
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85607C4E8F3111F1BA71D3543C11F970.roa
File: 85607C4E8F3111F1BA71D3543C11F970.roa (raw, json)
Hash identifier: fswmEHhlfcdZzIHiTSMxIC+HCcFftm0krQ+HDPzoMO0=
Subject key identifier: FC:FA:93:1A:3B:92:85:53:F7:BB:26:96:E4:1E:24:89:F6:F6:9F:F8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FA3A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85607C4E8F3111F1BA71D3543C11F970.roa
Signing time: Mon 03 Aug 2026 11:50:28 +0000
ROA not before: Mon 03 Aug 2026 11:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 27.0.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64058 (0xfa3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 3 11:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a708084-ff6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:aa:85:3b:d6:6e:52:c5:df:98:5f:2f:48:06:
7b:5e:23:56:3b:41:5f:a3:cc:62:78:44:6b:24:6d:
57:17:91:d7:cd:f1:4c:20:b9:3b:2a:23:12:b3:b2:
66:d8:53:95:61:8f:bb:df:f7:19:53:2d:76:5e:bc:
b1:e0:ca:5c:0e:70:b0:3d:23:f2:63:80:00:11:5f:
f4:77:3e:24:9e:ad:19:b6:1f:fa:7a:c2:c0:f8:f6:
2b:05:99:5b:54:16:80:2f:a9:9a:fa:a4:d6:3d:fb:
07:65:ef:3c:2b:0d:75:12:f8:be:0d:9b:bb:2c:9d:
e0:c2:a5:96:0d:a8:8b:fb:49:5d:bc:5e:2c:a4:b2:
7f:35:ba:d2:93:ca:6b:87:14:e2:73:85:9c:29:db:
c0:7e:25:6d:f9:1f:72:24:09:b2:86:b9:f8:32:9f:
d6:6d:c6:b3:f8:a7:4c:f0:7f:b5:5a:b4:93:7c:e7:
ac:b8:73:8f:0e:45:6b:6a:52:17:fe:46:b4:49:6b:
5f:2b:3e:8c:f4:07:d3:0b:0d:1a:10:8b:00:17:69:
e5:43:04:73:ac:11:6b:75:6b:a4:28:c0:48:d8:a0:
a9:6e:ae:63:18:b3:86:c6:67:da:d0:06:f7:06:42:
08:8c:86:1c:fd:59:7f:b1:8c:98:49:90:93:43:5e:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FA:93:1A:3B:92:85:53:F7:BB:26:96:E4:1E:24:89:F6:F6:9F:F8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85607C4E8F3111F1BA71D3543C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.252.0/22
Signature Algorithm: sha256WithRSAEncryption
54:30:67:04:8e:f1:43:d0:2a:27:ee:fe:e4:e9:a9:9d:da:67:
4e:6a:4f:75:20:b5:cd:c3:c9:43:2f:92:ac:0a:25:5f:7d:a1:
6c:be:ef:98:05:33:d3:0d:36:67:86:26:12:68:5e:34:38:78:
c5:22:75:4a:79:75:3c:7e:62:49:1d:4f:68:13:12:9b:99:d6:
47:d3:ee:f7:17:92:81:7c:21:8d:1b:52:2a:e9:dd:cf:05:47:
09:84:f8:a9:65:74:a1:4c:5f:62:46:75:f1:94:3b:73:a2:cf:
56:06:9d:f2:70:12:d7:07:43:5b:05:9b:a4:82:c1:37:02:24:
8e:80:7d:9b:7a:65:9c:80:fe:b1:7e:95:02:9a:7f:12:72:22:
a2:c1:d7:c3:f5:ea:13:7e:4a:f7:72:43:14:4b:23:42:b4:30:
f9:01:bf:4a:4e:6b:2b:72:d1:fb:43:d9:81:76:3e:8d:b0:8b:
ef:55:d8:67:7f:35:67:6f:8a:4f:9c:67:8a:b4:b6:61:75:9f:
95:b3:8b:98:f5:fa:1e:cc:5e:bd:68:a5:05:83:54:64:1d:aa:
5c:46:0e:18:ea:62:b1:1d:49:59:c0:f6:31:1f:78:61:d5:e3:
32:3c:d7:63:cb:44:b1:fd:97:81:01:83:45:b6:84:5f:f8:26:
0d:de:8b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:25:05 2026 by rpki-client