
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFCF6758849F11F082FA864EC4F9AE02.roa
File: FFCF6758849F11F082FA864EC4F9AE02.roa (raw, json)
Hash identifier: VFBqUMzHJ3qvGpSpnn9lr9gtkLJx2IqBuuUBQF+xPFA=
Subject key identifier: 90:76:25:9A:58:F5:65:A9:E5:DB:CE:3E:8B:DC:20:7F:AD:13:0A:99
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EAD3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFCF6758849F11F082FA864EC4F9AE02.roa
Signing time: Sun 31 May 2026 17:47:12 +0000
ROA not before: Sun 31 May 2026 17:47:12 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 154181
IP address blocks: 202.6.196.0/23 maxlen: 24
2001:df6:16c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60115 (0xead3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:47:12 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7420-69f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:42:4c:8a:8b:1d:51:8e:1f:e3:27:29:f5:
a5:ec:8f:a6:cf:de:8d:ef:bf:9a:53:78:c3:9a:53:
03:6f:30:55:c3:bc:c9:c0:9d:a0:bc:ab:5b:55:d2:
19:21:57:78:b7:13:5f:d7:97:83:b0:2b:df:20:d3:
1e:69:ad:6c:ad:f9:3d:17:2c:57:8d:9b:70:5e:91:
35:6e:16:86:f9:34:ab:7d:7e:9d:0c:fe:60:85:2d:
49:c5:d5:0a:24:ec:84:0a:a1:12:10:a4:a0:e5:1a:
83:51:d4:77:3e:94:51:5e:f7:21:44:90:98:13:7e:
62:b4:05:db:3a:06:11:80:10:5f:8c:d4:4c:1b:fd:
e3:87:9c:79:15:0e:07:58:5b:57:b9:50:e2:48:68:
38:e7:73:4e:2a:33:d9:12:7d:ec:30:a3:17:86:42:
fd:96:f6:b5:53:0c:37:cd:6c:14:78:16:f4:22:6e:
ec:37:4a:51:6f:b1:76:49:9f:07:d1:8c:28:90:2a:
5e:ef:31:97:19:be:e5:77:fe:82:4a:16:d7:ab:79:
77:77:97:e0:9e:0f:75:4c:8e:d2:c1:9e:3e:e0:7a:
f1:3b:be:86:70:ff:3f:19:8f:3b:a8:f0:ee:97:1b:
10:75:53:4a:4b:45:85:37:61:ea:d1:f5:e0:df:f4:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:76:25:9A:58:F5:65:A9:E5:DB:CE:3E:8B:DC:20:7F:AD:13:0A:99
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFCF6758849F11F082FA864EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.6.196.0/23
IPv6:
2001:df6:16c0::/48
Signature Algorithm: sha256WithRSAEncryption
b0:ca:2a:09:23:d6:89:91:c3:94:e2:b8:b0:00:e1:1d:7f:e0:
24:b2:84:d5:3e:d8:b8:17:5e:fd:24:f3:fa:49:11:0d:69:ac:
4e:3a:d4:81:ef:16:51:7c:aa:48:72:6e:37:ae:c4:2a:79:36:
0e:5e:ff:a9:9b:82:32:31:f3:b8:ae:70:e1:07:c0:ec:98:8c:
13:18:4b:ed:5b:0d:4f:71:b1:ab:1f:45:59:1b:a0:9c:32:9a:
aa:76:e5:af:41:f5:51:68:4f:87:ca:73:5e:81:b6:81:58:95:
a8:fd:a9:c2:05:5b:4a:cb:d4:ee:9b:8b:aa:02:ec:95:50:51:
f2:94:6e:a5:d8:71:ad:49:a4:45:ad:7b:ea:c8:b7:bd:34:b2:
30:ad:e8:c2:ec:9c:ad:ab:97:27:e7:7a:e7:4b:da:02:87:79:
72:3c:ad:33:82:e0:89:c0:d7:da:e4:af:db:95:1e:ea:1d:e2:
da:3a:d1:f3:cd:bf:59:c5:85:e3:e4:7c:70:43:35:af:de:3e:
c2:02:56:01:aa:eb:ee:95:f1:f4:a5:aa:af:75:74:2f:4a:f4:
68:9e:f7:bc:5f:0d:9a:b8:08:50:fc:6e:39:cf:34:47:4c:d5:
ce:c6:75:7b:53:86:18:31:e6:7f:b6:f3:58:58:14:e0:8e:9d:
c7:7e:e8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:30 2026 by rpki-client