
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4CE6CCDCEB8611F09362151A546F56BC.roa
File: 4CE6CCDCEB8611F09362151A546F56BC.roa (raw, json)
Hash identifier: oCnqT/MWdy3txv7rRzT5IvswpklSzeOYiJQpoqrq3fo=
Subject key identifier: 21:B2:BF:04:EF:67:EB:96:29:C7:7B:95:7C:94:BC:40:62:1C:9E:F5
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3108
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4CE6CCDCEB8611F09362151A546F56BC.roa
Signing time: Mon 06 Jul 2026 16:19:05 +0000
ROA not before: Mon 06 Jul 2026 16:19:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142169
IP address blocks: 192.26.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12552 (0x3108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd579-7cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:d7:0b:75:88:4e:3b:7f:bf:e7:84:fd:62:
c5:9d:9d:82:e0:d4:59:c7:af:57:90:28:63:d3:d8:
4a:f2:9d:e2:e9:d7:db:c3:24:15:72:45:86:b7:06:
5a:64:99:c5:77:2a:76:7a:3e:c7:fc:bd:c9:9b:e7:
0b:0b:1b:a9:45:ce:57:48:8f:1e:74:f7:0b:5f:d6:
83:fc:f5:00:fc:bd:7d:11:4e:7b:41:1d:a4:b8:d6:
f4:ef:ee:ff:fc:8e:0e:62:a3:5c:e5:72:53:5b:cc:
90:51:6c:a6:69:56:56:01:85:3f:5d:df:81:9a:9e:
5e:c4:2b:25:56:52:4c:99:59:ca:72:95:77:7a:63:
f9:90:f0:4f:75:d2:e4:7c:a1:ab:69:08:02:4b:c1:
07:39:dc:94:be:d2:33:86:86:42:fe:bb:a5:9b:46:
07:f9:be:e4:e7:94:7a:67:8c:3f:5c:81:e2:11:9e:
60:dc:d8:5f:64:37:fb:3e:ff:41:7b:0c:6b:fa:aa:
54:86:b3:80:ce:7f:a7:e5:ba:6b:c2:94:50:f2:82:
0b:a2:77:16:93:4f:aa:24:90:9a:e6:1d:c1:3f:e2:
61:a5:b2:82:c7:b6:d3:4f:d0:56:a6:01:b6:c3:9e:
6c:70:e5:a7:6c:69:0e:60:59:1b:4e:e8:6f:17:32:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B2:BF:04:EF:67:EB:96:29:C7:7B:95:7C:94:BC:40:62:1C:9E:F5
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4CE6CCDCEB8611F09362151A546F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
192.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
53:df:2a:60:70:64:25:eb:35:74:79:32:0d:ee:b0:57:78:52:
b5:35:10:2d:84:34:bd:fd:94:96:e2:0e:20:5f:fe:0e:3d:de:
bb:1e:bb:b0:dc:e6:21:7c:5f:db:4f:e4:c0:c4:dc:8e:58:c6:
32:1e:8f:67:83:97:c5:b6:f6:4b:6b:2f:1c:35:72:8a:44:5d:
52:e7:2c:d9:04:d7:b3:09:1a:88:fb:12:e1:9c:83:db:49:16:
d6:0e:21:1e:59:b9:7f:13:2e:2d:80:da:38:69:75:20:c9:c2:
53:f6:16:5b:bf:30:70:e8:03:7d:02:c7:d6:ec:a0:20:ee:74:
48:3a:d1:dd:3f:85:ce:54:1a:08:a2:9f:af:71:66:71:fc:0a:
46:f3:b4:b3:f9:01:19:83:43:53:8b:38:ef:db:29:3c:91:72:
fb:9a:66:8a:1c:2b:56:ed:a1:a4:7f:68:fe:65:93:6a:8c:ba:
09:5f:0d:02:6f:5b:cd:1f:66:b7:6c:6b:6a:c3:5f:14:fc:93:
38:db:c2:29:50:69:65:0a:2a:7b:27:39:04:37:60:97:6e:ab:
a4:34:03:c2:8e:68:6d:37:e6:8c:ba:ab:29:d2:54:a0:d8:f4:
80:b2:0a:e6:92:de:55:97:f7:e9:92:ab:8e:64:17:51:29:9c:
73:2a:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:29 2026 by rpki-client