
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DAD8D8CB8FB11E9AB5F3B1BC4F9AE02.roa
File: 9DAD8D8CB8FB11E9AB5F3B1BC4F9AE02.roa (raw, json)
Hash identifier: kRPK0eJ+1R+u3xwjmtz//RprjIbhRjLEE6s4rPyzg54=
Subject key identifier: 17:9D:62:BC:58:29:43:CD:F5:A2:ED:1E:B8:0D:28:2B:47:1F:BB:D0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F759
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DAD8D8CB8FB11E9AB5F3B1BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:49:59 +0000
ROA not before: Mon 06 Jul 2026 17:49:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 37934
IP address blocks: 202.86.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63321 (0xf759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:49:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beac6-78cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:c5:bb:dc:fc:1c:80:8e:30:78:33:9a:dc:
03:36:51:cc:d8:f0:74:d1:13:83:90:f8:cb:2d:03:
0d:72:37:7a:29:3b:0e:8a:13:df:75:ba:95:7b:65:
2f:ee:3a:e2:a9:7b:48:37:ae:70:5c:13:42:d9:ab:
3e:93:7c:12:9b:9b:20:e7:4e:d9:a5:4a:4f:95:69:
b0:f0:59:b0:e1:26:6a:35:dd:a1:09:bc:0e:ea:c3:
1a:48:1c:40:0b:b4:7b:ae:3f:15:44:7a:eb:19:a5:
be:6c:26:e1:9b:a4:eb:53:7a:4f:64:d9:4c:5f:9a:
6f:04:0c:b0:fd:a4:0b:33:4c:25:46:fe:e8:46:30:
0f:74:b1:ee:3b:34:12:d7:ec:bb:3d:8c:94:04:07:
5d:cb:8c:76:bc:26:67:95:2f:a8:61:83:fb:bd:02:
f9:b6:b3:43:84:ae:39:8d:cb:8f:f0:85:82:1d:b9:
e2:b1:64:a3:a9:27:66:88:1f:be:e8:fe:79:e4:75:
09:aa:62:dd:1c:07:81:b7:fd:d0:ec:9f:7f:7e:fe:
56:d4:f1:40:70:c1:59:f5:62:08:ac:0e:7a:34:e5:
29:86:cf:7a:0a:06:7b:8f:f3:9a:df:1e:cd:77:c1:
a1:75:53:d0:5c:1f:1c:8a:17:8b:ea:5b:ea:d5:b5:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9D:62:BC:58:29:43:CD:F5:A2:ED:1E:B8:0D:28:2B:47:1F:BB:D0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DAD8D8CB8FB11E9AB5F3B1BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.86.251.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1c:43:61:52:59:20:96:30:6c:e4:14:99:1a:9e:ec:41:83:
dc:ba:ed:0f:a6:6d:1a:b3:73:f6:ee:24:5d:30:02:ab:a4:d7:
98:a9:33:41:2c:83:e0:7f:21:b8:7f:da:9e:18:3b:cb:cc:cf:
90:78:37:6a:08:d9:53:f7:e2:d3:bd:c1:2b:d6:84:c5:ee:f2:
90:82:64:5a:c4:89:76:28:a5:f3:47:1a:5a:6e:68:df:31:6b:
08:43:ba:71:fe:ec:66:1c:e8:48:81:ca:f0:09:57:90:6d:0a:
ae:02:3f:d6:81:2f:69:5c:76:64:81:f4:51:67:dd:6c:6c:fd:
9e:1f:c5:0f:a7:b2:fd:2f:8b:a7:e5:e1:df:a9:bb:60:e9:4d:
ff:e8:b7:f1:3c:26:1d:1d:67:9c:e5:1d:ac:a2:e1:a0:9d:0b:
fc:b3:65:95:7e:a2:3c:2a:7b:10:fc:8f:f6:9f:3d:64:88:26:
3b:fa:49:91:09:28:14:de:f3:c0:d6:65:39:21:45:47:f6:a8:
39:dd:aa:81:1c:78:ec:35:ca:8e:86:7f:7a:d2:93:a8:3b:b0:
d9:61:43:0b:38:76:a8:a8:03:91:72:99:8d:27:a8:b1:89:2b:
5f:d0:f4:c6:2f:a7:0b:68:f0:f6:3e:4c:1b:4e:97:f3:66:54:
43:8b:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:04 2026 by rpki-client