
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa
File: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (raw, json)
Hash identifier: G8kBRXUINhmK1BEGA+CD+TtgVRm76ATww07KdVkSsBQ=
Subject key identifier: F7:E7:2F:B1:8F:E4:5A:38:3E:47:B1:90:7B:60:D1:83:BF:FB:E3:A3
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 18BE
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa
Signing time: Thu 04 Jun 2026 17:20:02 +0000
ROA not before: Thu 04 Jun 2026 17:20:02 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 9263
IP address blocks: 203.198.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6334 (0x18be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Jun 4 17:20:02 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21b3c2-7406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:6a:3d:bd:08:9d:4f:6c:c7:67:34:1c:c3:
b6:ab:0c:d1:e8:31:b2:b2:fa:95:cb:69:82:9b:fb:
c3:8e:15:7e:b2:e9:10:7f:6f:8b:7c:c2:e7:1a:55:
f3:04:ec:c4:f5:3b:aa:2a:9b:fd:1c:31:63:17:54:
2c:bc:ab:f9:fb:4b:62:a7:f6:13:6a:35:2d:77:cb:
b7:d8:bb:b3:9b:a0:03:4d:e2:69:f0:80:55:62:53:
b8:2e:f0:19:24:02:ba:b1:92:b8:42:ed:8a:cf:71:
8f:1b:91:c6:94:18:d8:21:0e:1a:25:dc:24:b5:12:
6c:ae:0f:a1:17:34:58:3c:20:07:69:b5:d6:82:ff:
e9:fb:1e:2b:69:38:a1:2a:ca:1d:80:e1:c1:b3:5e:
f7:e9:82:a8:e9:67:88:65:77:6a:9d:c9:1c:a3:e9:
6a:e5:57:3d:5d:9d:11:a4:23:ee:9e:52:03:8f:10:
c8:39:8d:d0:23:f8:dc:26:8f:c2:60:45:44:ba:6e:
fa:8e:e1:b1:9c:00:8c:f5:b2:37:e6:13:fd:6d:91:
6a:ca:c8:4e:52:2f:50:fc:08:e3:39:9b:c1:cb:9e:
9e:61:8d:ec:78:c5:2b:51:53:bf:0c:2a:2e:ee:10:
83:9e:82:6c:99:77:e0:08:4a:7e:33:ec:08:cc:b0:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E7:2F:B1:8F:E4:5A:38:3E:47:B1:90:7B:60:D1:83:BF:FB:E3:A3
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.198.168.0/21
Signature Algorithm: sha256WithRSAEncryption
70:93:78:a9:b7:fa:27:c3:a1:36:e8:1f:25:18:f0:6f:92:7e:
09:ae:ad:26:19:f7:3f:27:9e:04:80:42:05:9a:bb:26:8f:b4:
ce:57:ef:68:ef:c1:1c:1f:c1:02:10:c7:7c:45:f8:c1:bf:7d:
24:7c:91:81:f2:c4:bf:98:83:30:aa:65:5e:4b:86:50:db:ba:
e6:92:08:f2:44:eb:f1:1c:2d:c5:67:83:e8:91:72:d1:87:4c:
d3:10:16:51:11:cf:00:ec:7c:ea:0c:9d:4e:4d:99:22:2e:4a:
b9:a9:96:7f:34:3a:99:ff:dc:85:9f:7d:06:51:de:67:f3:9a:
24:f6:90:6a:43:1e:96:e7:dc:28:ab:04:3a:2f:d3:c3:76:a0:
a2:40:65:80:da:68:e2:9d:d6:0f:0d:d0:89:ab:ec:dc:cf:4b:
87:29:0e:f0:9a:17:74:2e:63:87:c5:b3:6b:0c:b7:2f:3b:d8:
83:97:c5:4c:4d:c5:6d:f2:49:d0:81:63:72:1e:c5:bf:e5:c3:
7a:48:24:37:9f:81:62:6d:28:97:bf:dc:a2:1b:8a:24:ba:3c:
eb:a6:6b:d3:c5:4e:db:3b:28:0c:ae:dc:06:55:3b:e6:91:4c:
c0:64:ba:de:ab:e4:eb:3f:f1:b7:5c:b4:ca:fc:94:a7:68:9a:
80:b4:9e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:14:39 2026 by rpki-client