
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CD801FA773611EF9F32BC29C4F9AE02.roa
File: 8CD801FA773611EF9F32BC29C4F9AE02.roa (raw, json)
Hash identifier: WOug3W5ej6eE8kuyZATfprRZyjpnDQXvK9P7P4737O0=
Subject key identifier: 0D:34:39:15:37:6C:D2:27:71:E8:86:83:27:F0:0A:CA:BC:E6:21:0C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA60
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CD801FA773611EF9F32BC29C4F9AE02.roa
Signing time: Sun 31 May 2026 17:43:40 +0000
ROA not before: Sun 31 May 2026 17:43:40 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153216
IP address blocks: 2001:df4:3ac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60000 (0xea60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:43:40 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c734c-ce7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:5e:0e:d4:b2:2a:54:24:1c:03:d7:1d:e4:
d8:af:d0:91:66:76:25:01:47:a9:16:a3:bf:23:da:
a0:3a:0c:a8:c7:12:02:bc:54:00:4f:9c:bf:0a:bf:
5a:a4:6e:de:1b:dc:52:d3:1c:f6:72:02:e5:5e:3c:
6b:d9:b2:97:46:d0:9a:75:50:cd:fc:4a:8d:bf:d9:
2e:bc:aa:42:18:6b:e6:c1:2a:54:51:e3:5c:65:ac:
8f:dc:c7:cf:64:2b:af:0b:eb:0e:4f:25:44:81:1b:
e1:e6:61:a6:5c:a0:84:ea:83:ca:f5:d4:a2:75:56:
f1:38:00:45:18:bf:0a:15:35:48:f3:02:5c:6e:2a:
23:fe:76:ab:53:d2:d3:03:b7:1f:24:4b:d0:dd:69:
15:69:45:5f:00:2c:ea:e6:bb:d0:4b:30:a9:c2:27:
d2:50:6d:24:96:26:2e:dd:fe:6e:46:d6:71:aa:ff:
58:3e:a3:ab:b4:10:25:27:87:8e:19:29:ee:39:db:
8c:5f:ba:7d:57:dc:a1:55:f2:01:c1:b5:cd:bf:f4:
24:92:d2:50:52:68:e0:fd:ec:4c:ab:ef:86:50:53:
50:3a:b0:ed:71:71:24:1d:ae:18:d8:ef:45:24:bd:
5e:b6:7f:24:11:14:73:87:43:39:1f:49:e4:ba:1a:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:34:39:15:37:6C:D2:27:71:E8:86:83:27:F0:0A:CA:BC:E6:21:0C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CD801FA773611EF9F32BC29C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:3ac0::/48
Signature Algorithm: sha256WithRSAEncryption
4e:28:70:84:96:61:a1:47:94:b4:05:68:54:76:1e:3b:71:b5:
20:ca:ca:16:ad:eb:51:0b:85:dd:fd:56:6b:c2:49:14:aa:b1:
d0:ff:58:81:29:a9:14:01:3e:62:cf:f4:f2:f6:4a:ac:77:76:
39:18:4d:38:1e:04:03:b9:a9:06:6b:62:54:88:2c:18:63:e3:
b6:2c:65:71:56:7a:f8:fb:55:51:81:85:d6:5d:5c:d5:65:0c:
a4:8c:24:73:17:6f:26:01:87:b6:bf:11:a3:9f:05:73:ff:e6:
80:74:37:e3:0b:f1:76:ae:b9:d3:ec:ec:ad:bd:1d:a2:ba:fe:
30:17:e1:4a:e7:c6:a3:87:35:b1:34:dc:89:71:e1:ca:15:08:
64:aa:c1:78:22:b1:ed:30:8c:cb:ec:bf:75:9a:9d:e7:7e:12:
4c:80:d2:e7:ba:2b:4e:ab:c2:e6:bc:e8:49:f4:bc:d7:30:e5:
97:40:f0:6e:22:26:f4:26:e6:f6:7e:74:04:39:e4:f6:12:02:
57:87:a6:fa:f1:ab:8b:58:e3:66:35:05:0b:89:39:8a:89:91:
b4:fa:65:b8:66:1f:e3:35:21:97:4e:fe:5b:bf:9f:b2:c6:2f:
fb:ab:82:40:73:11:a9:ad:f6:9b:8d:a5:bd:05:98:57:97:a9:
71:36:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:09 2026 by rpki-client