
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/D040E1BC16D311F18D1B19D1303D8C67.roa
File: D040E1BC16D311F18D1B19D1303D8C67.roa (raw, json)
Hash identifier: FW4iyNzwJYx2pnIdKFnPL+9FFZZIBrzKM+GhxItUIOM=
Subject key identifier: 28:0F:20:40:F8:30:9A:FF:5D:FC:9C:09:EC:92:A4:2E:15:04:F0:CF
Certificate issuer: /CN=A917FFCC/serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A
Certificate serial: 02
Authority key identifier: 50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/D040E1BC16D311F18D1B19D1303D8C67.roa
Signing time: Tue 03 Mar 2026 07:37:21 +0000
ROA not before: Tue 03 Mar 2026 07:37:21 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142256
IP address blocks: 198.15.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl
rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFCC, serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A
Validity
Not Before: Mar 3 07:37:21 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a68fb1-44db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:38:bf:e9:91:c2:6d:e5:e9:fe:e7:b4:b7:
ae:0d:7b:d6:6b:8a:9e:99:d7:89:d0:bf:df:aa:8c:
02:cb:16:8e:f8:79:f3:f4:12:75:f5:ac:a0:5e:c1:
5a:73:15:19:f0:b9:fd:f4:03:8d:5c:a7:42:3c:4c:
bf:1a:ab:93:38:e3:9d:da:fd:a0:fa:0e:36:c2:ed:
c6:44:69:4a:c4:23:f9:fe:59:83:3f:11:1f:b2:79:
e0:51:f7:1b:db:19:2e:8f:cf:7b:52:c5:fc:27:d1:
d5:ee:ed:a8:0a:fb:0c:74:d1:a2:2d:a0:08:3e:b6:
68:0b:70:b2:73:41:65:16:e4:9f:2c:53:b5:82:4f:
10:0e:e0:47:33:8e:b5:b3:ff:1a:c8:a3:eb:d1:51:
82:20:75:68:02:bf:f6:cb:74:70:78:89:d0:3d:9d:
11:6d:ee:90:53:7e:fb:08:3b:7a:13:04:b6:58:8c:
fd:18:4f:73:97:4d:c3:d0:6a:f7:31:f7:17:88:70:
9c:0d:c6:14:b2:64:d4:b1:76:2c:5e:e2:0f:51:5a:
63:61:fd:9d:72:1b:d1:03:76:ee:7f:00:1e:0a:f7:
07:29:c8:e5:ee:10:53:ee:0c:d9:28:6e:fd:b5:e4:
ce:ba:df:56:90:1c:05:4d:d3:fb:60:0e:55:97:68:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0F:20:40:F8:30:9A:FF:5D:FC:9C:09:EC:92:A4:2E:15:04:F0:CF
X509v3 Authority Key Identifier:
keyid:50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/D040E1BC16D311F18D1B19D1303D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
198.15.26.0/24
Signature Algorithm: sha256WithRSAEncryption
86:5d:b7:9e:05:80:9c:0b:67:7e:7b:d7:d9:2b:29:37:12:3b:
ed:ea:e6:df:ca:44:81:b0:43:03:cc:1c:ff:be:2e:37:d4:ef:
6c:79:cc:f2:be:a2:b1:76:08:4e:cd:27:ff:92:8d:75:29:62:
0a:f4:db:88:df:2f:3f:a4:ad:5a:d9:66:aa:89:09:99:f4:f5:
e0:e7:91:90:b9:23:b7:22:d3:c6:40:89:06:3c:b5:46:06:9e:
5e:0b:b2:8c:2e:3b:90:f2:0c:71:b4:ef:d2:9d:05:bf:65:59:
42:23:8c:8f:f3:50:2b:fc:eb:b6:06:05:3f:cb:da:31:05:f5:
eb:1f:77:09:53:ae:b9:c4:ee:b9:17:33:fe:5d:09:56:ae:f8:
f4:c0:a3:60:6b:50:d6:1e:8c:e6:5c:47:b3:fd:d1:a9:00:47:
e4:df:f7:ed:f3:7f:90:51:3a:11:f9:f1:6e:b6:23:70:94:33:
ff:81:75:00:46:a9:6d:b1:08:fd:90:44:ed:5e:4e:f5:92:53:
be:1d:5b:b3:c1:e6:b5:f2:ce:ed:6f:a6:0f:b4:61:5a:1c:f0:
76:95:8d:91:81:70:b9:25:19:b1:a3:b9:50:5b:6e:d5:a9:71:
13:8b:16:bc:c1:ab:be:ee:1e:01:43:c0:e9:b3:6f:28:0b:ae:
de:b9:e2:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 09:26:29 2026 by rpki-client