
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8CD3FB04478411F09233CC40C4F9AE02.roa
File: 8CD3FB04478411F09233CC40C4F9AE02.roa (raw, json)
Hash identifier: Hfad5E2sgKarsMWa3NlaG5y5msfGLY36KqTrfL+B3cE=
Subject key identifier: 82:37:B4:B8:86:8B:25:6B:5D:21:CA:D3:FD:8D:88:64:71:D8:F4:F7
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3235
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8CD3FB04478411F09233CC40C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:29:05 +0000
ROA not before: Mon 06 Jul 2026 16:29:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9730
IP address blocks: 164.164.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12853 (0x3235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:29:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd7d1-88db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:e7:c0:55:e4:f2:47:54:94:59:3f:63:68:
3d:72:55:14:12:37:c2:81:fc:ec:d1:39:35:77:f9:
50:f9:4f:3f:f1:e4:c5:f7:94:30:45:ad:f7:fa:54:
4e:64:ac:64:1e:a5:f3:00:07:d6:3e:eb:51:af:a5:
69:8a:37:74:f2:12:9e:6d:b0:3e:c7:c4:88:ae:e1:
90:7b:55:ea:8e:92:2f:ca:f5:b3:71:35:2a:a2:3d:
56:a3:82:ee:e1:0e:ed:41:a1:a1:cd:ea:5b:cf:3b:
cf:f0:6e:c4:63:ff:23:88:4a:4c:05:17:27:ac:a4:
d6:18:50:08:a9:ba:4b:8a:6b:21:dd:22:c7:15:08:
76:cb:c0:47:62:f2:ac:0f:4b:fc:99:86:a9:9b:71:
37:93:c4:96:48:0c:cc:d7:40:a0:ab:a0:c1:26:4c:
62:a6:0e:f5:fe:45:94:ea:f4:41:2f:57:aa:f4:ae:
5e:6e:bc:95:ab:34:a8:df:dd:6e:21:c8:54:fa:24:
3a:9f:21:a9:f7:ac:b0:dd:0a:56:4d:94:a5:9e:82:
ea:e8:41:d0:51:c5:0e:80:ba:06:6b:73:ac:c5:1a:
a7:57:cf:f7:b2:11:69:29:d0:fc:d0:8f:3a:aa:83:
14:76:89:47:d9:c5:4a:84:fa:a4:b4:34:fa:8d:cf:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:B4:B8:86:8B:25:6B:5D:21:CA:D3:FD:8D:88:64:71:D8:F4:F7
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8CD3FB04478411F09233CC40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
164.164.121.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f8:12:5c:f0:c0:bd:10:bb:f2:55:7e:85:92:a8:3c:f3:a1:
56:e2:93:0b:36:53:6a:46:fd:1e:79:fa:ca:71:41:b6:fe:e6:
f7:d3:fb:91:42:da:c3:97:85:c9:88:7f:80:97:36:c7:7b:c0:
98:49:38:7a:37:24:cc:8b:55:3a:16:09:cc:a3:57:71:c2:4a:
fd:f0:f8:83:f3:d7:71:26:b6:44:e9:d5:9a:e7:90:75:61:ae:
04:39:76:cc:99:6b:23:bf:7b:66:e9:24:07:d0:6d:5b:49:41:
c0:3a:28:56:f3:f9:19:9d:fe:6f:e8:5c:fd:2b:bd:30:85:83:
04:0b:5d:c8:ad:e8:12:c2:a3:a1:55:f4:b4:47:b9:55:f6:79:
5f:77:5b:4b:96:44:50:6e:aa:d9:e5:71:64:82:13:7e:32:88:
38:b2:95:e2:42:58:03:60:98:33:f5:7c:20:6b:a4:bb:29:09:
34:6f:b5:f8:8e:71:3e:52:89:2f:84:5f:1b:66:8f:9b:e0:70:
1b:f7:00:1b:ac:02:ce:77:6e:84:c6:6b:f3:1e:84:37:63:13:
fe:3e:82:78:79:90:f8:2e:2f:20:48:f5:8c:ea:21:18:f2:a6:
c3:c4:9d:82:fb:4a:25:a6:63:3e:66:61:23:1d:78:2c:4f:3c:
33:21:56:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:07 2026 by rpki-client