
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E051798A9C8F11F1BB69DBB45511F970.roa
File: E051798A9C8F11F1BB69DBB45511F970.roa (raw, json)
Hash identifier: oxaJz5tJCUZRz5qpAQhMaYm0g8UI4X/oTGolfeu9I7Q=
Subject key identifier: 38:85:0C:E0:2F:BF:F4:24:BC:04:26:4B:2A:7B:D0:BC:73:1D:97:4A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FAEC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E051798A9C8F11F1BB69DBB45511F970.roa
Signing time: Thu 20 Aug 2026 12:08:38 +0000
ROA not before: Thu 20 Aug 2026 12:08:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153286
IP address blocks: 2001:df4:d240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64236 (0xfaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 20 12:08:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a86ee46-b175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:b5:42:09:be:08:60:d7:f9:3d:00:e2:a8:
9e:91:03:fc:23:a4:bc:d6:c4:5d:8c:b5:08:4e:2b:
d1:4b:1f:43:57:74:5d:ed:ac:49:38:e3:73:9e:4a:
d8:7f:92:d8:29:77:05:b0:2c:bc:03:b4:f1:4b:de:
e9:87:39:b4:03:9d:a0:3f:7b:1f:44:a6:bf:81:cb:
f7:79:be:6c:fa:41:3a:2c:40:81:b3:13:46:40:8c:
f4:f7:88:ef:de:14:69:81:c0:7e:8e:8a:44:f1:44:
34:dd:4d:06:c6:38:7a:fa:0c:b4:ee:39:00:78:03:
34:9e:87:27:3f:e0:45:ea:f1:e7:7b:c4:78:d8:5c:
c8:44:55:59:71:e2:d8:fd:71:87:44:b9:f2:6c:b1:
6f:4b:11:94:61:a0:b1:58:1b:01:d6:9b:08:cf:f3:
26:19:35:4a:43:2f:64:1b:4a:ae:9c:44:a1:46:c1:
69:8a:96:bc:d7:88:8e:8a:07:12:28:60:ee:09:33:
74:44:f5:a4:6d:84:e5:5c:e6:19:ad:e9:9b:23:3b:
2e:9f:bf:64:39:22:7c:6a:e8:0f:82:e3:61:3f:5a:
cc:d3:0e:8a:11:06:8b:b7:0d:d4:62:18:ac:72:0e:
e4:70:72:73:6b:6d:6d:91:4d:71:02:8e:f0:ff:40:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:0C:E0:2F:BF:F4:24:BC:04:26:4B:2A:7B:D0:BC:73:1D:97:4A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E051798A9C8F11F1BB69DBB45511F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:d240::/48
Signature Algorithm: sha256WithRSAEncryption
26:c3:b3:1f:e2:2c:f9:e4:22:62:18:0a:d2:b8:dc:9b:5d:63:
b7:cd:42:33:ea:12:e8:69:01:f5:cc:1d:1a:84:9a:62:51:18:
1b:b6:6d:a1:ec:77:92:f0:82:6a:1b:fa:64:ce:92:a7:2e:57:
9f:38:75:24:44:e8:0d:4a:14:60:93:d7:10:f5:e7:91:9d:24:
48:35:b0:2e:bb:9f:e3:06:e1:80:42:e3:e7:23:bd:46:a4:56:
fd:a9:d4:57:59:40:f2:c2:a3:76:05:16:df:05:b7:9f:78:e3:
c8:28:da:1f:4d:b0:79:22:7e:14:83:ee:bb:76:bd:72:50:0f:
d9:12:7f:39:e7:15:76:eb:7e:35:98:27:74:cd:04:02:47:8f:
ea:c3:4a:c5:c6:53:1d:8d:ca:cd:49:ad:cb:f0:61:42:0e:c2:
62:a8:e9:00:76:07:f7:92:dd:56:f1:f4:b0:57:97:be:e9:47:
b0:87:8b:53:2a:42:a1:6b:57:fd:e3:d6:81:aa:8f:3c:be:69:
c4:45:a9:3e:0f:d2:40:9d:9f:67:0e:4a:55:d5:92:98:c2:0a:
fd:37:ed:dc:7d:fd:68:b2:2d:2d:20:46:07:02:5d:eb:70:59:
3d:2d:e7:2f:cd:c6:61:b8:54:fe:e1:c3:f7:48:d4:94:95:6f:
b9:9a:74:45
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAPrsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDgyMDEyMDgzOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE4NmVlNDYtYjE3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN6stUIJvghg1/k9AOKonpED/COkvNbEXYy1CE4r0UsfQ1d0Xe2sSTjjc55K
2H+S2Cl3BbAsvAO08Uve6Yc5tAOdoD97H0Smv4HL93m+bPpBOixAgbMTRkCM9PeI
794UaYHAfo6KRPFENN1NBsY4evoMtO45AHgDNJ6HJz/gRerx53vEeNhcyERVWXHi
2P1xh0S58myxb0sRlGGgsVgbAdabCM/zJhk1SkMvZBtKrpxEoUbBaYqWvNeIjooH
Eihg7gkzdET1pG2E5VzmGa3pmyM7Lp+/ZDkifGroD4LjYT9azNMOihEGi7cN1GIY
rHIO5HByc2ttbZFNcQKO8P9A76UCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBQ4hQzg
L7/0JLwEJksqe9C8cx2XSjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UwNTE3OThB
OUM4RjExRjFCQjY5REJCNDU1MTFGOTcwLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfTSQDANBgkqhkiG9w0BAQsFAAOCAQEAJsOzH+Is+eQiYhgK
0rjcm11jt81CM+oS6GkB9cwdGoSaYlEYG7Ztoex3kvCCahv6ZM6Spy5Xnzh1JETo
DUoUYJPXEPXnkZ0kSDWwLruf4wbhgELj5yO9RqRW/anUV1lA8sKjdgUW3wW3n3jj
yCjaH02weSJ+FIPuu3a9clAP2RJ/OecVdut+NZgndM0EAkeP6sNKxcZTHY3KzUmt
y/BhQg7CYqjpAHYH95LdVvH0sFeXvulHsIeLUypCoWtX/ePWgaqPPL5pxEWpPg/S
QJ2fZw5KVdWSmMIK/Tft3H39aLItLSBGBwJd63BZPS3nL83GYbhU/uHD90jUlJVv
uZp0RQ==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:14 2026 by rpki-client