
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB0209F4C5EA11F093985A40C4F9AE02.roa
File: CB0209F4C5EA11F093985A40C4F9AE02.roa (raw, json)
Hash identifier: RQYesAuHgqmkFUfeRcQ79xeJt/LjhpYyuZssBLCN+0U=
Subject key identifier: C3:09:9C:33:4A:20:37:07:CB:E4:F1:E2:24:48:CC:97:75:BD:90:DE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E694
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB0209F4C5EA11F093985A40C4F9AE02.roa
Signing time: Sun 31 May 2026 17:11:48 +0000
ROA not before: Sun 31 May 2026 17:11:48 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 140178
IP address blocks: 2001:df0:5540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59028 (0xe694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:11:48 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6bd4-8fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:33:26:70:fb:c9:0e:73:95:a0:98:d1:7b:
d0:d2:8a:02:0d:5c:20:5c:8d:07:43:08:51:df:30:
9d:48:90:01:99:f7:52:3b:6b:05:91:f3:f3:e8:d3:
73:eb:bb:33:37:3b:f9:a3:2d:81:53:06:23:02:66:
cb:3f:85:cc:ee:6c:47:e3:44:90:50:d0:47:a1:75:
ee:12:2a:b3:33:bb:fb:2c:5c:ad:31:fa:bc:c3:b9:
e8:57:35:10:3b:ef:da:50:d9:a4:6f:f0:b3:4b:bd:
f2:b4:d2:a3:52:c1:ee:6f:1c:ab:64:8c:34:ca:b3:
5d:17:fa:bd:26:b8:f5:fe:7e:51:a6:1d:36:7a:f4:
f9:6d:69:a7:75:99:58:aa:dd:cb:6c:45:47:c9:0f:
52:6a:5a:e0:00:7b:83:59:8d:f5:2c:cc:b1:6e:f5:
67:d1:07:ce:49:73:91:b9:db:ed:85:84:bf:2e:95:
0d:b5:e2:10:5c:93:b7:38:a8:8f:20:16:4a:49:ad:
60:84:56:1b:3c:7e:77:a8:c6:f1:d3:ad:5d:32:5b:
41:19:f7:d5:59:4f:d8:c9:b0:51:d1:b6:f0:3a:d4:
d0:06:68:6e:f4:53:a1:85:65:8d:5d:3c:4c:90:d1:
78:2b:3f:ba:64:cd:b7:c7:1c:68:05:e4:3f:82:65:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:9C:33:4A:20:37:07:CB:E4:F1:E2:24:48:CC:97:75:BD:90:DE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB0209F4C5EA11F093985A40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:5540::/48
Signature Algorithm: sha256WithRSAEncryption
53:fd:ce:43:58:1e:40:f3:fa:b3:70:58:9f:96:9f:a9:4c:7b:
2a:2e:fa:ec:53:ae:28:35:a6:90:f7:cf:00:ec:f9:b9:05:cf:
e6:af:fc:fb:77:c5:a8:46:81:e9:fe:b2:97:3f:42:4e:f6:97:
9c:42:19:29:49:ab:91:8c:af:51:06:cf:00:89:06:2d:8e:66:
e0:35:5c:12:20:0e:f6:ca:93:0e:fa:5d:6c:71:8c:da:2a:99:
ee:fb:67:60:22:76:ef:c4:d1:ed:14:14:b4:73:14:e8:b2:b9:
d7:ec:b7:10:22:25:4a:cc:01:5e:ee:b3:a1:a8:f2:c9:b7:5a:
e7:a8:8f:d0:23:e9:63:b5:7f:f9:2c:ed:9b:a1:04:ec:8a:fa:
71:d7:76:ac:52:2f:16:ae:88:c8:4e:bf:37:53:64:dc:af:88:
9e:a9:fc:98:6b:73:ff:94:20:8e:7e:60:d7:00:c9:be:e7:9d:
ee:5f:1e:e3:2d:97:53:df:a2:4a:ea:fd:f3:48:66:af:2d:1f:
5a:25:21:cd:33:07:67:50:5c:0a:95:b6:53:27:1d:da:4b:20:
12:26:1a:3f:2b:94:84:95:f9:df:fb:fb:20:b1:77:38:d6:69:
41:d9:44:24:c1:23:60:f1:1e:ba:52:95:10:ae:73:bd:51:dd:
38:da:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:08 2026 by rpki-client