
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A348060059511ECB2896C55C4F9AE02.roa
File: 3A348060059511ECB2896C55C4F9AE02.roa (raw, json)
Hash identifier: gIa9ejVdLPS8WhhvJhWd4sFywhYA0wQJQi7Jj4KU/pE=
Subject key identifier: 62:4B:5D:0D:B8:CC:C0:84:DA:96:C2:E8:C2:D8:5F:56:DB:BE:0E:4D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F370
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A348060059511ECB2896C55C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:16:35 +0000
ROA not before: Mon 06 Jul 2026 17:16:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141809
IP address blocks: 1.7.246.0/24 maxlen: 24
2001:e48:33:1007::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62320 (0xf370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:16:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be2f3-389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:a7:94:4e:b9:9e:44:3a:06:2f:ab:97:d6:
21:2a:45:89:10:18:71:10:eb:59:7f:81:e7:76:f8:
8c:45:7f:6f:42:d9:3e:13:c2:fd:56:cf:22:98:0f:
39:2f:aa:e7:b1:90:ea:6a:a7:1b:dd:37:c1:99:bb:
20:37:94:be:0a:cf:ef:65:b3:9e:9d:b8:5f:91:a4:
8b:47:24:6d:59:4f:1c:3f:72:84:e2:27:cc:84:66:
ca:6b:ce:0f:26:8a:fb:a3:f5:ac:d7:ec:13:1b:0e:
9a:77:47:ca:82:38:87:08:6e:33:57:e0:03:a3:08:
ed:d8:30:e4:86:ee:c7:ed:e0:49:95:f0:13:fc:1a:
e7:44:ce:3c:1e:7e:00:59:f9:ef:f1:1a:59:e5:3c:
20:72:b2:5f:e2:e4:55:f4:23:55:da:3f:54:2a:db:
02:eb:bc:37:79:27:d2:21:76:ef:3d:9f:72:98:50:
ed:48:d3:e9:82:b7:21:dd:1c:67:1f:ea:f3:18:cf:
4a:d7:a7:95:62:ef:f0:36:ed:de:7a:f3:19:05:88:
0f:60:28:5a:e9:24:4f:d8:40:a4:07:c7:8c:ca:0a:
3f:a5:89:86:4e:c5:cd:d7:32:b9:17:dd:a0:f6:72:
b4:aa:09:f8:83:b6:e0:3b:15:2f:fb:5b:c4:c6:56:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4B:5D:0D:B8:CC:C0:84:DA:96:C2:E8:C2:D8:5F:56:DB:BE:0E:4D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A348060059511ECB2896C55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.7.246.0/24
IPv6:
2001:e48:33:1007::/64
Signature Algorithm: sha256WithRSAEncryption
30:50:86:07:f4:0e:b3:81:96:5a:92:23:80:e5:fb:3a:f3:c0:
0b:13:50:08:48:2a:c3:0d:80:d7:42:14:98:07:ed:24:ce:d4:
43:b8:73:ce:be:20:1e:b1:5c:ec:d0:fc:5a:3d:fa:86:52:68:
79:cb:ca:be:c5:71:00:8f:0d:22:e0:96:e6:28:9e:d1:b8:df:
dc:fd:63:39:03:87:bd:45:a5:b4:d7:1b:8d:a2:00:78:2d:cf:
b1:8c:25:a2:e8:af:78:5b:50:4c:e8:ef:f0:c8:42:89:f2:45:
85:97:e1:c7:51:10:31:99:77:27:6a:6e:9a:99:85:4b:e3:ad:
30:af:f8:3b:39:96:7e:d0:29:98:52:37:c5:96:d0:45:c0:a7:
b5:ea:94:2f:7a:8d:f3:3f:32:ac:97:47:4b:4a:0d:9b:70:71:
21:56:23:b6:b9:98:6c:02:f8:5c:9a:d2:e2:4a:30:45:dc:f5:
fe:1d:94:c8:0d:fc:be:7b:10:db:9d:20:04:df:c7:24:fe:99:
41:ff:94:55:a4:49:08:67:cc:25:20:a7:6a:58:03:6f:51:0e:
07:99:97:99:21:93:1b:50:4a:a7:fd:18:6e:e9:9b:15:15:ce:
cc:2a:83:06:da:10:33:e9:85:7b:4d:34:09:75:61:89:50:f7:
a1:31:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:55 2026 by rpki-client