
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCFD152C74AA11EEB7DA4C6BC4F9AE02.roa
File: FCFD152C74AA11EEB7DA4C6BC4F9AE02.roa (raw, json)
Hash identifier: rwlreiDGu8P5qmvdhQrSuJoDxgXTAlEuIuTpuYQOLiA=
Subject key identifier: 00:75:F2:FC:B2:BC:59:EF:A4:4A:23:E7:63:0C:3E:9B:F5:A2:BF:48
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F2E1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCFD152C74AA11EEB7DA4C6BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:11:45 +0000
ROA not before: Mon 06 Jul 2026 17:11:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141268
IP address blocks: 2406:dd40::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62177 (0xf2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:11:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be1d1-902e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:33:30:b5:5b:56:53:57:8a:9c:27:e2:03:
1e:d8:38:1c:c7:1e:c3:8b:a6:29:6f:0c:af:86:16:
b3:c2:0e:85:49:bc:f6:ac:63:38:dd:9b:61:75:c7:
af:8e:1d:30:39:77:5c:e2:e6:c5:96:f9:94:ee:e7:
36:fb:5e:44:72:68:4a:4e:32:d0:ea:0b:03:55:12:
9c:2d:f3:32:00:68:4f:e7:c9:51:8e:87:61:d6:0d:
23:6a:4b:d0:ee:37:db:1d:b5:51:44:a9:2e:cb:6d:
e4:ef:35:f7:fe:f7:7d:0a:5c:62:e7:2b:ce:f5:c0:
f8:2f:87:07:a3:6f:9e:ec:cb:43:15:93:7d:69:1b:
90:93:00:08:ce:e3:69:21:b3:86:77:3d:55:a0:4d:
c0:4b:12:29:35:21:9e:ad:7a:b4:e7:cd:1a:a7:8b:
95:00:0e:96:a2:eb:4a:c4:aa:78:81:3d:2b:8e:76:
3e:3e:5e:55:ad:a7:7e:c0:91:2c:59:f9:4b:b5:59:
cc:e8:7a:a9:c2:2e:d4:d1:be:c6:4d:02:2e:54:ae:
8f:65:77:23:d8:7b:8d:bb:4e:66:96:d8:e4:53:e4:
53:25:61:93:d9:f5:6b:60:45:b4:36:8c:f9:82:bb:
93:50:9d:87:13:f7:c0:f7:3a:07:88:cf:93:3a:aa:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:75:F2:FC:B2:BC:59:EF:A4:4A:23:E7:63:0C:3E:9B:F5:A2:BF:48
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCFD152C74AA11EEB7DA4C6BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:dd40::/35
Signature Algorithm: sha256WithRSAEncryption
aa:f6:66:ce:e7:e0:82:1b:ff:74:ab:25:83:a8:0a:3f:84:9f:
2d:93:f6:a1:44:c1:20:27:0f:c5:70:af:74:5f:b1:c6:55:45:
58:3b:04:b9:8b:0b:c9:5f:ef:02:6b:bf:c0:e5:e5:c0:84:ca:
81:77:f3:70:c5:bf:b0:c9:9d:4c:1c:05:64:b6:fb:c4:d2:82:
75:17:8d:b5:07:78:57:28:74:ff:32:91:39:f1:e1:38:62:05:
c3:35:89:a3:93:37:ae:37:0a:7e:6f:72:57:51:f1:0b:f8:e0:
6e:b0:d8:14:d8:6d:c5:11:7c:5b:cb:f0:d8:d9:4b:15:da:6e:
38:60:22:ec:76:d5:30:aa:2a:41:50:5a:10:a0:4d:fd:4e:ec:
3b:fe:d1:0b:d7:97:16:eb:61:b8:ed:44:39:b9:99:c5:c2:21:
c9:4b:bc:4e:f0:2a:53:8a:0a:15:7e:d3:c0:ce:0b:d5:b7:30:
ba:df:23:38:ee:16:d9:8d:f3:be:95:1d:27:3a:6f:b8:6a:9c:
bb:d2:4d:cd:d6:0b:f0:40:5a:b8:65:ee:62:a4:b3:4c:aa:76:
7f:8a:4c:62:b0:57:e0:6b:9d:85:17:b8:d0:23:6e:51:89:2c:
7a:4f:1d:a2:14:89:02:91:50:cd:15:87:74:b7:d9:1e:8f:44:
a4:49:7f:f2
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDAPLhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTE0NVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUxZDEtOTAyZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIvXMzC1W1ZTV4qcJ+IDHtg4HMcew4umKW8Mr4YWs8IOhUm89qxjON2bYXXH
r44dMDl3XOLmxZb5lO7nNvteRHJoSk4y0OoLA1USnC3zMgBoT+fJUY6HYdYNI2pL
0O432x21UUSpLstt5O819/73fQpcYucrzvXA+C+HB6NvnuzLQxWTfWkbkJMACM7j
aSGzhnc9VaBNwEsSKTUhnq16tOfNGqeLlQAOlqLrSsSqeIE9K452Pj5eVa2nfsCR
LFn5S7VZzOh6qcIu1NG+xk0CLlSuj2V3I9h7jbtOZpbY5FPkUyVhk9n1a2BFtDaM
+YK7k1CdhxP3wPc6B4jPkzqqwAsCAwEAAaOCAmIwggJeMB0GA1UdDgQWBBQAdfL8
srxZ76RKI+djDD6b9aK/SDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZDRkQxNTJD
NzRBQTExRUVCN0RBNEM2QkM0RjlBRTAyLnJvYTAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBSQG3UAAMA0GCSqGSIb3DQEBCwUAA4IBAQCq9mbO5+CCG/90qyWD
qAo/hJ8tk/ahRMEgJw/FcK90X7HGVUVYOwS5iwvJX+8Ca7/A5eXAhMqBd/Nwxb+w
yZ1MHAVktvvE0oJ1F421B3hXKHT/MpE58eE4YgXDNYmjkzeuNwp+b3JXUfEL+OBu
sNgU2G3FEXxby/DY2UsV2m44YCLsdtUwqipBUFoQoE39Tuw7/tEL15cW62G47UQ5
uZnFwiHJS7xO8CpTigoVftPAzgvVtzC63yM47hbZjfO+lR0nOm+4apy70k3N1gvw
QFq4Ze5ipLNMqnZ/ikxisFfga52FF7jQI25RiSx6Tx2iFIkCkVDNFYd0t9kej0Sk
SX/y
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:49 2026 by rpki-client