 (0x3279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Aug 4 05:53:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a717e71-e426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:75:57:41:80:ac:fb:f2:b3:58:10:e3:cc:
5c:f0:f9:40:bc:5b:71:19:77:8c:26:f9:70:82:77:
41:e6:01:f4:3a:c7:c7:ba:48:42:37:7b:ba:63:dc:
f3:98:0a:5f:12:9f:bd:20:20:7a:99:52:9a:c4:9c:
a5:da:65:ba:cb:eb:20:57:63:6a:ea:30:51:86:dd:
9d:b4:bc:f5:6e:bd:04:3f:d6:a5:d8:61:a6:08:30:
e0:54:fc:92:fb:ba:91:1e:68:eb:9a:de:1c:61:04:
98:89:68:48:66:68:68:d5:cb:d6:ad:29:98:15:47:
29:d6:66:f1:d6:d3:5e:67:bc:a7:38:a6:62:ed:d5:
00:e9:ae:8c:3e:36:33:de:4a:c9:67:57:7d:05:b5:
b7:64:d4:20:99:c9:cd:c9:97:db:26:92:fe:6e:d2:
d9:ab:76:e1:7d:48:5e:d9:77:7b:6a:67:42:23:1e:
6d:18:ef:03:e5:3b:ac:77:8d:dc:33:69:f4:c0:8f:
52:9a:f4:87:31:63:72:bb:fb:24:58:97:1a:d8:36:
3a:4e:55:2c:df:d9:26:fb:c0:37:34:3f:2e:75:aa:
0b:1d:7a:90:b6:f5:27:a6:ae:27:a3:8a:5f:43:11:
1d:9d:87:82:79:35:dc:3a:24:d3:37:95:fb:76:9f:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:27:90:68:5F:2F:A4:D0:00:15:52:3A:67:1B:57:3B:DA:2F:51:38
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DF3B04368FC811F1AAB4C1526A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4f:f9:58:a4:cf:6e:6a:f3:1b:6d:a9:09:f5:65:14:91:2f:
09:98:35:fc:bf:8b:5d:01:5a:53:c6:ba:e7:4b:cf:e1:5c:3c:
cd:ca:36:45:34:d4:c4:65:3d:75:74:6e:63:59:79:28:e0:ef:
9e:1f:cc:8c:c3:99:53:8d:2f:62:ec:96:c1:f2:a3:b4:2a:a2:
ff:bd:13:e2:44:53:70:d8:93:3e:5e:bc:56:41:19:62:3d:2c:
9f:1e:77:9e:97:e3:63:02:cf:4f:8f:1a:1d:59:f7:59:2f:0b:
3c:22:5b:b0:71:08:e3:0b:33:09:cd:f2:ab:02:26:24:59:61:
ad:78:51:c0:4d:95:54:f2:14:06:9e:b4:60:a9:c6:97:ae:fc:
11:09:d1:46:0e:2c:55:9d:15:65:43:34:e8:8c:40:39:92:fe:
01:ea:8d:6c:0a:c2:fb:d9:e9:5b:1a:6f:62:ff:5a:8a:86:6c:
fb:9e:ce:8a:f0:7b:a8:a4:d3:0b:bc:32:25:81:f9:3c:08:49:
3e:c1:e7:26:af:38:cd:e0:c6:0d:61:89:1a:ca:08:8e:db:36:
f8:86:29:21:2f:4d:23:d6:1b:07:79:fd:97:9d:74:9c:71:0c:
3e:e4:ae:26:f1:01:c3:43:32:01:b9:a2:80:44:88:6d:ed:46:
63:54:97:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:25:38 2026 by rpki-client