
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/42A767BE92E711F1A9AF51EC6611F970.roa
File: 42A767BE92E711F1A9AF51EC6611F970.roa (raw, json)
Hash identifier: xjxAflx6EC3Vav9wSDndPnjp+6X51gekKJAVPhXjF1A=
Subject key identifier: D8:D9:17:69:72:EA:46:9E:66:0D:54:A9:49:3A:42:8B:54:2F:E1:84
Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Certificate serial: 018B
Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/42A767BE92E711F1A9AF51EC6611F970.roa
Signing time: Sat 08 Aug 2026 05:08:58 +0000
ROA not before: Sat 08 Aug 2026 05:08:58 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 59210
IP address blocks: 223.26.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Validity
Not Before: Aug 8 05:08:58 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a76b9ea-b99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:1e:8a:81:c2:07:72:ad:cc:42:17:2d:98:
15:55:e6:6c:bf:61:0a:b7:a7:a6:ad:4f:dc:1b:f1:
3f:ff:1b:93:f2:16:b2:3e:27:15:f1:d0:cc:8f:a4:
c4:76:9b:fb:03:dc:c0:b3:b8:7d:87:20:ce:f1:53:
2b:e6:19:83:4e:7f:80:55:d7:f9:70:d7:b6:1f:5b:
09:c2:d3:63:41:15:57:ef:51:8b:99:70:d9:38:73:
97:bd:c9:f5:f7:11:c9:ed:98:fd:fa:08:57:61:3f:
e0:f3:d6:29:e8:e1:39:bc:96:42:01:fa:58:db:6d:
56:72:87:ea:31:24:02:d6:41:9e:e1:52:81:6c:78:
62:bc:5a:36:87:64:a3:84:90:83:dc:b2:0a:b3:b0:
eb:34:08:2e:79:92:86:4b:24:53:a5:e7:af:eb:b6:
59:9d:29:f0:62:f9:95:14:bd:73:61:96:60:b4:72:
15:66:8b:9f:9b:77:38:a2:77:31:d8:7a:8c:e7:86:
a6:17:42:7c:ab:05:80:fd:99:9f:09:8b:32:1c:c7:
6a:88:2c:fb:d7:25:b4:00:a0:5b:3a:fb:c3:4c:d1:
e4:ec:f9:36:a1:a0:f6:2b:3b:6e:94:af:da:e5:c1:
1c:46:64:11:86:18:d2:24:6b:02:b8:aa:a1:d6:e4:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D9:17:69:72:EA:46:9E:66:0D:54:A9:49:3A:42:8B:54:2F:E1:84
X509v3 Authority Key Identifier:
keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/42A767BE92E711F1A9AF51EC6611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
223.26.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:fa:99:97:28:ea:9f:47:6c:c8:e0:75:46:4e:45:9a:14:07:
66:25:ef:02:6d:cc:f8:fa:7e:6f:5a:60:27:61:d4:29:71:5b:
74:08:63:aa:65:f7:33:74:93:dd:2e:b4:0f:c7:0f:b2:e3:12:
e6:83:99:2b:c1:74:39:5d:e1:63:77:3d:34:c2:cc:09:bf:aa:
70:b6:c1:9b:e2:c0:91:d7:2b:17:8f:94:84:6b:1c:7d:fa:61:
ed:6a:98:12:e5:a6:63:b8:ad:62:df:18:28:5a:ce:b3:ae:35:
3a:73:a5:b1:7f:71:dc:3a:1a:d2:39:e7:c6:6e:51:27:2f:d6:
cf:12:32:4b:b6:42:5a:e9:28:0c:29:b9:51:f9:d6:b9:91:96:
62:1d:68:d2:7f:46:7d:b5:61:76:ef:2e:2b:c1:6c:1a:66:34:
17:d1:b1:e9:55:45:23:6e:72:c8:26:e6:b7:70:b9:db:04:e5:
9a:53:24:d6:0d:47:be:30:5e:25:75:37:f7:ee:16:f6:60:1c:
6a:fb:53:67:79:71:68:31:61:cf:de:0c:54:17:b6:81:ad:5e:
64:32:a3:2c:f1:3e:e1:e4:11:95:c3:3f:32:89:f6:1a:3e:9b:
3d:2f:00:c4:e1:71:1d:f4:12:24:76:0f:da:3d:79:c3:43:9f:
32:bf:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:43 2026 by rpki-client