
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa
File: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (raw, json)
Hash identifier: gIIumWSAkBw+/Kf2c0p6PpwOKZCEtqNskG3XhcLL5aE=
Subject key identifier: A0:8A:2D:4F:A1:AC:66:63:24:83:A0:A3:92:B6:59:0C:FC:0E:48:26
Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Certificate serial: E3
Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa
Signing time: Wed 29 Jul 2026 08:58:05 +0000
ROA not before: Wed 29 Jul 2026 08:58:05 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132475
IP address blocks: 2001:df5:9440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Validity
Not Before: Jul 29 08:58:05 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a69c09d-a035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:56:75:ef:81:8e:24:29:c4:2d:22:f1:5d:
24:31:bb:a5:15:0c:6b:b4:ea:23:a7:e1:85:06:bc:
00:90:4d:c4:45:d1:2c:b2:a0:67:26:1d:31:f8:38:
79:1e:dc:24:cb:55:4b:9e:68:90:09:1e:36:6a:83:
1c:eb:21:21:1c:51:fa:ae:ba:1e:c6:ef:5c:27:85:
b2:a7:3f:86:d8:4b:2d:04:ac:a5:ed:bc:59:51:e4:
33:17:eb:ed:f1:e9:c7:e3:71:cb:09:38:30:e3:8b:
01:ed:53:1c:d0:e4:2f:3c:77:d1:9b:84:29:88:ce:
32:e2:6f:5b:0e:0d:d2:21:ed:16:52:ce:4c:5a:43:
8d:5e:fd:4e:13:1f:f5:ec:43:cd:f5:4a:22:23:cb:
eb:87:66:db:19:99:16:71:f3:c9:cc:68:20:d2:51:
ec:87:09:57:14:2f:59:06:f4:06:16:29:84:91:4c:
99:11:b8:ca:78:89:1e:7a:e3:81:76:95:e0:06:c7:
fc:96:8d:92:8e:38:a9:ac:e4:65:f6:21:a6:6c:31:
77:1c:a6:a1:6d:48:98:99:bc:e0:d6:10:9c:cd:c6:
d8:b0:e0:3e:59:08:76:a9:9a:e5:0c:0f:95:03:41:
12:70:5e:3b:6b:f6:53:11:29:0f:de:be:52:42:f1:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8A:2D:4F:A1:AC:66:63:24:83:A0:A3:92:B6:59:0C:FC:0E:48:26
X509v3 Authority Key Identifier:
keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:9440::/48
Signature Algorithm: sha256WithRSAEncryption
1f:30:76:28:89:e3:96:a0:03:25:6d:07:a8:e7:9b:ec:0c:d8:
1a:61:0a:97:83:b8:93:fa:8f:d4:61:3c:95:02:43:38:df:7d:
8f:83:3a:37:ea:f1:6e:a6:ab:c3:1d:00:dd:60:52:15:07:18:
30:84:af:cd:7d:ec:c6:c6:f5:59:e2:fb:d2:95:7c:1b:16:16:
8e:ef:57:8b:1f:be:3f:a3:e3:3e:da:58:4b:8e:72:86:73:d9:
f8:f0:a2:3a:8e:6c:3f:b8:dc:8c:4b:a1:e3:7c:0a:8e:bc:26:
e4:34:3a:20:42:75:89:e1:c8:04:38:8b:cc:6f:cf:af:f3:c4:
bd:ef:ed:a1:e2:d9:9b:3d:56:44:69:50:99:fa:c8:c0:03:14:
e0:8d:82:50:d2:f7:9a:ff:ee:11:ea:d2:ee:15:9c:79:4a:cd:
31:8c:4e:ed:ed:fb:ee:6a:12:50:78:bd:a2:22:50:b1:47:5c:
86:81:76:67:cb:4c:55:6f:dc:4c:ef:3e:d0:04:98:6d:84:d5:
0a:27:fb:2b:a6:ea:13:93:6c:d5:fe:d1:78:a0:99:80:8a:e8:
01:91:a6:31:13:42:44:9b:ed:fc:64:aa:40:1e:e2:f1:97:89:
47:b3:6b:ff:02:7e:3e:6a:a1:3f:7c:e0:21:28:e0:b7:e9:3e:
8a:48:4d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:36:46 2026 by rpki-client