
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD89187C9AA011EFA0495571C4F9AE02.roa
File: DD89187C9AA011EFA0495571C4F9AE02.roa (raw, json)
Hash identifier: ubRKIpPwAc64cvUZxNC2NpO39Wn3jpvFWgmxWVRyF9E=
Subject key identifier: F1:27:DE:88:7C:C6:CE:B3:25:1D:4E:71:C5:D9:83:14:FA:44:58:A8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F686
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD89187C9AA011EFA0495571C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:42:40 +0000
ROA not before: Mon 06 Jul 2026 17:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153233
IP address blocks: 2001:df4:85c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63110 (0xf686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be910-5745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:76:f3:c7:e6:b0:fd:f5:b3:9d:7e:ca:56:
61:9b:dc:f0:1c:98:ae:19:64:50:9d:b5:4b:5e:4a:
7d:c6:d1:de:bf:61:96:c1:ba:7e:38:89:87:55:08:
49:fe:44:96:b9:c5:aa:66:67:26:f9:3c:8e:c2:96:
cf:19:8e:df:cc:55:af:78:8e:36:6f:fb:58:55:c7:
e4:f7:8f:4c:d9:8e:d3:96:8d:56:f2:d0:5f:89:20:
1f:32:96:fe:e1:34:95:c5:bd:49:f1:51:74:2c:0c:
9a:6b:0e:38:4f:8d:9e:08:0d:22:fa:27:3f:f4:da:
23:b7:ba:a9:8f:7e:b7:e4:e1:c3:72:2c:2f:73:57:
38:b1:91:ad:64:5f:bc:0e:f4:fb:8c:ad:5a:92:47:
d9:47:96:f9:44:76:04:94:2a:b3:24:0c:3b:aa:8b:
98:33:99:51:15:71:e9:c6:6f:ac:38:34:3f:a8:10:
65:f9:ae:a1:d7:71:ed:e3:65:67:82:a3:21:86:5f:
40:01:33:36:db:bc:d0:df:ed:88:c0:7d:f5:00:c2:
c9:b1:89:bb:7a:45:37:f1:f8:41:11:7c:e0:d3:13:
7d:a8:f0:8d:89:93:f9:ab:9a:e0:30:04:fe:ef:b7:
25:3f:18:75:21:dc:eb:a7:87:7b:10:4d:b2:33:b2:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:27:DE:88:7C:C6:CE:B3:25:1D:4E:71:C5:D9:83:14:FA:44:58:A8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD89187C9AA011EFA0495571C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:85c0::/48
Signature Algorithm: sha256WithRSAEncryption
38:c7:8e:d7:ec:ba:d7:6b:c7:31:f8:fd:6e:ac:ec:bf:36:9e:
99:ba:b1:34:78:46:a8:16:c8:c8:99:ae:4d:2a:e3:d8:70:b9:
df:7d:3d:c3:36:08:1d:c7:82:94:ea:18:4a:ac:92:6c:04:36:
86:54:dd:5c:0b:ab:57:d1:ba:5d:b7:5f:8e:ca:89:6d:b4:de:
60:63:52:f8:0e:1a:bc:39:db:10:6e:53:39:da:46:4a:f1:cb:
21:4a:e4:54:0e:a6:db:40:08:14:2a:52:ee:70:21:3b:70:75:
78:f5:b5:a5:82:20:f2:1c:a5:42:95:cb:51:3d:db:5d:63:65:
98:ee:a1:8f:cb:de:17:3f:ab:ac:6d:f5:b3:44:ed:09:05:ef:
a6:f6:8b:db:b6:0e:c1:15:e8:4e:07:97:2f:06:d7:d9:34:16:
c9:e8:09:f1:73:f5:23:5a:59:b6:36:2c:50:04:65:c7:d4:87:
85:91:6a:3f:e5:6c:0f:b4:9b:7e:44:9f:21:ba:a3:aa:aa:87:
b6:be:80:80:7c:1c:7d:d4:92:25:b0:b1:ef:c5:39:04:f9:76:
fe:c1:fa:65:e2:45:80:6b:39:9a:51:bd:55:1f:de:3f:32:b6:
c0:52:2e:30:d4:67:4f:63:41:95:ce:01:14:7e:3e:f5:14:34:
55:f4:11:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:05 2026 by rpki-client