
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2151032B90D11EE9E5C667EC4F9AE02.roa
File: E2151032B90D11EE9E5C667EC4F9AE02.roa (raw, json)
Hash identifier: hU6vDybtEuKeeIcoNJ4ncPNDa6GG0KgpyeZx+Zlsm/k=
Subject key identifier: 64:8D:EA:F5:BC:AF:7F:98:1E:1E:B7:45:05:FA:B6:60:E6:3B:31:02
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA08
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2151032B90D11EE9E5C667EC4F9AE02.roa
Signing time: Sun 31 May 2026 17:40:52 +0000
ROA not before: Sun 31 May 2026 17:40:52 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151735
IP address blocks: 2001:df3:6140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59912 (0xea08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:40:52 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c72a4-5ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:af:2b:ce:2b:fa:ff:8a:47:3f:bf:df:10:
ca:12:c2:76:bc:a0:83:75:e4:23:2f:e8:43:9a:96:
a1:cf:1d:31:16:8d:f1:33:d2:c2:70:ef:09:db:b2:
a8:7b:22:44:96:4c:ed:89:c5:4b:4f:2a:25:8c:9e:
de:44:d3:a7:35:87:47:24:cf:58:dd:48:f3:ef:89:
bc:ea:27:c1:f9:4c:31:6d:18:a6:a4:e2:f9:df:ae:
27:70:01:f3:48:a7:2e:2e:a4:f7:eb:3a:cd:9c:bd:
66:7a:5b:df:f4:b9:ea:f9:84:68:5f:61:d6:30:f3:
94:32:4b:89:97:13:8b:44:2e:b0:6f:a7:cd:b3:6d:
14:59:b4:a2:50:ca:97:67:cc:bb:37:3f:8d:bd:4c:
33:0a:e0:c7:c0:9d:8b:0c:f5:1a:e0:96:fe:9c:2b:
15:96:29:ca:39:88:c1:6f:3d:28:e6:ff:4e:58:25:
10:cf:12:c5:66:09:91:0e:36:9c:c8:82:df:d7:82:
e5:9e:37:5d:8f:b1:18:43:9c:c0:49:cf:58:a8:43:
5b:46:dc:38:7b:03:ea:76:fe:49:6e:3e:ba:73:e2:
74:62:0f:74:08:25:a3:c0:84:83:9c:fe:b9:d6:5f:
c5:e7:26:d7:69:a9:43:bb:b3:83:df:f0:34:fe:ca:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8D:EA:F5:BC:AF:7F:98:1E:1E:B7:45:05:FA:B6:60:E6:3B:31:02
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2151032B90D11EE9E5C667EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:6140::/48
Signature Algorithm: sha256WithRSAEncryption
3f:b9:f6:11:54:b8:3c:a8:3b:58:e2:f1:38:85:77:6e:24:63:
db:80:1b:df:2e:3b:21:75:65:b1:a3:8a:64:ad:f3:03:89:af:
4f:78:47:91:e3:60:c9:38:4b:73:de:df:0b:e9:1d:0c:7b:c2:
fe:1e:99:8f:32:4c:79:a1:31:9a:a7:76:16:09:53:55:e5:30:
b5:f9:44:c8:8e:fd:b0:5d:4e:0d:4d:0b:05:2e:b5:84:ba:dc:
a4:d2:fb:ad:ca:06:3c:13:51:9b:4b:f0:08:29:75:d0:71:63:
d4:41:c4:a7:43:53:31:21:0c:d5:4d:7d:6d:87:f5:2d:0c:a7:
fa:4e:09:d8:f7:32:1f:0e:63:48:a3:c7:49:1c:ca:8c:ea:ea:
8f:1e:57:9a:9b:39:50:12:f8:e6:be:f6:e7:0b:12:24:25:33:
27:db:f4:08:ec:a8:44:1d:f8:ae:9f:16:c3:fd:81:2f:af:af:
3d:98:28:ab:78:92:41:3e:a9:cb:f2:45:40:b6:61:4a:72:4c:
2a:ce:a0:64:f6:a1:26:b0:d0:0a:64:19:16:a7:bc:08:94:54:
42:44:b0:01:b3:29:5a:16:bd:8a:3d:f3:8f:f5:65:f5:0e:8e:
72:3e:ae:7b:4b:3b:cd:cf:ee:7e:ff:1c:66:6d:7f:95:bb:ce:
5c:a7:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:46 2026 by rpki-client