
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFCF6758849F11F082FA864EC4F9AE02.roa
File: FFCF6758849F11F082FA864EC4F9AE02.roa (raw, json)
Hash identifier: jQUWjnqo4C1pibBmFt32/vMZQ8vEPomQTCLFOcfHBrM=
Subject key identifier: BA:36:5F:B0:4E:24:B4:C0:A4:ED:EC:ED:11:10:A0:F2:9E:F8:43:73
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F6F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFCF6758849F11F082FA864EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:46:22 +0000
ROA not before: Mon 06 Jul 2026 17:46:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154181
IP address blocks: 202.6.196.0/23 maxlen: 24
2001:df6:16c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63219 (0xf6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:46:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be9ee-3685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6a:f3:9e:b6:e6:d9:95:da:4c:74:de:fe:46:
32:b0:dc:30:52:68:13:61:95:dc:43:de:7b:20:dc:
16:df:59:fb:5f:53:97:12:78:b0:ab:38:c8:de:fb:
89:c8:46:23:a6:f3:d5:bc:81:46:b5:cc:15:5e:85:
47:c3:d0:ae:6a:9a:2d:38:66:ab:ff:a5:42:41:14:
b9:1f:71:45:ae:70:7c:39:db:7f:7a:7e:dc:69:1f:
d3:e8:67:cd:6f:e6:c7:7d:f6:57:7b:c9:89:cd:d6:
42:b8:9a:33:d8:b5:ef:07:87:24:66:49:80:32:94:
6b:8e:ea:d3:18:e6:a6:df:2f:26:f7:ac:03:ad:44:
a8:77:63:12:3e:d6:50:86:c9:4b:23:44:f7:d7:4d:
1c:bb:3c:f3:88:39:28:f6:90:e0:87:4d:41:54:bb:
8a:a2:71:87:af:0c:02:60:f6:ca:b3:40:1f:ec:72:
35:eb:04:33:f9:88:8b:f5:28:63:64:ff:f1:e0:3d:
79:02:c8:96:c1:ab:b9:65:fa:24:b1:81:e4:cc:b2:
3b:e8:3c:24:c1:2c:ee:63:cf:20:30:f5:99:4d:98:
aa:e1:4a:20:3e:f8:c4:85:66:47:d0:1a:a9:4c:97:
91:0e:b1:4e:2c:b3:57:5a:02:9e:57:ab:90:f6:ac:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:36:5F:B0:4E:24:B4:C0:A4:ED:EC:ED:11:10:A0:F2:9E:F8:43:73
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFCF6758849F11F082FA864EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.6.196.0/23
IPv6:
2001:df6:16c0::/48
Signature Algorithm: sha256WithRSAEncryption
4d:61:6d:54:e2:72:15:36:7b:53:d1:67:a5:c9:87:4b:1d:fb:
44:4f:e1:09:85:0c:6e:5f:3f:21:60:97:96:cd:09:6c:2c:9d:
9e:42:95:54:53:6a:0c:76:bd:84:90:3d:d5:04:51:cf:0e:64:
c1:80:43:f5:ed:fe:32:d7:62:0d:cd:3b:ae:04:66:c3:a6:c2:
26:2b:02:5f:31:98:f2:55:35:f8:4e:24:5a:5c:b2:b4:ce:7c:
42:f6:fc:f9:49:ea:0f:4f:3e:9e:b5:4d:d9:dd:b5:b9:63:a1:
f2:85:6a:0f:15:59:59:2c:7e:2e:72:e7:70:dc:29:7f:94:21:
dd:e9:1e:0a:f7:e3:f8:c2:62:e3:15:15:6e:2b:4c:51:6d:51:
fe:ee:2d:34:67:68:88:db:94:45:47:44:b9:40:e3:70:02:10:
48:20:a7:e0:48:4a:aa:81:4f:fa:97:c4:43:1a:51:ba:ce:20:
78:08:79:dc:ff:99:99:8a:9e:0a:1a:ef:90:17:2f:f0:a3:32:
31:22:71:27:ab:14:7c:70:cc:22:fc:12:74:67:fa:65:bd:07:
b5:14:42:c1:b4:8f:09:d9:ca:7e:68:df:25:7f:c2:e3:1d:a2:
7d:c1:1f:6f:4d:fc:44:34:18:50:84:30:14:80:db:bc:44:49:
cc:4c:98:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:57 2026 by rpki-client