
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFB2D738F37C11F0BD8551326C6F56BC.roa
File: DFB2D738F37C11F0BD8551326C6F56BC.roa (raw, json)
Hash identifier: YgA+FCU/r0IK3ZD1MnHuZPMMqPHohnhlJi/QZe1QLMY=
Subject key identifier: A3:E6:FC:FB:8D:80:26:18:69:54:26:DD:27:6E:23:3A:12:63:62:06
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30F5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFB2D738F37C11F0BD8551326C6F56BC.roa
Signing time: Mon 06 Jul 2026 16:18:28 +0000
ROA not before: Mon 06 Jul 2026 16:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141169
IP address blocks: 144.79.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12533 (0x30f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd554-700a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:29:93:0d:44:61:85:c8:6d:7f:e3:4c:1e:
9a:30:11:b3:22:58:e3:8f:98:31:a2:f3:c2:07:f6:
4e:9c:ad:c4:a4:7e:f6:f7:5f:03:51:49:b7:89:b9:
b3:19:3e:f8:ba:fb:35:70:8c:44:0e:0b:50:9d:f3:
f3:da:52:0a:09:74:bc:cd:fa:d1:00:72:a7:11:1c:
32:08:59:14:33:63:8d:70:f3:c7:43:b9:a5:e8:a0:
7e:19:1e:0d:53:39:48:f8:c3:74:a7:69:91:d8:cf:
9e:60:9a:6e:32:ae:18:1c:c9:b9:fc:7e:e2:46:5a:
58:af:7e:9e:8b:5a:7d:d1:e8:f7:c8:a6:21:a8:11:
a4:f7:e5:ec:aa:bd:ce:e6:5d:aa:67:d7:fb:19:cf:
0b:08:cb:27:ef:15:03:1c:c8:76:83:8b:55:9c:a0:
e8:ce:23:f4:d1:f0:2b:4c:37:e7:e7:12:ac:52:cb:
a7:b9:95:9a:05:8f:da:78:ff:d0:59:e3:e7:9f:1e:
43:0b:50:35:c5:6c:44:9d:5f:5d:90:35:04:d1:31:
07:b9:c3:71:19:9e:99:c8:b2:1e:4f:98:f8:e3:29:
25:56:52:c1:c6:cc:f1:1e:84:27:2d:44:b8:81:eb:
2e:d5:9e:7e:d8:42:da:8b:e8:20:ec:4d:1e:5e:72:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E6:FC:FB:8D:80:26:18:69:54:26:DD:27:6E:23:3A:12:63:62:06
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFB2D738F37C11F0BD8551326C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.215.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:c8:96:c4:7d:f8:3f:89:19:4a:42:24:0b:14:09:5e:e9:bd:
4f:7f:46:4c:9f:50:15:61:71:4a:67:e5:91:7b:ff:05:9c:1b:
f8:71:93:d3:d9:81:79:49:c1:cf:09:0e:4c:cd:70:ad:d8:99:
e7:8f:95:c7:ea:94:23:ee:95:3a:4e:3d:e7:ce:57:c3:f0:f2:
96:9f:4f:d6:b1:75:35:d8:cc:dd:85:56:99:4b:50:e9:cd:b2:
00:a0:63:fb:98:5a:df:60:34:73:12:a5:cc:bf:05:59:bf:46:
7e:66:a6:56:2b:92:99:87:ec:c8:ad:6f:4c:14:70:c4:66:38:
a0:9e:61:4f:86:74:bf:58:43:b4:c2:32:6d:91:16:5b:fa:42:
f6:0d:e9:18:ce:5e:ee:bf:7e:e9:02:dd:5f:5e:f6:9d:62:32:
3f:9a:f1:ea:4b:98:37:93:97:78:ed:2a:a3:a4:b3:9e:79:bd:
ec:48:4d:fd:20:68:6b:ff:d2:9b:3c:c7:d9:27:e1:29:40:a6:
26:fe:86:34:e1:96:a8:5c:a3:b7:35:e8:89:36:23:11:14:2b:
19:3b:a0:a8:d5:73:a4:23:92:66:eb:a8:6e:4d:ac:88:67:3f:
6a:f8:a7:1c:34:cd:9d:3d:bf:72:98:22:10:48:44:63:26:42:
37:8b:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:46 2026 by rpki-client