
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF3C00580D7711F18C459CC7203D8C67.roa
File: DF3C00580D7711F18C459CC7203D8C67.roa (raw, json)
Hash identifier: lNcgPjUlf/dic/YVBRZnHWNvgXjRlHGFqCeF428qK3k=
Subject key identifier: 18:13:AF:6C:C9:E2:28:47:AD:4A:AE:C9:6D:CC:2B:21:E3:57:0C:6C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F561
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF3C00580D7711F18C459CC7203D8C67.roa
Signing time: Mon 06 Jul 2026 17:33:10 +0000
ROA not before: Mon 06 Jul 2026 17:33:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150126
IP address blocks: 2001:df6:adc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62817 (0xf561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:33:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be6d6-5f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:e5:69:81:64:a8:45:90:05:05:f7:92:1d:
21:04:84:56:98:3e:2d:a8:74:45:48:f8:cb:7c:f8:
28:af:f8:ea:66:2c:a8:23:a6:38:26:b5:90:53:d5:
6d:c5:bc:4a:03:99:1c:5e:5d:9c:d6:a8:73:6a:81:
7d:ef:ee:d5:37:5b:9a:6e:84:52:3f:a0:f8:3c:06:
02:51:3d:d2:08:9b:af:32:93:ef:e9:4a:cb:b2:a9:
fb:2b:1e:89:06:53:ee:1e:7e:4a:98:8d:aa:58:2d:
f9:00:cb:4b:a2:2c:bf:5f:1d:05:c4:91:55:f7:46:
39:c3:04:0c:63:01:83:ce:d5:f9:eb:74:6b:27:69:
72:83:38:83:7b:04:12:ec:b9:e4:bf:35:37:12:01:
b0:67:02:7c:b4:99:ce:55:f6:f7:40:f5:cc:0e:c9:
da:3c:fa:f4:bb:2e:12:2a:bc:ac:1e:de:b6:2e:55:
be:a2:c3:44:00:fc:8e:e4:03:33:c6:0e:e6:74:8c:
9b:ff:37:50:a8:7f:0f:b4:94:7d:c3:db:81:7a:e8:
99:a2:56:d8:f0:2c:6e:d8:2c:50:51:53:97:ed:6d:
1b:db:0e:a8:28:ee:e3:98:f5:0d:ce:46:bd:1d:a9:
5c:69:2d:85:55:80:fb:d6:d3:01:46:b6:11:b8:fa:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:13:AF:6C:C9:E2:28:47:AD:4A:AE:C9:6D:CC:2B:21:E3:57:0C:6C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF3C00580D7711F18C459CC7203D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:adc0::/48
Signature Algorithm: sha256WithRSAEncryption
29:04:56:92:7b:10:fd:7b:c8:b2:7e:57:13:bb:99:48:6a:b5:
75:84:75:68:3a:24:59:16:73:c4:7c:9a:70:7f:3a:06:18:8e:
0b:91:c0:2f:ca:bc:db:b9:18:22:ef:32:df:9d:5e:1c:6e:3c:
1f:e1:89:ea:25:46:a5:f4:d0:8f:5f:a5:40:4c:04:05:01:b8:
9e:f0:57:1e:d8:2d:83:55:e1:bb:a8:e7:ba:3f:67:8c:21:46:
45:e4:09:2c:d0:66:aa:4c:b7:38:1b:27:fb:b9:d8:71:c7:ea:
43:f2:04:af:db:20:fd:89:62:3c:6d:fa:45:7a:e2:7d:47:8e:
58:98:62:8b:62:e8:31:12:04:75:32:b2:46:d2:0c:24:50:d2:
11:1e:6f:e1:ec:e5:92:24:71:4d:e4:29:a2:28:85:6b:2e:36:
b0:ed:2a:78:1d:9f:ec:34:8a:cf:d0:65:ee:f5:03:35:4f:bd:
20:6b:71:84:08:f9:0b:91:df:60:d8:41:9e:04:1a:e5:c6:d6:
b1:04:18:6a:c0:6f:9c:8a:1e:02:84:ce:c2:87:d2:25:8f:5b:
9d:e7:1a:4b:20:cb:c6:58:7a:2b:a4:d3:23:14:e4:0f:5f:01:
28:4f:69:a3:c6:f9:6e:5b:44:93:42:5d:ca:50:bd:34:21:d6:
a9:8a:e8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:39:17 2026 by rpki-client