
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82D4CB6666BE11F0B34BB550C4F9AE02.roa
File: 82D4CB6666BE11F0B34BB550C4F9AE02.roa (raw, json)
Hash identifier: 5/3DrvNHeBkFQTxiwWunXdhaf3TNp725P82+XZWHq7Q=
Subject key identifier: AF:6F:BC:68:16:E1:DE:DD:3B:A6:CC:48:A2:DF:0B:0A:67:A8:E4:B8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F6E2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82D4CB6666BE11F0B34BB550C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:45:47 +0000
ROA not before: Mon 06 Jul 2026 17:45:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154069
IP address blocks: 2402:1a20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63202 (0xf6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:45:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be9cb-37cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:81:c6:7c:b8:32:e2:ee:e5:4c:d2:8e:a9:
31:24:cf:9b:6a:a0:5f:7c:6d:ff:ea:e7:79:ef:f0:
31:47:5e:98:5e:0a:4e:a6:bf:39:06:5e:96:35:e0:
91:17:17:f8:fe:1c:29:1b:3b:6e:5c:4b:b1:fb:fa:
fe:6b:dd:03:34:b6:fd:d5:06:e8:9e:14:ba:d8:0e:
fc:fc:07:70:bc:d8:31:e4:94:0e:e4:df:88:44:ea:
b2:38:fb:c6:e1:b3:25:af:64:15:5c:13:43:b3:82:
74:30:e6:e2:17:81:6f:8e:09:cd:6f:73:0b:67:3b:
72:82:13:6e:ce:ad:e0:f6:fc:0a:1e:ae:ae:06:34:
3e:89:f4:16:3e:7c:71:31:ca:f7:87:c9:10:5d:8c:
25:2d:fe:93:e1:04:8f:68:99:3a:b0:8a:c6:32:a6:
a1:c9:cc:47:61:2a:67:0b:7f:06:6e:ea:7e:ef:68:
eb:46:1e:a8:54:0a:bc:56:c5:76:5f:0a:8f:36:a2:
6d:92:68:cc:c3:5d:0f:3d:69:91:b8:b2:17:b6:ce:
7a:5f:48:55:04:29:38:1b:9b:15:72:3b:cd:af:fb:
60:fc:a6:ab:95:c6:fc:a3:6c:4c:89:36:a6:cf:93:
f9:f7:52:f7:28:62:73:15:e1:27:43:41:e9:7a:1b:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6F:BC:68:16:E1:DE:DD:3B:A6:CC:48:A2:DF:0B:0A:67:A8:E4:B8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82D4CB6666BE11F0B34BB550C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1a20::/32
Signature Algorithm: sha256WithRSAEncryption
69:f0:89:cd:d1:7c:c2:07:d7:5d:02:85:e1:c6:f6:53:90:c7:
1c:29:97:74:7b:90:b2:7b:14:7d:73:d8:63:87:28:d9:18:d9:
e2:6c:ed:87:1b:75:18:fa:19:08:54:e2:03:70:54:57:ce:4b:
1d:45:96:be:cb:96:25:84:10:7b:6e:da:c7:6c:05:92:dd:8b:
00:a9:8d:79:be:a6:fb:3e:6c:c0:0c:fb:ba:fd:ab:be:a5:fe:
91:45:ad:1a:9e:9e:2c:7f:d5:e9:b4:13:ad:a2:60:36:10:6c:
48:b3:ef:a9:26:84:7d:f6:ef:e7:60:f1:c4:07:3b:df:ee:ce:
73:37:b6:7e:76:18:02:fd:be:37:30:03:43:78:b4:02:a4:be:
e3:7c:a5:01:91:e1:14:c3:3a:77:5f:01:ae:78:d1:5d:5c:22:
37:d1:13:e5:75:d1:9e:fe:d2:a7:20:7f:00:a2:26:37:1d:24:
ab:93:73:4d:7d:46:ea:59:6a:81:46:1c:5e:10:0c:5f:e3:33:
8e:18:0e:6d:08:a2:1d:0c:89:4a:9b:2c:ef:d1:5f:6a:c3:2c:
74:17:41:f4:37:48:e4:50:d1:31:dc:36:78:af:14:5e:cd:64:
fe:35:3d:38:9e:bb:fe:d8:68:da:84:a1:ae:03:5e:fa:71:98:
1a:f2:64:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:09 2026 by rpki-client