
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/592D4ACA5F2B11F197337A0E7747A888.roa
File: 592D4ACA5F2B11F197337A0E7747A888.roa (raw, json)
Hash identifier: u80lsSA89n2hoBhOmUNLduxbYoHWkZ+bnVsNoDn30z8=
Subject key identifier: 6D:CE:FB:92:60:10:EE:FB:1D:1E:3D:8D:FA:B9:91:4D:0D:11:27:D9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EC03
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/592D4ACA5F2B11F197337A0E7747A888.roa
Signing time: Wed 03 Jun 2026 09:05:21 +0000
ROA not before: Wed 03 Jun 2026 09:05:21 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151119
IP address blocks: 2001:df2:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60419 (0xec03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 3 09:05:21 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1fee51-3b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:ab:22:2c:8f:c2:21:77:24:37:7f:ec:73:
83:87:8b:f4:65:e7:f0:83:3a:0c:b0:46:3a:15:7c:
8a:0c:16:5a:51:08:29:65:eb:b1:67:27:30:60:be:
30:7c:3a:f0:9a:b1:fb:ea:d7:3e:1c:bf:0b:76:45:
4a:14:2f:b5:ff:88:28:50:f5:0c:7b:f4:0e:6a:86:
5c:44:1a:0a:93:2a:f3:d0:8e:62:7a:94:b5:03:3e:
68:75:ca:af:88:cd:a2:c4:e9:1d:10:71:10:ed:33:
e2:39:5f:22:7c:5b:fd:58:0c:13:7f:a3:c4:29:41:
4f:72:a0:9a:ee:aa:b7:15:35:96:0b:52:b1:26:f5:
55:e5:76:f7:59:5c:af:1b:c8:07:f6:d1:61:e2:87:
d0:a2:17:f2:49:2c:a7:0b:aa:1c:c6:79:ea:09:04:
26:60:79:ca:fe:a7:91:8e:38:b8:b4:49:0e:e7:3f:
3a:1d:fe:c5:38:31:b3:96:bd:c0:c2:34:f8:75:07:
1f:28:12:cd:de:03:38:a8:35:92:7e:0a:37:0a:1e:
a9:c8:91:aa:81:70:2b:4e:eb:f0:94:da:a3:f6:8c:
0d:87:be:3b:41:e4:5e:64:ce:ce:77:28:c1:fb:fe:
4e:93:7e:69:e9:1a:6d:3f:1c:87:85:95:ae:99:8a:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CE:FB:92:60:10:EE:FB:1D:1E:3D:8D:FA:B9:91:4D:0D:11:27:D9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/592D4ACA5F2B11F197337A0E7747A888.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:9040::/48
Signature Algorithm: sha256WithRSAEncryption
89:e0:aa:be:a7:28:41:6d:22:db:01:66:39:10:0c:7b:70:43:
0b:e4:97:7e:98:f8:71:3d:e7:51:09:a7:e5:21:c9:d6:4c:d7:
8c:83:c8:ed:11:c4:01:d8:fc:c2:c3:93:f2:99:6a:9b:75:c3:
5d:50:51:69:da:be:bb:01:c0:f0:82:de:97:00:fa:6e:2a:49:
3d:2e:08:da:74:98:d2:85:b6:fc:b9:73:34:03:1d:e3:75:64:
57:f3:25:11:74:ff:7a:44:92:60:5f:87:03:df:c7:bc:54:53:
63:9d:03:6e:3d:09:26:b4:ab:30:da:07:3a:bf:6b:5a:75:b7:
60:05:71:5c:0f:f6:fb:4f:5b:e3:5f:5d:76:87:c1:1c:93:f3:
36:03:9f:bc:b3:9f:c0:57:cf:66:78:42:a2:d5:c1:f9:e3:ad:
6b:aa:db:62:7e:af:8f:57:af:87:75:5a:16:a8:4e:0a:06:d4:
29:53:79:00:1c:92:42:ad:3b:b2:07:d2:39:98:79:07:52:63:
e0:a6:bd:35:6e:ff:1c:42:68:e5:41:97:7e:de:cd:12:64:ac:
04:c6:00:4f:b4:bf:c0:5d:5a:4e:e8:63:03:69:1d:b8:b3:79:
8d:ed:34:22:c6:ef:87:7a:e7:ec:29:bb:54:6b:99:87:36:4f:
76:9e:4c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:36 2026 by rpki-client