
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F95C2205E2111F08BF3D883C4F9AE02.roa
File: 7F95C2205E2111F08BF3D883C4F9AE02.roa (raw, json)
Hash identifier: c/2pB9BWNEa5jyG9lB3RZfDXEkwOglS1J8svTzsmRfo=
Subject key identifier: 33:7E:48:07:34:7A:28:80:BE:51:AF:60:3A:45:9F:07:46:28:F6:85
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EABD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F95C2205E2111F08BF3D883C4F9AE02.roa
Signing time: Sun 31 May 2026 17:46:31 +0000
ROA not before: Sun 31 May 2026 17:46:31 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 154043
IP address blocks: 2402:1620::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60093 (0xeabd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:46:31 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c73f7-253a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:a2:4e:1f:c0:5a:f7:68:eb:cb:75:ba:7e:
9b:f5:62:85:d7:e1:60:d1:13:61:06:35:0f:0c:a6:
d8:d7:26:3e:2a:1d:1e:58:9d:29:9f:75:e8:4a:0f:
10:b8:57:87:2a:7f:ae:51:c8:20:aa:84:cb:02:af:
c2:97:29:c3:92:cc:af:0e:eb:40:42:e5:23:a9:87:
dc:bf:17:73:2b:bb:54:65:94:67:ad:7c:e4:5d:90:
17:9b:53:47:71:04:9c:ce:3c:58:49:43:c8:64:00:
11:cf:d8:0a:35:c3:fb:d6:01:0e:50:2b:a1:b6:22:
c1:ac:c2:a5:62:fe:a1:67:65:22:93:3b:87:5a:61:
1f:b4:d2:bc:e8:a5:be:35:cd:e7:3b:52:d6:2c:53:
42:8e:98:3f:ec:91:b2:8d:8f:e9:c9:38:27:61:d8:
93:c8:e7:68:45:fa:a1:93:2a:de:49:bd:22:8c:84:
81:65:31:ed:86:bc:ce:29:28:c7:fd:f0:df:8b:32:
99:cf:99:68:ee:33:e3:80:cd:99:24:06:ea:f1:9f:
a1:7f:f0:80:47:74:86:d1:d2:a4:df:1b:84:8c:19:
78:5b:c9:e4:b3:69:c9:b0:c4:e2:2f:11:f7:7d:a0:
b8:3d:a9:fc:13:a3:eb:11:fc:34:32:99:8b:ab:13:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7E:48:07:34:7A:28:80:BE:51:AF:60:3A:45:9F:07:46:28:F6:85
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F95C2205E2111F08BF3D883C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1620::/32
Signature Algorithm: sha256WithRSAEncryption
44:5a:63:94:1a:ee:e8:a6:e7:68:61:c8:0e:24:a1:cb:28:ac:
a6:aa:9b:d1:2d:44:b6:ca:dc:33:33:f8:3b:bd:4f:e9:e1:90:
b5:33:3f:3a:8a:e0:7f:40:bc:58:48:d1:de:1d:a9:ad:48:65:
4a:27:dd:29:ae:2c:7d:3c:4a:f2:29:b0:55:95:38:b6:7f:e9:
84:7e:3b:c7:64:04:b0:2a:cd:3c:c6:d7:90:64:45:19:5b:ef:
c7:9b:08:38:01:fa:41:fd:7a:a0:85:0e:49:8b:84:1d:30:7f:
a3:ec:f0:8c:d8:a8:1c:3d:a3:4e:13:89:b1:f0:23:f3:2f:6e:
0f:3f:ee:01:00:ca:93:2e:eb:86:d3:d6:c5:a9:bf:2a:5f:d4:
ae:b0:34:99:20:1a:56:0a:f4:f9:e2:e1:97:a2:11:24:06:c1:
89:ad:46:75:2c:78:e6:92:3a:4a:8e:57:86:4e:5a:b0:ea:59:
fe:2a:48:f1:8c:bd:90:ae:be:03:0b:d0:55:8a:b5:60:4b:09:
2f:c0:a0:7a:68:bc:64:85:43:82:01:e8:66:bf:b8:b5:cf:0c:
0d:a3:d8:cc:77:ca:ce:3e:8a:25:9d:ee:1b:a1:7d:11:3e:b1:
95:00:2e:c8:89:27:fa:eb:93:e9:c6:15:1a:fc:6d:6f:bb:d1:
69:03:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:55 2026 by rpki-client