
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9495D364EF5D11EF93BCE20CC4F9AE02.roa
File: 9495D364EF5D11EF93BCE20CC4F9AE02.roa (raw, json)
Hash identifier: cOuoZq5hQBdsEZlLznF2XY0imbmcSsVX2hl1hpKS4X8=
Subject key identifier: FC:94:91:CE:44:48:0A:D9:74:B8:DD:48:B8:57:D3:9E:D1:ED:6C:64
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EED7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9495D364EF5D11EF93BCE20CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:37:51 +0000
ROA not before: Mon 06 Jul 2026 16:37:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133967
IP address blocks: 2001:df4:200::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61143 (0xeed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd9df-74ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:72:7c:4d:a7:3c:e3:c3:f6:8d:41:7e:90:
81:aa:73:e6:f8:bd:fb:da:13:51:28:4a:5f:70:49:
c2:d8:4e:ec:fc:6a:d2:ce:b0:e1:cf:a0:fe:c2:93:
39:ad:10:06:0e:70:a3:fb:a1:f2:dc:0e:1e:eb:2a:
14:01:96:ac:39:b8:a8:e1:4b:77:ab:64:26:43:73:
00:d4:ea:59:bb:22:05:bb:cf:42:d3:9e:31:97:c3:
ac:7a:c4:45:4e:1c:db:a6:af:03:ed:f1:6b:f3:9a:
83:e1:88:a2:74:98:d6:ec:c4:41:70:10:c1:91:0a:
69:e9:8a:36:9e:cc:c8:c9:15:a1:c4:96:91:73:77:
0a:54:d1:75:5c:4b:f7:57:fa:de:77:b1:5c:8e:37:
50:bc:40:1c:bf:ce:f6:6c:5f:c2:e5:19:90:ae:03:
2a:85:d5:ca:86:cc:98:53:67:ce:f4:42:03:49:11:
21:5a:22:30:39:5b:75:c8:fb:73:9f:9a:50:c2:56:
cc:15:4a:51:11:37:52:e2:79:f0:a7:af:ad:d0:6d:
57:06:a0:ff:5f:99:18:14:77:da:9e:74:56:64:50:
6a:9d:b3:0c:46:75:45:13:9c:2d:8a:5b:17:8e:c5:
da:44:91:12:6c:80:66:ed:a8:a3:1f:31:d7:15:0d:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:94:91:CE:44:48:0A:D9:74:B8:DD:48:B8:57:D3:9E:D1:ED:6C:64
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9495D364EF5D11EF93BCE20CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:200::/47
Signature Algorithm: sha256WithRSAEncryption
65:18:4b:04:ff:ba:df:74:0b:c1:44:a0:84:44:f1:44:08:c4:
4f:67:f9:5c:76:2e:7c:63:70:bc:be:87:fc:23:7c:fb:9f:47:
bf:40:9d:12:a8:41:3f:10:10:a5:63:cd:2f:91:c8:a0:79:99:
0a:ad:f9:fe:bb:2e:48:ed:64:31:e1:9b:e9:86:5e:44:12:08:
1c:e6:b9:b4:66:29:6a:3d:77:3a:56:9e:c6:c8:e8:09:74:e1:
cd:e7:68:d3:e4:dc:12:c0:a1:98:27:d9:bb:39:55:03:ae:c3:
13:87:5b:ef:24:71:29:d2:bf:57:58:20:06:94:db:99:0f:75:
97:24:6c:b0:9e:d0:e5:21:fc:46:4d:3a:9c:a7:ff:bc:56:a0:
3e:82:5e:cd:b5:86:f4:56:3d:f2:f8:cf:c4:cc:71:b7:68:31:
57:02:11:8b:56:8e:8c:6e:1c:45:0a:9b:8e:b7:b5:47:74:ea:
79:19:97:8a:56:cc:b3:ac:ac:ab:10:74:55:39:fb:9a:09:db:
96:4b:f9:41:28:ce:3a:a6:34:68:54:d6:c8:53:b1:61:a8:8c:
3f:ec:26:cd:c6:61:bb:75:a1:ce:a0:49:8d:77:95:2d:e9:c6:
10:72:34:ca:b5:de:2e:b4:b2:83:59:b6:bb:70:e7:52:fd:48:
5f:6d:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:06 2026 by rpki-client