
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFE90172E09D11F0918B71D1446F56BC.roa
File: FFE90172E09D11F0918B71D1446F56BC.roa (raw, json)
Hash identifier: Ai4QkK83oDmnIcQlslmbqqZUCBPjmV7BSEjBrkS6PrU=
Subject key identifier: AF:F8:8E:1F:37:43:6B:85:28:32:F6:7C:F4:1A:87:2D:BB:58:42:16
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3210
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFE90172E09D11F0918B71D1446F56BC.roa
Signing time: Mon 06 Jul 2026 16:27:46 +0000
ROA not before: Mon 06 Jul 2026 16:27:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154436
IP address blocks: 144.79.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12816 (0x3210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:27:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd781-cab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:3f:1b:e8:04:e3:79:8b:80:31:32:93:15:
d1:83:d8:45:0b:07:7e:00:d5:28:21:1c:2b:ec:4b:
6d:d3:22:8f:75:83:91:a0:62:6a:9f:86:6e:85:19:
9e:78:58:e7:2a:48:f0:df:9f:95:6b:1e:a2:ca:89:
25:02:92:cd:08:64:7d:c4:4f:2f:ee:d4:36:30:fa:
b9:ec:21:7b:70:3f:cc:2f:1e:ae:23:8b:0d:2f:08:
e1:23:9d:65:18:6c:88:03:2e:6c:12:3c:f2:f8:bc:
0d:f6:17:9b:1c:c0:20:f1:31:18:a1:f6:d8:ee:8d:
33:dd:e9:e4:b0:4e:a1:91:70:7e:c9:9a:6e:46:cc:
01:39:f6:c1:31:0a:f7:43:c0:b0:cb:74:e5:77:02:
bd:72:3b:f5:0c:e0:79:a2:09:ac:c9:79:30:4e:32:
2e:d1:23:60:6b:d0:3f:1c:23:46:15:d8:03:ce:b3:
fa:41:22:f8:2e:7b:dd:f6:a3:77:c2:98:08:fe:e1:
2d:03:65:2d:04:60:e4:cb:12:a6:8c:f2:a0:a9:a0:
0b:55:de:ee:3a:0e:52:a2:5c:d5:03:a9:5d:8c:31:
e8:41:39:61:57:69:db:16:63:32:3b:a2:15:81:ed:
d5:f7:35:53:fe:7b:a6:f3:5d:f8:bf:b8:94:0d:f2:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F8:8E:1F:37:43:6B:85:28:32:F6:7C:F4:1A:87:2D:BB:58:42:16
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFE90172E09D11F0918B71D1446F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.126.0/23
Signature Algorithm: sha256WithRSAEncryption
65:2e:91:f2:d6:15:8b:2f:8a:8b:fa:dd:b2:cb:2b:9d:04:8a:
17:aa:16:03:f7:34:1d:9a:27:67:e4:cc:64:38:d7:78:00:3b:
ef:40:04:88:e5:1f:62:c4:2b:7d:f2:e9:3d:22:6b:02:73:0f:
b3:b9:62:cd:82:8d:ae:01:0d:ec:7a:c2:76:73:21:7d:53:35:
0a:1d:e3:8e:58:2f:12:10:d8:0f:b4:06:e9:54:f5:f0:2d:fb:
8f:f1:d0:70:d0:4a:f2:ea:18:f4:99:5c:2f:74:c7:cc:e7:af:
b8:00:ff:a9:d0:f3:9a:2a:cb:ea:bb:74:97:b7:67:96:73:a5:
bc:aa:52:3b:5b:54:e6:18:85:78:20:93:3a:5c:b0:ab:2f:09:
29:c2:52:a2:a6:ab:20:a2:09:98:4a:c0:48:65:c4:9b:f5:0e:
ba:a5:4d:f6:6a:a4:6b:62:74:2f:a0:4f:0b:3b:a1:18:5b:8d:
d8:4b:73:62:bd:44:6c:a3:53:39:99:17:a3:b5:d3:4b:46:e8:
53:45:64:20:ec:85:f2:db:d7:87:75:c6:ea:e2:99:48:5f:23:
c2:55:5e:4d:07:ef:cf:d3:bf:e6:fd:5d:b7:ee:aa:08:3c:a2:
0c:4a:53:8b:23:db:1c:c4:d5:73:fb:5b:64:02:ee:0c:74:cf:
66:7f:69:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:10 2026 by rpki-client