
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/BAA1B454654411EFACBF7956C4F9AE02.roa
File: BAA1B454654411EFACBF7956C4F9AE02.roa (raw, json)
Hash identifier: AgfhIRT1yYkIco2yAsi5bYKv0pG9DAUzOwIf702NGHE=
Subject key identifier: 7B:00:F7:98:FF:1C:17:49:BC:25:3A:95:94:83:56:F0:9F:CE:0B:A2
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 05BB
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/BAA1B454654411EFACBF7956C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:51:33 +0000
ROA not before: Wed 03 Sep 2025 00:15:38 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 8888
IP address blocks: 2403:fa40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 23:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1467 (0x5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: Sep 3 00:15:38 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47ca4-621f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:bc:48:1a:1f:2f:5a:6f:ce:b5:f9:0b:a4:
71:ce:8e:b6:f5:d0:38:67:92:50:1b:69:0f:82:95:
5f:9f:7c:5c:7a:90:23:cf:33:d9:eb:ed:ac:22:22:
0c:7f:24:6c:5e:a2:59:81:6e:d0:cb:3e:d0:73:76:
d4:14:52:4b:1e:40:6b:27:86:71:9f:88:d4:3c:43:
58:b9:9e:c2:cf:74:cb:d3:e7:bf:c2:a3:2a:45:bf:
d1:32:16:7a:c9:eb:a3:30:94:d3:ff:77:ba:b6:7e:
44:17:f3:b0:14:6a:54:79:7e:62:24:81:62:95:bb:
a5:56:b6:78:ac:43:3d:d5:f4:61:79:c3:bf:e2:6c:
6a:f7:ac:5e:ec:7c:8a:3e:f0:ab:6c:4d:20:e6:30:
0b:a7:22:20:94:7d:01:09:3c:89:10:e4:93:5a:46:
f9:14:c9:5a:a6:1f:31:62:d9:76:71:14:0c:83:8b:
67:52:3a:27:80:f1:fb:43:24:58:87:cc:e4:93:c7:
93:a3:88:17:fe:0a:0b:f4:b4:1c:1f:a8:e2:83:6e:
53:e5:c7:0a:2c:f1:7e:0c:6b:88:9a:21:a2:b9:be:
65:4e:5e:dc:98:d5:a6:a9:1a:ef:34:16:9c:5d:d3:
2d:74:90:ec:50:08:b9:9c:ee:49:42:f9:21:05:6e:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:00:F7:98:FF:1C:17:49:BC:25:3A:95:94:83:56:F0:9F:CE:0B:A2
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/BAA1B454654411EFACBF7956C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:fa40:2::/48
Signature Algorithm: sha256WithRSAEncryption
b0:c4:6d:eb:8c:a8:3c:bf:a6:e2:14:4c:a5:5e:f2:c2:ec:a0:
3d:bd:ce:91:97:09:7b:50:50:39:f4:37:a8:43:a6:32:2f:a6:
38:5c:a5:06:8b:bc:59:2e:ad:3a:d2:21:bd:6c:d3:65:f7:9f:
62:7e:8c:34:4f:b4:8a:aa:e4:02:7d:e4:8a:46:99:11:2d:5b:
b1:2c:83:47:e2:60:a7:a7:2b:cb:87:2a:d9:ff:cd:e5:f1:cd:
ea:24:c5:77:5c:0a:2c:16:1f:0b:05:3c:5f:db:64:76:49:b1:
e4:5a:0f:a7:0b:eb:d6:b7:91:ed:57:16:dc:1c:9c:58:95:89:
e7:45:b3:f1:85:5b:f9:92:86:49:de:22:b6:59:0b:ae:e6:b7:
de:d7:fc:7d:98:4c:08:89:4e:49:84:c2:6f:2a:87:7f:43:a7:
0d:6e:12:d6:0a:4a:5b:be:c9:a9:45:85:23:31:6c:83:ce:1d:
de:93:53:93:f3:69:4a:21:a3:4c:15:03:32:8c:6f:f7:f9:5f:
ad:6d:c7:28:ce:32:a4:e0:89:0b:b0:f8:37:02:f0:73:73:da:
61:4e:79:55:25:11:d7:3b:6b:12:ad:89:c9:85:19:42:d2:bd:
83:51:d8:1f:45:53:9a:fb:d9:85:8b:8d:80:68:66:e1:1f:65:
20:3d:30:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:58:15 2026 by rpki-client