
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A51706904FF211EBB552EE6EC4F9AE02.roa
File: A51706904FF211EBB552EE6EC4F9AE02.roa (raw, json)
Hash identifier: 2eymvMYlLzljE9LjkUf819/D+jyfe5ibOMhdfNp3eyA=
Subject key identifier: 7E:A9:52:9D:AB:CB:01:68:3C:03:A8:AA:0B:A0:E8:7E:A6:8A:06:1C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E33B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A51706904FF211EBB552EE6EC4F9AE02.roa
Signing time: Sun 31 May 2026 16:43:48 +0000
ROA not before: Sun 31 May 2026 16:43:48 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 134341
IP address blocks: 2406:d540::/32 maxlen: 32
2406:d540::/36 maxlen: 36
2406:d540:1000::/36 maxlen: 36
2406:d540:2000::/36 maxlen: 36
2406:d540:3000::/36 maxlen: 36
2406:d540:4000::/36 maxlen: 36
2406:d540:5000::/36 maxlen: 36
2406:d540:6000::/36 maxlen: 36
2406:d540:7000::/36 maxlen: 36
2406:d540:8000::/36 maxlen: 36
2406:d540:9000::/36 maxlen: 36
2406:d540:a000::/36 maxlen: 36
2406:d540:b000::/36 maxlen: 36
2406:d540:c000::/36 maxlen: 36
2406:d540:d000::/36 maxlen: 36
2406:d540:e000::/36 maxlen: 36
2406:d540:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58171 (0xe33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:43:48 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6544-995b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:a9:bb:e5:cd:5a:23:4b:74:36:94:54:ca:
4c:69:7e:1b:13:e2:27:ad:6f:d1:c1:7a:0c:35:ca:
64:3b:bf:43:03:55:af:75:3f:e1:e5:3b:56:ad:8a:
a1:1b:32:31:c6:b3:ab:44:b5:a4:c3:0b:d3:97:3f:
63:57:ce:c5:28:87:da:76:da:5b:c0:46:c2:29:87:
92:73:88:8d:3d:a3:4f:7d:e5:59:ff:21:38:55:f1:
66:6a:0a:fe:b5:e8:c7:ed:0c:d9:69:dc:e3:f3:4f:
4a:93:48:2d:45:9b:7b:da:79:63:64:a4:b1:07:6b:
7b:6b:e2:1f:16:0f:5f:1b:be:f7:8e:dd:65:7d:7e:
af:0e:e9:80:a1:1a:06:61:fd:1c:81:9d:1d:0f:3b:
f4:63:7e:f3:82:1e:14:b5:60:7a:79:57:c3:16:35:
54:be:06:b5:99:98:0c:cc:25:04:19:79:88:33:cd:
63:9e:10:2a:92:dc:67:6d:4a:b4:c8:e5:4f:be:27:
3a:d3:16:9d:2d:af:5a:3d:0e:2a:ba:aa:84:f9:18:
89:84:21:06:25:f2:08:76:80:3b:f0:fe:7a:a5:97:
6a:b2:72:9c:f6:ca:1d:14:e9:eb:6e:36:51:a0:82:
9c:fe:8b:dc:ff:10:1f:91:21:81:0a:40:17:ae:f1:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A9:52:9D:AB:CB:01:68:3C:03:A8:AA:0B:A0:E8:7E:A6:8A:06:1C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A51706904FF211EBB552EE6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:d540::/32
Signature Algorithm: sha256WithRSAEncryption
3d:72:3c:34:57:65:f3:cc:cc:b7:5e:42:0c:12:f7:39:4f:aa:
9d:3b:6e:32:ca:5e:32:3b:50:52:4f:e7:40:1a:4a:d0:cf:6c:
78:65:ac:57:91:54:a3:dd:0a:91:e4:56:38:ab:5c:54:97:33:
fd:bf:19:3a:5b:ff:1d:06:65:7e:74:a0:b6:52:b9:6d:d5:75:
d2:23:e2:3c:01:d0:15:06:1d:94:a6:b0:7b:50:ee:18:3c:e4:
10:59:e6:b2:77:77:66:11:1c:06:94:8d:09:22:e1:f9:41:a9:
e8:ff:fe:43:78:4a:fc:73:15:18:08:ae:b5:f3:31:9b:96:af:
c5:2d:ad:3c:c6:cc:4a:c9:b4:70:f8:14:0e:4b:b2:03:40:91:
76:76:67:e3:72:a2:2b:55:1c:62:57:0b:d4:9a:54:1d:f4:75:
c9:b4:36:42:8a:44:12:b6:a2:3b:5a:88:0e:89:1c:87:bd:45:
10:56:07:88:ec:94:d3:b1:6b:67:19:74:19:50:13:85:2a:5e:
63:13:a1:5c:de:9a:d3:20:b6:b6:4a:2a:c5:f5:c4:08:83:fa:
d8:9d:e5:63:d4:e3:45:83:df:d8:c3:c4:bf:05:63:31:58:72:
02:4b:28:19:d8:86:af:c8:6a:b5:5d:60:90:f7:76:c5:98:6d:
63:81:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:48 2026 by rpki-client