
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/CDEDB7B4718811F08D1AD867C4F9AE02.roa
File: CDEDB7B4718811F08D1AD867C4F9AE02.roa (raw, json)
Hash identifier: 3kNEG+TMEWYQBcCADuZYRcdhn9u3KxSqwbCTd2l6VRI=
Subject key identifier: 2A:9F:A1:EE:55:2A:8B:42:97:47:79:19:4F:48:7A:A9:6C:7F:EB:A2
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3B7A
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/CDEDB7B4718811F08D1AD867C4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:22:49 +0000
ROA not before: Thu 20 Aug 2026 16:22:49 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 131711
IP address blocks: 2402:1d20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15226 (0x3b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 20 16:22:49 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a8729d8-4a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:82:98:95:91:e4:27:53:e4:73:6c:96:17:68:
cf:1b:89:d1:2c:e3:c3:6d:11:8e:e6:96:94:8e:9e:
2f:1d:64:2f:08:e6:14:d6:26:b6:52:77:f1:e9:96:
ae:9c:11:5c:2f:c4:eb:72:ad:e2:2f:bd:ad:d8:8e:
35:23:6b:68:2a:47:fc:5d:d2:2a:fd:6a:44:8a:03:
df:ef:3e:68:e3:1f:53:c4:c6:f2:81:54:12:d8:5e:
36:3e:a8:c0:d2:fc:a3:0b:51:f1:79:3e:cc:6a:6f:
c4:5b:5c:2f:94:72:02:fb:0b:6f:98:30:02:7f:fb:
d7:af:65:42:d1:68:46:f6:12:53:24:7b:4d:f5:88:
f8:62:82:9a:7b:ac:28:76:e0:cc:8f:41:8e:ed:98:
43:5c:2b:28:03:59:29:c3:58:51:1f:76:a0:2a:9b:
f6:0b:c7:6e:d9:79:d9:da:8a:03:d7:98:04:b4:71:
e4:ee:4d:08:26:ee:94:e2:7c:a3:c3:49:9d:be:3d:
77:25:0f:4c:1c:cd:0c:8b:2a:8e:b6:63:9c:f8:88:
17:d0:6b:60:d3:b6:ad:e4:34:a2:b4:d4:5b:a5:5a:
ea:bd:7f:4f:62:99:37:1b:e3:9c:d7:6f:77:bd:f2:
e2:30:6d:00:03:ac:67:4e:10:fb:ba:e2:6b:9e:49:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9F:A1:EE:55:2A:8B:42:97:47:79:19:4F:48:7A:A9:6C:7F:EB:A2
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/CDEDB7B4718811F08D1AD867C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1d20::/32
Signature Algorithm: sha256WithRSAEncryption
2f:c8:7f:8f:e0:17:47:f4:7c:ae:de:42:34:dd:eb:8f:57:ff:
a5:3f:ce:16:b1:a2:c7:fe:60:3f:e8:54:c2:b5:11:fd:36:43:
49:39:b5:63:15:47:9d:8d:fb:25:2a:68:95:3c:56:3a:34:d9:
21:4c:5e:de:f5:89:45:fc:26:97:b2:1f:1f:f5:86:70:7a:47:
2a:05:23:c5:6f:e5:1f:ed:a0:6e:83:f1:d8:55:16:71:7a:23:
6a:43:b8:23:f2:a4:a0:1f:6b:e9:43:84:f4:dc:91:1f:d8:6d:
40:4e:eb:27:7d:2a:6c:00:cc:06:16:7b:6f:72:49:88:d9:a9:
f6:ae:ec:f9:f2:7b:fe:c2:c6:42:e1:be:f9:1b:51:d1:3d:0e:
a7:1c:2f:d1:50:fe:f3:80:3d:05:21:da:b5:35:40:85:1f:dc:
1a:7c:6f:18:bd:73:88:90:25:18:bd:d7:75:bc:f7:39:7e:76:
f6:0f:e4:e2:88:67:fb:eb:11:9c:55:10:2f:b6:ec:5b:4b:ef:
41:41:16:0f:c9:60:c7:9a:05:65:df:2c:0e:e6:5f:e3:0f:fd:
5c:b0:d2:22:44:f6:21:d8:95:bb:dd:be:79:7f:93:36:85:b5:
4c:92:66:ee:1c:1c:d8:f9:4e:19:39:d4:c8:76:69:2b:ff:e7:
51:6d:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:01 2026 by rpki-client