
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/16D4DB82A40E11EEAAB83671C4F9AE02.roa
File: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (raw, json)
Hash identifier: EDSyywAlth0253L1QQ+IqMEAMKfmaNqjJ/pES0YetTA=
Subject key identifier: 66:E7:FB:B2:25:62:02:76:47:6C:E6:8B:A0:FC:01:B5:64:84:AD:53
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 0638
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/16D4DB82A40E11EEAAB83671C4F9AE02.roa
Signing time: Sun 04 Oct 2026 23:44:11 +0000
ROA not before: Sun 04 Oct 2026 23:44:11 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 23734
IP address blocks: 2401:df40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592 (0x638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: Oct 4 23:44:11 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac2e4cb-9483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:f9:d4:22:8a:a1:d9:b8:a9:b9:a5:2c:45:
af:ae:5c:8c:db:2d:c7:b7:36:74:d2:d6:2d:7b:39:
b7:ac:60:3b:c4:9d:99:86:cf:dc:59:7e:00:58:e1:
dc:3f:52:2e:7c:c5:5a:f4:45:cc:d2:aa:66:0a:7a:
2a:59:84:8d:c8:28:06:ad:c1:eb:15:cf:7f:ca:50:
60:9f:2b:53:cb:d8:4f:79:40:41:40:02:28:93:cb:
b3:21:6e:b3:c1:b6:77:33:f4:9f:c1:25:18:c4:d6:
71:dd:8e:0d:bf:0c:4c:8a:36:92:31:e3:8a:52:7d:
99:e1:81:0d:56:96:e0:ff:b8:11:e0:75:c9:1c:fd:
de:66:f1:c9:de:45:35:a9:c5:ed:1d:97:a6:6d:5c:
2d:7c:b4:ff:d6:aa:2f:27:da:d3:fa:02:8f:65:db:
76:6e:8f:10:4b:a2:85:b3:f8:8d:71:10:9b:c5:89:
0b:56:7d:38:a6:de:ca:33:fc:d1:51:ab:27:5c:a8:
30:cb:70:44:f6:cd:70:5e:64:87:6d:47:74:80:ad:
d9:72:d9:fd:1e:34:07:18:b5:a4:f4:25:1a:a2:d4:
6b:42:38:8e:10:c1:43:3d:43:20:ba:8c:18:9c:4b:
e6:da:12:b6:bc:4b:cf:0c:b8:b4:fc:4b:25:3d:7a:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E7:FB:B2:25:62:02:76:47:6C:E6:8B:A0:FC:01:B5:64:84:AD:53
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/16D4DB82A40E11EEAAB83671C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:df40:1::/48
Signature Algorithm: sha256WithRSAEncryption
87:26:8b:ca:56:82:10:90:9e:05:b1:c7:52:63:d9:f6:c5:44:
77:0b:b2:1e:52:be:19:6b:b1:81:ef:c8:de:8c:da:36:6e:20:
cd:76:a1:9b:27:aa:99:d4:74:67:d7:c4:7c:ce:37:4d:ea:72:
27:0c:42:32:e3:1d:78:42:ef:cf:64:a3:75:bc:00:c3:4d:84:
47:cb:db:3a:b4:4d:1f:66:38:90:8e:61:07:e4:74:c0:39:68:
d6:c5:da:e8:d0:82:43:50:3e:e0:ae:da:9a:31:cb:6a:ab:a3:
74:e8:2f:83:4e:45:ca:05:db:c0:fc:5b:3d:59:52:94:b2:da:
a3:8d:43:53:78:99:7c:e3:ea:fb:86:30:7a:d2:0a:a2:f0:1c:
12:47:15:70:6d:ee:87:e5:ab:dd:e6:cc:c5:04:56:0b:62:27:
d6:79:bb:a6:70:c3:96:37:40:c0:55:e5:e7:ce:4a:a7:33:be:
d0:3d:40:96:66:0d:c9:f6:70:a4:a7:19:53:91:60:cb:8b:bf:
0c:a6:6e:5e:51:91:6b:d3:e4:25:8e:11:7c:fd:d4:07:ec:f1:
92:97:e9:b5:dc:0c:88:39:07:c1:4c:b8:78:9f:8b:b8:46:d8:
ae:2e:81:de:ea:bd:25:f8:e3:67:40:1b:2e:32:c5:0e:8c:8f:
97:f1:44:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:44 2026 by rpki-client