
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A6D81A9A7E6511F0AF9C5063C4F9AE02.roa
File: A6D81A9A7E6511F0AF9C5063C4F9AE02.roa (raw, json)
Hash identifier: osmRDzSZBJ1fPnXNYfdx7xcv7klgCIN0Bn1T7YWWJj4=
Subject key identifier: DF:0E:3D:16:2B:53:BA:7C:7B:F8:EC:45:F4:2D:E0:C5:47:28:AF:33
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 31D3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A6D81A9A7E6511F0AF9C5063C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:25:48 +0000
ROA not before: Mon 06 Jul 2026 16:25:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153292
IP address blocks: 161.248.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12755 (0x31d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:25:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd70c-c70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:20:4a:c9:e2:f5:3d:ef:e4:90:82:03:3e:
9c:7c:e4:83:72:b6:dd:39:6a:22:10:3c:bf:9d:ef:
90:cf:38:1e:9c:cd:33:1d:df:ab:95:76:a5:35:bd:
3d:b8:cb:d1:c6:1a:a9:d8:32:06:1a:07:41:d9:70:
57:b1:66:bf:6b:74:6c:b4:ed:86:76:c0:8a:c8:83:
a7:d0:77:a2:0a:40:36:5a:95:4c:c7:29:b5:2c:c8:
c0:96:92:ab:66:75:7f:a0:9e:fd:ed:ed:dc:39:2e:
f9:e3:ff:0e:3e:27:21:ee:38:31:a3:35:35:8d:e3:
1f:8b:fb:50:ca:0e:3a:4b:50:48:c5:d2:f0:b8:39:
25:47:2f:e2:a3:39:15:9f:82:6f:db:76:7a:03:6c:
00:35:11:ef:4b:ce:72:01:3c:06:30:64:35:ff:4e:
8f:ae:a0:6e:b4:6b:3b:3d:6a:05:e8:f2:57:0e:02:
71:4e:91:9d:d0:2f:3a:bb:f3:35:c5:f5:50:2b:67:
8e:0c:c6:3c:b3:af:16:48:f7:86:64:3f:40:06:63:
23:72:4c:1b:ad:fe:de:45:e7:de:92:47:8c:4c:8b:
81:80:5e:45:9e:c2:47:26:d4:ac:dc:2c:c4:ea:cc:
28:fd:38:28:72:01:f4:4a:7a:d3:2e:2f:0f:06:3d:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0E:3D:16:2B:53:BA:7C:7B:F8:EC:45:F4:2D:E0:C5:47:28:AF:33
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A6D81A9A7E6511F0AF9C5063C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.124.0/23
Signature Algorithm: sha256WithRSAEncryption
12:fa:00:75:9a:62:aa:be:e8:47:c4:d8:2d:bd:a2:24:73:db:
95:7e:9f:4d:cb:7b:10:4c:b3:64:07:f8:1b:2c:9c:02:a6:82:
a3:df:61:58:20:b5:96:5c:d3:d3:30:f6:2f:fc:15:ac:c9:c8:
77:f4:8c:38:63:05:43:5f:2e:31:de:fe:ee:ff:94:ee:cf:34:
82:2e:1b:40:da:e6:a7:3f:05:92:5b:5e:20:fe:8e:69:30:c6:
fb:bc:3c:c8:a9:85:a7:23:da:1e:7b:78:95:e7:8d:50:5b:9e:
ee:55:59:43:18:ec:1a:d5:62:03:ec:5d:f9:39:75:e8:85:d0:
7b:f0:45:5a:a5:67:15:9d:25:40:a6:8b:f2:4d:b8:fb:fe:a2:
a2:bb:02:27:27:10:67:42:55:58:5e:f7:70:c8:39:99:45:2f:
bb:03:f7:36:ff:2d:d3:00:c8:74:26:32:ab:28:1f:f2:9d:02:
e4:bb:4c:84:f7:d8:e8:12:ac:6f:8c:cb:96:10:06:c9:f7:73:
a4:38:4a:b3:f4:53:ab:af:7f:82:b9:83:ac:41:ae:30:d6:fa:
f5:84:4e:4a:cd:f4:b7:6b:6f:cf:9b:8a:76:ff:9d:fb:53:b5:
05:6e:e7:a3:d0:50:f9:8b:2e:86:c7:69:ba:81:75:00:1b:b9:
87:3c:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:29 2026 by rpki-client