
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/BAA1B454654411EFACBF7956C4F9AE02.roa
File: BAA1B454654411EFACBF7956C4F9AE02.roa (raw, json)
Hash identifier: daXo2DmOXN6G+PHtlqM7SlytT+MtdjtgYiK4YJOI0z8=
Subject key identifier: A4:01:5A:5F:BE:4F:F6:F8:A9:42:CE:94:F0:1A:82:47:29:55:49:D0
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 063D
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/BAA1B454654411EFACBF7956C4F9AE02.roa
Signing time: Sun 04 Oct 2026 23:44:21 +0000
ROA not before: Sun 04 Oct 2026 23:44:21 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 8888
IP address blocks: 2403:fa40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 23:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: Oct 4 23:44:21 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac2e4d5-315d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:88:25:a9:5d:b6:01:e6:71:d9:17:24:b1:
99:bd:6f:70:84:30:d0:74:ae:bb:45:1f:05:e8:21:
82:f3:da:4e:f1:36:d8:4f:b7:0a:b0:9c:2b:a0:ee:
3a:7a:11:0c:16:2d:88:af:f2:a2:7e:63:14:94:3d:
d4:85:57:12:9e:5f:e6:d4:3c:9e:3b:60:4f:71:1f:
02:d6:23:a6:05:ee:5a:b7:99:df:53:b4:58:29:b1:
5b:af:5f:33:85:e0:10:82:73:c7:3a:c3:e4:51:22:
57:b7:e9:54:9e:c7:d0:78:c8:cb:95:97:cf:59:eb:
65:57:6b:ef:90:4d:28:02:39:78:de:54:95:31:48:
56:c9:33:67:0b:8a:03:74:ea:a7:38:ef:0f:f3:8e:
b6:11:ac:0d:8b:d7:ca:37:32:7d:c0:c0:16:39:a3:
c5:14:f8:75:4a:78:0c:78:79:a9:c3:3a:02:93:7a:
bf:69:2c:9c:ad:02:85:f1:f7:20:dd:3a:3c:62:da:
a8:c4:4d:87:c5:e4:18:3c:f5:57:df:f9:d0:c8:aa:
42:29:ca:31:e8:77:c2:f5:ce:d6:3e:72:3d:0e:aa:
8c:ca:92:7d:ed:a2:bc:3b:70:f6:0a:43:43:f8:1e:
13:55:3c:9b:65:a1:64:f7:ce:80:f2:70:1e:79:85:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:01:5A:5F:BE:4F:F6:F8:A9:42:CE:94:F0:1A:82:47:29:55:49:D0
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/BAA1B454654411EFACBF7956C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:fa40:2::/48
Signature Algorithm: sha256WithRSAEncryption
76:25:91:42:89:1b:cf:80:bd:db:f9:39:79:57:ea:3f:e4:71:
fa:10:88:40:64:45:82:aa:65:4e:ac:39:ae:86:53:78:f8:31:
49:07:04:bf:30:96:04:03:eb:1e:e8:79:11:1b:4b:31:03:fb:
b9:bf:2d:f3:f2:2f:96:ea:00:36:ee:00:49:bb:6b:2e:36:16:
8b:25:68:0e:87:9f:ca:7f:5d:88:0d:c8:ce:50:8b:07:0d:49:
04:cc:b4:c8:5e:fc:11:71:e0:30:ae:2c:d6:b7:29:05:27:7b:
9a:e2:49:12:96:11:c0:af:63:85:c0:c0:f7:d9:78:68:0f:79:
29:13:64:89:6b:0c:b6:1d:a6:58:5f:c2:72:e0:c3:a4:bd:47:
dc:b0:d8:3a:6d:04:29:7d:8b:05:36:ff:0d:b1:50:fa:c2:47:
08:3d:a1:44:fc:85:da:14:5a:dd:a0:39:a8:b3:a5:aa:f2:1e:
2f:a8:9a:43:44:9c:43:14:e0:cf:01:19:3e:6e:c1:59:14:91:
ce:31:7d:7b:f1:0a:3d:7d:24:7a:d4:73:ac:4b:69:21:10:29:
ca:2f:a6:20:96:c0:2d:dd:56:b8:a5:73:1d:56:c4:6c:91:ec:
18:75:74:e7:31:6d:86:bd:de:67:3c:fb:e7:2e:45:5d:f6:ee:
db:3c:0b:bf
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB
N0U1QTU1MzcwHhcNMjYxMDA0MjM0NDIxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMyZTRkNS0zMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BaIJaldtgHmcdkXJLGZvW9whDDQdK67RR8F6CGC89pO8TbYT7cKsJwroO46
ehEMFi2Ir/KifmMUlD3UhVcSnl/m1DyeO2BPcR8C1iOmBe5at5nfU7RYKbFbr18z
heAQgnPHOsPkUSJXt+lUnsfQeMjLlZfPWetlV2vvkE0oAjl43lSVMUhWyTNnC4oD
dOqnOO8P8462EawNi9fKNzJ9wMAWOaPFFPh1SngMeHmpwzoCk3q/aSycrQKF8fcg
3To8YtqoxE2HxeQYPPVX3/nQyKpCKcox6HfC9c7WPnI9DqqMypJ97aK8O3D2CkND
+B4TVTybZaFk986A8nAeeYV1BQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKQBWl++
T/b4qULOlPAagkcpVUnQMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF
QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU0QjcvRUIzMTJGMDIxRUFBMTFFQ0I3NTZCRjMwQzRGOUFFMDIvQkFBMUI0NTQ2
NTQ0MTFFRkFDQkY3OTU2QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAP6QAACMA0GCSqGSIb3DQEBCwUAA4IBAQB2JZFCiRvPgL3b+Tl5
V+o/5HH6EIhAZEWCqmVOrDmuhlN4+DFJBwS/MJYEA+se6HkRG0sxA/u5vy3z8i+W
6gA27gBJu2suNhaLJWgOh5/Kf12IDcjOUIsHDUkEzLTIXvwRceAwrizWtykFJ3ua
4kkSlhHAr2OFwMD32XhoD3kpE2SJawy2HaZYX8Jy4MOkvUfcsNg6bQQpfYsFNv8N
sVD6wkcIPaFE/IXaFFrdoDmos6Wq8h4vqJpDRJxDFODPARk+bsFZFJHOMX178Qo9
fSR61HOsS2khECnKL6YglsAt3Va4pXMdVsRskewYdXTnMW2Gvd5nPPvnLkVd9u7b
PAu/
-----END CERTIFICATE-----
Generated at Wed Oct 21 19:45:14 2026 by rpki-client