
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/35A4EFE0D75511EF80E68A39C4F9AE02.roa
File: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (raw, json)
Hash identifier: w9Hm03eT/l3NaX+cWE9OYZMWae4MoDDL8yDbbkk4nA4=
Subject key identifier: 20:4C:C7:D9:71:40:98:FE:43:B1:C6:C5:31:CF:2B:2A:85:A6:B5:3E
Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial: 07C8
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/35A4EFE0D75511EF80E68A39C4F9AE02.roa
Signing time: Mon 06 Jul 2026 22:23:21 +0000
ROA not before: Mon 06 Jul 2026 22:23:21 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4785
IP address blocks: 2401:e9e0:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1992 (0x7c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Validity
Not Before: Jul 6 22:23:21 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4c2ad9-8860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:54:34:bf:59:7f:f2:17:99:b9:29:85:37:
b9:db:45:32:1e:17:50:0d:82:ee:c2:a5:b6:8a:36:
fd:f1:16:fc:e2:01:cd:9f:2a:8f:a3:ef:30:43:94:
03:30:48:74:85:39:a7:e7:2e:14:f5:c9:dd:ab:50:
01:27:76:82:6a:5f:1c:bc:16:0b:fe:89:e1:9d:5b:
01:bd:f0:c5:df:1d:fa:d8:00:0f:e5:c9:26:86:9a:
b6:2c:21:5d:ae:2a:5b:68:99:fb:5b:cb:d1:84:99:
fd:88:25:3f:fc:e3:e3:9b:da:55:ca:91:33:94:8a:
c2:e2:23:ae:05:dd:e3:37:e8:28:03:1f:34:9e:ab:
65:9a:7f:da:eb:92:33:37:e7:98:09:22:92:8b:53:
5a:9e:da:14:66:01:e7:fd:06:f6:d8:a3:2d:55:09:
b0:ff:3f:87:88:39:5c:1c:3b:af:a1:0d:d4:52:4c:
2e:de:eb:f9:83:d2:0e:82:83:e8:90:92:f8:d8:b6:
52:82:63:f6:0c:98:61:46:5f:98:1c:b1:19:8c:96:
77:e1:a5:f3:b0:d6:85:30:c9:a1:56:42:56:78:ed:
fa:f3:d1:7b:18:bc:65:09:6d:f2:01:9a:27:93:4e:
61:84:2d:08:c4:74:3a:dd:fd:2d:56:ed:3d:65:b2:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:C7:D9:71:40:98:FE:43:B1:C6:C5:31:CF:2B:2A:85:A6:B5:3E
X509v3 Authority Key Identifier:
keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/35A4EFE0D75511EF80E68A39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:e9e0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
4a:4d:ed:5e:be:74:a3:8b:12:38:de:07:95:00:cd:7b:00:9c:
b9:49:04:e9:e7:66:a6:8c:a5:05:c2:63:74:11:45:f4:dd:1e:
e7:b9:09:cb:8a:3f:8c:42:79:a6:c7:5f:bf:41:48:98:43:07:
9c:f1:40:d0:4c:3b:99:fe:f1:49:c1:e8:3c:34:a3:98:93:1f:
84:a2:df:81:3b:3f:78:63:bd:c4:d3:28:51:bf:b4:50:bf:41:
24:4a:e0:af:6f:d0:1c:21:0f:c7:21:4f:12:fa:86:1a:b1:c6:
09:58:e0:aa:18:87:d7:2a:15:7c:3f:95:1f:74:14:ac:24:52:
61:36:91:b5:b5:99:fa:d0:bb:62:86:1d:fe:5e:de:78:92:1a:
e4:ad:2c:c3:01:09:69:4a:1f:93:b9:7f:a5:47:52:db:bd:af:
72:eb:5c:ae:37:68:d0:8e:ab:f4:36:d8:b8:20:c7:c9:8f:08:
6b:4c:a2:5f:74:69:ba:9f:b5:a0:68:ec:e1:b0:0a:6f:2c:28:
13:f8:dd:b9:10:af:6a:ab:e0:46:47:90:26:6e:3a:96:67:70:
f2:2c:2b:6d:04:65:62:b7:45:7f:1e:12:98:2a:20:6e:55:b5:
16:fb:70:78:9b:55:17:82:82:f9:ee:b9:ce:5f:18:d3:8b:f6:
82:1d:12:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:06:55 2026 by rpki-client