
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/490C03683A0411F0B550D449C4F9AE02.roa
File: 490C03683A0411F0B550D449C4F9AE02.roa (raw, json)
Hash identifier: aASN96uQJGt4HUTcFM1nnDyHwriMIHPgcC/mGdioAFo=
Subject key identifier: B9:24:51:DD:59:9F:11:E1:51:C4:91:3C:F6:00:47:B8:F3:EA:D0:20
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F151
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/490C03683A0411F0B550D449C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:58:25 +0000
ROA not before: Mon 06 Jul 2026 16:58:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137146
IP address blocks: 2401:af60::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61777 (0xf151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:58:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdeb1-93e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:41:e2:47:ee:14:3a:20:7d:41:4a:7e:e9:
70:b8:11:2d:58:0d:77:9a:10:85:bf:c4:4d:25:cd:
8d:a6:56:47:6a:c3:11:e9:8b:ac:02:83:51:d2:57:
18:31:3f:8d:9b:80:19:e3:4f:7c:0b:06:1c:f6:a0:
8b:fd:f3:f2:77:ff:0f:43:36:8f:d6:69:22:12:5d:
3a:c5:5d:6c:2a:e4:37:c7:24:d9:5f:0f:0d:c6:19:
2b:09:f8:e0:a8:d1:b5:bf:3a:a5:10:10:52:33:b5:
d7:a0:da:a9:a2:be:72:44:51:a6:69:cf:f4:74:59:
af:0a:8f:6d:cf:94:b0:fc:dd:e9:86:bd:52:1c:3e:
b8:36:de:6a:a8:50:fd:64:84:a2:f8:6b:be:18:8e:
1e:76:80:31:f4:5b:a0:30:cf:f2:58:bf:c6:73:25:
ac:f0:63:76:71:ee:82:d1:a7:bc:ac:b7:a5:c8:13:
08:34:d5:cf:55:3b:75:fa:0f:c6:a5:18:c7:60:2e:
a9:1a:73:5e:00:85:5e:74:b4:bd:e0:4f:15:95:dc:
d9:09:73:c2:eb:5d:5c:de:01:de:db:a8:cf:b0:9c:
a2:ad:d0:85:78:6c:79:1c:c0:b0:e5:f9:4b:38:f4:
05:a9:34:af:8b:8c:a7:bf:e5:90:a3:1b:1c:36:04:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:51:DD:59:9F:11:E1:51:C4:91:3C:F6:00:47:B8:F3:EA:D0:20
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/490C03683A0411F0B550D449C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:af60::/32
Signature Algorithm: sha256WithRSAEncryption
40:fe:c0:f9:63:db:91:d1:a5:2e:b5:fd:92:09:4d:68:d1:7c:
42:9f:03:cb:b8:cc:87:43:4d:e1:d5:42:9b:04:21:b0:6a:6b:
af:62:a9:8c:1d:e4:59:23:26:91:80:c7:eb:8a:4c:e6:d7:8b:
e7:65:cd:98:1e:9c:14:68:f5:b2:ab:7b:b5:ed:d4:ba:14:20:
02:5e:47:79:9c:65:f3:c7:e8:dc:3a:a5:74:53:3d:30:8b:f6:
b7:d1:d6:ef:e4:5e:ca:a4:5a:45:02:c7:2c:92:3a:d5:47:99:
6d:d6:37:6e:da:2e:c7:89:78:4c:ac:f5:3d:64:cb:ef:dc:55:
fb:c4:2f:f8:63:a1:6c:51:fb:a6:e0:c2:92:12:f7:f8:5f:f7:
c9:3a:7d:1e:42:fc:e1:a2:e6:df:76:c8:e9:a6:1c:cb:b0:64:
6c:14:b3:ad:a9:12:ac:cb:39:7d:77:78:64:da:c6:49:fe:49:
63:a0:90:60:d4:06:c7:5c:64:9c:6e:1f:18:41:bd:fc:b6:89:
33:29:32:0c:e0:92:07:f3:e1:87:5b:2a:0f:ec:6b:65:20:05:
99:fa:79:8a:9c:1a:0c:c7:da:52:f6:3a:38:3d:c6:ac:e3:66:
69:c4:d2:c1:10:38:89:6d:97:62:19:1d:17:89:50:03:c4:2c:
52:15:8a:e9
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIDAPFRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NTgyNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRlYjEtOTNlMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMhfQeJH7hQ6IH1BSn7pcLgRLVgNd5oQhb/ETSXNjaZWR2rDEemLrAKDUdJX
GDE/jZuAGeNPfAsGHPagi/3z8nf/D0M2j9ZpIhJdOsVdbCrkN8ck2V8PDcYZKwn4
4KjRtb86pRAQUjO116DaqaK+ckRRpmnP9HRZrwqPbc+UsPzd6Ya9Uhw+uDbeaqhQ
/WSEovhrvhiOHnaAMfRboDDP8li/xnMlrPBjdnHugtGnvKy3pcgTCDTVz1U7dfoP
xqUYx2AuqRpzXgCFXnS0veBPFZXc2QlzwutdXN4B3tuoz7Ccoq3QhXhseRzAsOX5
Szj0Bak0r4uMp7/lkKMbHDYE1o0CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBS5JFHd
WZ8R4VHEkTz2AEe48+rQIDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ5MEMwMzY4
M0EwNDExRjBCNTUwRDQ0OUM0RjlBRTAyLnJvYTAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQBr2AwDQYJKoZIhvcNAQELBQADggEBAED+wPlj25HRpS61/ZIJ
TWjRfEKfA8u4zIdDTeHVQpsEIbBqa69iqYwd5FkjJpGAx+uKTObXi+dlzZgenBRo
9bKre7Xt1LoUIAJeR3mcZfPH6Nw6pXRTPTCL9rfR1u/kXsqkWkUCxyySOtVHmW3W
N27aLseJeEys9T1ky+/cVfvEL/hjoWxR+6bgwpIS9/hf98k6fR5C/OGi5t92yOmm
HMuwZGwUs62pEqzLOX13eGTaxkn+SWOgkGDUBsdcZJxuHxhBvfy2iTMpMgzgkgfz
4YdbKg/sa2UgBZn6eYqcGgzH2lL2Ojg9xqzjZmnE0sEQOIltl2IZHReJUAPELFIV
iuk=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:46:57 2026 by rpki-client