
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1778846878FF11F0BC303A2CC4F9AE02.roa
File: 1778846878FF11F0BC303A2CC4F9AE02.roa (raw, json)
Hash identifier: FUTB54GveotJgij1cdZv9y4zwQNAzYOEz3VIP73XPQw=
Subject key identifier: 8D:5D:7A:B2:FB:C0:59:2E:3F:2E:03:2A:C7:13:2F:E6:E4:39:84:F8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EACD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1778846878FF11F0BC303A2CC4F9AE02.roa
Signing time: Sun 31 May 2026 17:47:00 +0000
ROA not before: Sun 31 May 2026 17:47:00 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 154139
IP address blocks: 49.213.36.0/23 maxlen: 24
2001:df5:fa40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60109 (0xeacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:47:00 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7414-8ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:c2:18:f6:e7:da:2e:8e:05:c7:8c:84:d2:
be:c8:5a:86:47:8d:14:d5:0c:b4:5b:74:d8:2f:ad:
97:84:10:f0:04:50:f8:ea:98:a1:ce:cd:e8:a5:c6:
c8:22:f6:32:af:93:17:32:91:52:88:2f:21:a9:bd:
89:f2:b8:98:bc:37:dd:d0:14:50:99:75:29:93:44:
a4:39:aa:e6:ec:e9:bf:78:f0:35:9f:d7:32:65:3f:
98:e8:43:ef:f9:a5:58:e3:30:ed:6f:4b:6a:02:41:
bd:4f:ac:0b:18:22:c8:e9:92:68:b9:41:65:57:e3:
19:b5:fa:6c:6f:b9:44:c6:69:98:c8:90:0d:da:01:
e8:87:98:e2:41:b1:b1:f1:74:49:23:51:77:1b:37:
c6:ce:e2:99:35:ef:48:93:60:fa:b3:3c:8c:0d:62:
85:2d:5f:9c:40:5e:1b:83:da:7a:4c:b0:33:6b:06:
6d:12:ce:81:fa:74:2b:42:ca:51:2f:23:db:e6:5a:
21:8a:67:8f:29:eb:1c:a0:3f:ee:78:6f:17:7f:21:
b3:b7:a7:70:0f:49:8a:04:6d:9a:12:82:79:37:b5:
c6:14:b5:51:13:23:34:cd:ca:a3:65:a6:80:c6:ba:
4b:0a:d7:e2:e7:f2:b4:8f:b1:3d:f9:0e:62:ab:35:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5D:7A:B2:FB:C0:59:2E:3F:2E:03:2A:C7:13:2F:E6:E4:39:84:F8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1778846878FF11F0BC303A2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.213.36.0/23
IPv6:
2001:df5:fa40::/48
Signature Algorithm: sha256WithRSAEncryption
2e:11:93:9f:3a:b5:ef:00:1f:1a:10:94:c0:e8:f4:cf:76:48:
52:f3:2a:d1:2e:a0:8d:fb:87:64:1e:47:fa:eb:03:ce:95:b2:
73:50:13:3e:ee:b8:7c:80:5d:15:3e:7b:6e:d4:8d:77:c7:16:
92:18:54:9f:30:75:71:52:7f:50:89:4e:94:30:3a:eb:40:dc:
30:3c:f9:6f:d7:2c:a0:a8:df:8b:c0:9d:8d:6c:45:e4:41:ee:
0e:44:a5:56:ae:12:17:42:90:1f:78:93:e6:2d:1b:b9:fe:8f:
b6:26:f6:e5:77:f1:83:bb:b7:18:0c:7c:b4:a4:c6:ac:19:9d:
e1:48:9c:1c:1f:da:75:75:dd:58:0b:d3:4f:60:d0:fc:57:78:
1e:69:3d:b3:ac:af:b1:8c:f9:2f:e4:0d:71:f1:99:17:46:0b:
16:77:3d:8a:c3:c1:57:b9:4f:c9:ba:99:59:66:d9:73:77:1c:
48:2d:c6:22:d7:14:58:6e:38:1d:49:30:9d:da:75:3d:c8:cc:
9a:2a:11:41:e3:40:6f:c0:4d:ab:aa:de:65:aa:a1:d5:00:b4:
ec:f5:56:da:14:8f:ec:eb:4d:a5:ac:a4:85:29:36:4c:7f:1c:
90:fb:79:9e:0b:2e:c2:33:e1:0a:75:02:47:6c:e4:3a:2e:fc:
45:c0:ab:7d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAOrNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3NDcwMFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzc0MTQtOGZmMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMEmwhj259oujgXHjITSvshahkeNFNUMtFt02C+tl4QQ8ARQ+OqYoc7N6KXG
yCL2Mq+TFzKRUogvIam9ifK4mLw33dAUUJl1KZNEpDmq5uzpv3jwNZ/XMmU/mOhD
7/mlWOMw7W9LagJBvU+sCxgiyOmSaLlBZVfjGbX6bG+5RMZpmMiQDdoB6IeY4kGx
sfF0SSNRdxs3xs7imTXvSJNg+rM8jA1ihS1fnEBeG4PaekywM2sGbRLOgfp0K0LK
US8j2+ZaIYpnjynrHKA/7nhvF38hs7encA9JigRtmhKCeTe1xhS1URMjNM3Ko2Wm
gMa6SwrX4ufytI+xPfkOYqs1sZsCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSNXXqy
+8BZLj8uAyrHEy/m5DmE+DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE3Nzg4NDY4
NzhGRjExRjBCQzMwM0EyQ0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEATHVJDAPBAIAAjAJAwcAIAEN9fpAMA0GCSqGSIb3DQEBCwUAA4IB
AQAuEZOfOrXvAB8aEJTA6PTPdkhS8yrRLqCN+4dkHkf66wPOlbJzUBM+7rh8gF0V
Pntu1I13xxaSGFSfMHVxUn9QiU6UMDrrQNwwPPlv1yygqN+LwJ2NbEXkQe4ORKVW
rhIXQpAfeJPmLRu5/o+2Jvbld/GDu7cYDHy0pMasGZ3hSJwcH9p1dd1YC9NPYND8
V3geaT2zrK+xjPkv5A1x8ZkXRgsWdz2Kw8FXuU/JuplZZtlzdxxILcYi1xRYbjgd
STCd2nU9yMyaKhFB40BvwE2rqt5lqqHVALTs9VbaFI/s602lrKSFKTZMfxyQ+3me
Cy7CM+EKdQJHbOQ6LvxFwKt9
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:08 2026 by rpki-client