
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8DB9A416E0CB11F0A375DEE7526F56BC.roa
File: 8DB9A416E0CB11F0A375DEE7526F56BC.roa (raw, json)
Hash identifier: oSQfRpqqsVBEu/TJvWvynwkhbWOaD49tVAxjzMCoDt0=
Subject key identifier: 1D:34:10:ED:20:71:9A:5F:D6:CD:FF:9D:BD:83:3E:57:58:23:AA:85
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 308E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8DB9A416E0CB11F0A375DEE7526F56BC.roa
Signing time: Mon 06 Jul 2026 16:15:01 +0000
ROA not before: Mon 06 Jul 2026 16:15:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132627
IP address blocks: 144.79.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12430 (0x308e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:15:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd484-574a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:44:eb:33:e4:e8:1e:f8:b5:2e:50:b9:3a:
a0:72:66:18:af:b8:ea:d6:2d:80:d4:12:de:ff:55:
6a:5f:28:0d:85:75:f8:42:ea:ea:e1:53:5c:5b:db:
6e:da:00:f7:71:2e:36:2f:40:e4:7a:45:9e:29:77:
d5:63:85:d4:b7:a6:3a:b0:42:74:3b:25:f3:96:e8:
fb:d9:38:1e:77:bc:bc:77:26:e9:70:7b:7b:cf:ae:
b3:ce:36:f5:7c:4a:19:31:5c:6b:d4:f9:3a:1f:43:
72:d9:8b:40:c6:ad:f4:3d:bc:2f:dc:c3:4f:67:15:
98:d9:d9:3a:51:c3:0e:15:95:dc:65:5a:13:57:e1:
38:7d:53:c3:c1:38:4c:64:25:81:89:cf:88:d4:42:
5a:96:e5:6f:00:97:5b:2f:6b:f8:52:f7:92:6e:a1:
cc:6f:2b:86:72:e2:81:24:d7:dd:08:62:a3:1c:47:
bc:49:ce:39:77:7e:74:b4:55:95:d1:3c:9a:d4:9a:
94:81:62:5e:88:13:fd:9e:d6:aa:af:e6:3a:1a:53:
9f:d2:63:29:ba:53:e2:f3:9d:5b:ab:40:be:d5:86:
68:73:16:72:89:a7:c3:1f:3c:ff:bc:16:4f:72:9d:
15:e4:12:98:1b:46:b5:56:0e:7f:a9:12:08:d3:7d:
1e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:34:10:ED:20:71:9A:5F:D6:CD:FF:9D:BD:83:3E:57:58:23:AA:85
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8DB9A416E0CB11F0A375DEE7526F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.164.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:09:1c:37:e8:87:7f:09:2e:64:c1:9f:db:85:fb:b7:e2:53:
81:fa:36:9e:f8:2c:b0:c9:10:82:05:12:76:04:0c:4d:e5:db:
0f:60:c2:c2:3a:b1:db:b9:1f:82:5b:cf:1b:a6:b7:52:15:c6:
fe:71:56:b7:6b:b8:38:fa:63:67:0e:87:1b:9c:73:d0:da:24:
3d:f4:71:98:30:32:69:c0:a8:cf:f7:d5:3e:0a:a8:b1:57:4d:
6d:77:d4:54:ce:94:38:03:d4:c6:88:e4:14:5a:65:1f:5e:f1:
bf:5a:d0:b3:b8:32:55:18:b0:50:3f:6f:eb:23:27:b8:aa:73:
67:25:3a:bd:f8:94:96:c9:b7:a8:9b:64:fd:3e:bd:84:cc:ed:
9d:8b:31:39:09:c4:82:d0:c0:da:fb:2d:24:23:fb:21:a7:9a:
91:dc:40:2c:df:fb:6f:82:c6:b1:5f:70:c7:a4:c6:e7:b8:73:
49:49:31:67:f1:3f:4e:5b:0c:ea:56:de:5f:fc:77:0d:c7:a3:
48:93:c6:1d:e4:a0:84:17:70:3e:60:c9:a7:19:6e:fa:d5:96:
26:72:9d:f8:3b:d5:86:5f:c5:4d:d6:a4:38:ce:ad:b2:2d:ef:
85:f0:8a:93:dc:bc:7d:9e:32:14:c8:53:fe:25:3e:9c:6b:2b:
b9:45:8b:a1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYxNTAwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDQ4NC01NzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqmZE6zPk6B74tS5QuTqgcmYYr7jq1i2A1BLe/1VqXygNhXX4Qurq4VNcW9tu
2gD3cS42L0DkekWeKXfVY4XUt6Y6sEJ0OyXzluj72Tged7y8dybpcHt7z66zzjb1
fEoZMVxr1Pk6H0Ny2YtAxq30Pbwv3MNPZxWY2dk6UcMOFZXcZVoTV+E4fVPDwThM
ZCWBic+I1EJaluVvAJdbL2v4UveSbqHMbyuGcuKBJNfdCGKjHEe8Sc45d350tFWV
0Tya1JqUgWJeiBP9ntaqr+Y6GlOf0mMpulPi851bq0C+1YZocxZyiafDHzz/vBZP
cp0V5BKYG0a1Vg5/qRII030eAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB00EO0g
cZpf1s3/nb2DPldYI6qFMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOERCOUE0MTZF
MENCMTFGMEEzNzVERUU3NTI2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBkE+kMA0GCSqGSIb3DQEBCwUAA4IBAQBfCRw36Id/CS5kwZ/bhfu3
4lOB+jae+CywyRCCBRJ2BAxN5dsPYMLCOrHbuR+CW88bprdSFcb+cVa3a7g4+mNn
DocbnHPQ2iQ99HGYMDJpwKjP99U+CqixV01td9RUzpQ4A9TGiOQUWmUfXvG/WtCz
uDJVGLBQP2/rIye4qnNnJTq9+JSWybeom2T9Pr2EzO2dizE5CcSC0MDa+y0kI/sh
p5qR3EAs3/tvgsaxX3DHpMbnuHNJSTFn8T9OWwzqVt5f/HcNx6NIk8Yd5KCEF3A+
YMmnGW761ZYmcp34O9WGX8VN1qQ4zq2yLe+F8IqT3Lx9njIUyFP+JT6cayu5RYuh
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:02 2026 by rpki-client