
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/FDA89E2CA33511EBA984863CC4F9AE02.roa
File: FDA89E2CA33511EBA984863CC4F9AE02.roa (raw, json)
Hash identifier: We6jmeEEyT0HEMr/GY7jQ9dR91pmG5jYjCWmk5TFv3Q=
Subject key identifier: DB:65:58:57:7B:11:3D:CF:E1:FC:2C:27:44:A4:09:B0:73:A0:5D:5C
Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial: 1829
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/FDA89E2CA33511EBA984863CC4F9AE02.roa
Signing time: Thu 04 Jun 2026 17:19:43 +0000
ROA not before: Thu 04 Jun 2026 17:19:43 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 4515
IP address blocks: 168.70.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 17:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6185 (0x1829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Validity
Not Before: Jun 4 17:19:43 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21b3ae-6699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:83:a1:f9:d2:40:0a:e7:71:33:9d:43:7a:
73:8e:70:3d:20:7e:80:0b:e2:1b:16:f5:87:43:57:
12:05:71:eb:90:dc:f9:f9:6b:98:87:91:e6:3f:17:
05:35:88:3a:65:cb:a8:7c:94:3c:2f:f3:74:fa:bf:
8e:e5:23:b2:2c:1f:b8:da:91:d2:2c:50:16:76:ff:
95:d0:ba:06:73:8f:70:80:da:f3:5c:c1:54:4c:d9:
c7:05:08:63:ef:56:cc:ba:c4:1c:f1:57:92:63:90:
07:61:22:10:ef:73:77:20:81:c7:bd:58:b1:77:a1:
bd:86:3d:13:f0:e1:c6:89:68:c0:24:80:06:f0:05:
3d:89:a0:2d:e9:f8:98:72:cc:3d:bf:dc:55:aa:e7:
bc:70:53:98:1f:2b:d3:e5:87:ea:26:07:c0:97:c2:
e3:64:9a:de:57:08:f5:14:0b:30:e1:21:54:32:94:
20:ba:a9:17:dc:66:21:c8:ae:5e:65:99:a4:50:f5:
57:ac:bd:bd:56:89:4e:b9:8e:1a:a0:9f:fb:64:14:
11:fa:a4:42:a8:7c:29:b8:11:1a:9f:d4:b4:70:6a:
49:62:04:43:8d:e7:eb:f7:f1:dc:cd:9e:0d:d9:28:
02:34:5f:66:ab:0b:83:ce:8b:89:f0:0d:8a:63:8c:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:65:58:57:7B:11:3D:CF:E1:FC:2C:27:44:A4:09:B0:73:A0:5D:5C
X509v3 Authority Key Identifier:
keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/FDA89E2CA33511EBA984863CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
168.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:0e:09:08:dc:ee:68:05:de:98:05:e5:8a:b4:66:d6:c0:3a:
53:09:42:c2:88:2d:7a:51:2a:4f:c3:bc:bd:2d:93:38:e9:19:
d8:dc:0a:57:9d:a3:c5:12:41:0b:31:69:29:18:56:b1:05:93:
0b:5c:be:92:6b:f7:5f:98:c8:a2:f0:dd:63:69:ec:3a:cb:29:
1f:cb:94:d4:8f:79:dd:54:b4:19:c7:3f:fd:5f:23:c9:f3:6a:
4f:f5:2c:de:13:e9:f6:33:31:c0:37:89:6b:bc:af:b9:cd:01:
4b:32:fb:17:4a:3f:2b:d6:ce:28:82:43:e5:e4:f4:82:61:04:
21:3b:21:e6:32:3c:44:a9:12:fd:0d:98:4f:3c:92:80:2e:a2:
52:1b:7d:a5:14:4b:b7:4c:2d:3d:b7:a5:f1:be:6e:8b:0f:4f:
e6:4e:e3:12:40:4a:3a:44:60:30:3f:54:69:33:4a:ad:86:4a:
b8:55:f9:7b:39:a1:b5:3b:8a:68:e9:d2:48:41:bd:6b:fb:3b:
5a:76:32:c9:86:23:49:76:67:b7:32:2b:f3:cd:93:b8:13:ef:
54:af:0a:20:57:62:86:53:77:cb:1c:25:92:12:99:80:9d:1b:
0a:32:b8:a4:45:b0:bd:c0:e6:67:f8:80:b8:04:95:85:6c:87:
68:a8:a6:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:34:32 2026 by rpki-client