
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/F5B633B2283411F1B1D7DF7FCA833773.roa
File: F5B633B2283411F1B1D7DF7FCA833773.roa (raw, json)
Hash identifier: NbyI7KrlbmFRIzpwKLH61+A9J/r7MmWiby176b3GguY=
Subject key identifier: 9E:CD:D2:B4:1B:23:41:97:5B:B8:CD:82:93:38:1A:D2:28:71:EC:DD
Certificate issuer: /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Certificate serial: 141C
Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/F5B633B2283411F1B1D7DF7FCA833773.roa
Signing time: Mon 12 Oct 2026 17:32:47 +0000
ROA not before: Mon 12 Oct 2026 17:32:47 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 152479
IP address blocks: 2403:8840::/33 maxlen: 33
2403:8840::/48 maxlen: 48
2403:8840:1::/48 maxlen: 48
2403:8840:2::/48 maxlen: 48
2403:8840:3::/48 maxlen: 48
2403:8840:4::/48 maxlen: 48
2403:8840:5::/48 maxlen: 48
2403:8840:6::/48 maxlen: 48
2403:8840:7::/48 maxlen: 48
2403:8840:8::/48 maxlen: 48
2403:8840:9::/48 maxlen: 48
2403:8840:a::/48 maxlen: 48
2403:8840:b::/48 maxlen: 48
2403:8840:c::/48 maxlen: 48
2403:8840:d::/48 maxlen: 48
2403:8840:e::/48 maxlen: 48
2403:8840:f::/48 maxlen: 48
2403:8840:10::/48 maxlen: 48
2403:8840:11::/48 maxlen: 48
2403:8840:12::/48 maxlen: 48
2403:8840:13::/48 maxlen: 48
2403:8840:14::/48 maxlen: 48
2403:8840:15::/48 maxlen: 48
2403:8840:16::/48 maxlen: 48
2403:8840:17::/48 maxlen: 48
2403:8840:18::/48 maxlen: 48
2403:8840:19::/48 maxlen: 48
2403:8840:1a::/48 maxlen: 48
2403:8840:1b::/48 maxlen: 48
2403:8840:1c::/48 maxlen: 48
2403:8840:1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 16:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5148 (0x141c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Validity
Not Before: Oct 12 17:32:47 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6acd19bf-c88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:2c:00:b2:bd:49:ab:be:94:93:ef:cf:8a:
88:f3:f5:81:3d:2f:ca:c9:4c:7c:e3:23:c2:2c:b1:
45:34:1b:54:76:07:3c:c7:4a:43:11:9b:30:f5:b4:
e2:66:86:62:74:f4:ce:63:41:59:0b:96:64:2a:26:
37:f5:ef:24:1b:1a:3d:f5:66:e9:31:d7:00:3a:fc:
94:9f:3d:1b:83:66:29:f1:ce:32:4e:72:ca:cb:fd:
8c:9e:c5:e0:55:2e:71:96:5d:fe:61:c6:b2:fb:de:
1d:b9:13:02:f1:6e:10:7b:bb:d8:cc:5e:c2:ee:5e:
37:a2:e6:9c:23:66:06:0b:83:ba:01:4e:c2:ad:79:
f5:ab:d1:68:cc:9b:32:4e:36:a5:97:10:8a:22:cd:
57:9a:66:82:14:ae:b0:77:a8:50:9e:b5:20:c9:44:
0a:72:77:94:c2:72:3d:59:a7:c2:04:aa:72:4e:da:
07:3f:bb:15:85:22:22:8d:28:ab:51:78:81:cb:2d:
2e:aa:1c:df:77:eb:d1:6f:25:1e:08:71:ac:48:9b:
4d:0f:bf:00:09:d7:19:b9:f2:d9:5e:09:0f:dd:9e:
02:2f:2e:31:1b:97:99:a5:99:16:55:6e:56:34:9d:
5b:d1:da:f2:4f:b1:a6:7b:1c:03:21:5a:6d:e7:c7:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:D2:B4:1B:23:41:97:5B:B8:CD:82:93:38:1A:D2:28:71:EC:DD
X509v3 Authority Key Identifier:
keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/F5B633B2283411F1B1D7DF7FCA833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:8840::/33
Signature Algorithm: sha256WithRSAEncryption
71:01:e3:d0:cc:03:98:48:1d:ed:e7:f9:de:84:08:61:7e:1d:
09:bf:42:24:32:28:00:08:51:64:03:f3:c8:16:6f:c1:54:e7:
7c:08:dd:fd:a6:69:1c:d2:80:36:a1:7d:0a:53:1b:df:9d:17:
c3:6a:28:7f:3b:a1:19:22:a2:a2:c7:2c:7c:87:1c:df:8d:9b:
85:d7:c0:f5:1c:0c:ba:ad:9c:1e:5f:57:61:bb:8a:24:3c:84:
8e:da:1b:d0:33:55:aa:3c:5a:bb:ce:8e:c1:c8:8d:3a:f5:4f:
af:31:b4:0f:1d:23:9a:38:3b:05:9c:f7:3c:18:ad:4a:d3:6d:
94:af:57:74:43:1e:ea:93:b2:b5:5f:ed:55:33:c2:4a:80:3a:
eb:23:03:bb:4d:70:f0:90:cc:38:b6:b7:b2:d2:4e:d4:c9:be:
d0:3f:ec:c1:9e:35:e1:83:93:fc:4c:1f:5d:da:74:3f:0c:9f:
09:6f:5c:ec:fe:d7:ed:4c:af:cf:4d:5d:3f:c1:60:c2:75:93:
f4:de:a4:b2:f2:2d:6b:94:3a:ed:ab:39:b3:cb:4a:a8:10:e3:
c7:e6:8b:b7:d5:c1:bc:a1:5a:fe:ac:92:c1:d2:54:ea:01:c2:
39:2d:29:09:f0:f3:a1:d5:0e:be:62:37:89:4d:4b:41:7f:79:
52:b5:a8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 18:34:02 2026 by rpki-client