
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27D37A6C345311EFAA7F4B1AC4F9AE02.roa
File: 27D37A6C345311EFAA7F4B1AC4F9AE02.roa (raw, json)
Hash identifier: H1O6nZgAg07bkYqKDWCkmYmUMRZNBNQdPn5XDqz4530=
Subject key identifier: FC:6E:0D:F6:76:53:61:AE:2E:36:38:E8:49:D6:87:86:ED:CD:26:4A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA47
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27D37A6C345311EFAA7F4B1AC4F9AE02.roa
Signing time: Sun 31 May 2026 17:42:56 +0000
ROA not before: Sun 31 May 2026 17:42:56 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 152537
IP address blocks: 2401:aae0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59975 (0xea47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:42:56 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c731f-8710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:10:dd:c5:55:b4:68:78:e9:ff:15:44:3f:
08:d3:3b:90:5d:37:e1:87:48:65:3c:aa:97:53:1d:
f3:e4:dd:1e:dc:5c:6f:0e:3c:36:23:9b:2e:a1:8c:
da:09:b1:64:f4:dd:51:96:79:a1:00:75:f9:a2:d3:
3b:63:92:27:d0:eb:59:74:b6:7f:00:29:9f:a4:0b:
b8:af:c3:b4:8b:30:ca:4b:b1:ad:1a:e8:f6:01:23:
dd:75:01:f8:06:d0:5b:a9:1b:9c:ae:4f:c9:04:84:
66:cd:65:08:ae:df:a5:74:02:78:d4:a4:2b:3b:a4:
07:7b:ab:20:88:b7:d5:33:91:27:92:95:37:95:f9:
33:14:10:42:c6:90:07:d8:42:ff:21:19:e3:98:ec:
1c:8c:f2:ba:15:dc:69:6e:5b:17:1a:ee:41:e4:38:
e0:2a:de:8b:47:60:55:4b:26:a5:16:61:06:bb:4a:
73:79:82:35:58:1c:8b:50:db:73:28:58:8f:6d:ec:
ba:d2:dd:f6:4a:29:b1:0e:bb:8f:33:44:c1:60:4d:
aa:8e:8f:5b:19:db:12:49:d5:56:02:90:5e:ea:69:
b2:e9:d4:59:b0:52:f4:75:a9:d2:49:c2:dc:a5:12:
11:90:6a:2c:30:9d:74:0a:56:2b:f0:05:4e:a0:34:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:0D:F6:76:53:61:AE:2E:36:38:E8:49:D6:87:86:ED:CD:26:4A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27D37A6C345311EFAA7F4B1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:aae0::/32
Signature Algorithm: sha256WithRSAEncryption
41:e2:05:2b:92:68:14:0f:1e:b9:78:47:9e:dc:f8:da:8d:e4:
21:81:8d:01:e2:cd:e3:b9:41:89:c2:33:f3:fa:c4:0b:9f:d8:
68:a8:e2:aa:aa:51:bd:70:d9:12:9b:56:97:eb:2a:37:c1:ba:
b9:86:98:9e:56:67:3c:c7:8a:16:00:60:09:d6:bf:76:0d:24:
6a:c2:71:89:85:87:f5:ca:fc:08:2f:23:69:38:63:7e:41:4e:
63:8d:fe:b0:b2:5e:c9:a6:74:c8:98:bf:2a:ab:3c:80:f4:ae:
81:67:1d:b7:27:0e:6f:db:4e:6c:41:4e:0e:b7:0a:c7:de:0b:
92:b7:96:db:36:43:8f:9d:6e:eb:9f:2b:43:67:22:58:d3:e7:
1a:70:18:77:25:db:97:bb:40:bc:c2:72:e1:c2:65:29:86:17:
eb:f3:b3:3d:d7:75:2b:72:09:57:74:67:f3:39:73:44:11:bb:
11:a7:6f:34:55:87:c6:fe:1e:c0:4a:35:9d:ad:61:bd:df:2e:
35:66:eb:a7:0a:68:83:e4:03:d6:8c:5c:e4:1a:46:ff:39:fd:
56:a9:c9:37:0a:62:fe:ac:96:e3:7e:c2:cd:83:5d:30:54:e8:
e7:3b:d6:d1:4e:a5:e6:83:da:12:bd:42:27:e4:c1:fb:4f:9d:
8d:1a:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:05 2026 by rpki-client