
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/22EA7FCC21F111EC85C6186EC4F9AE02.roa
File: 22EA7FCC21F111EC85C6186EC4F9AE02.roa (raw, json)
Hash identifier: 9KLwgwkyaa7an2F9mrcWsNNuRJDsvBpE+VEjLxF0blI=
Subject key identifier: 26:2B:9F:CD:06:AC:BE:3D:37:D8:41:25:96:FC:BD:57:64:60:05:67
Certificate issuer: /CN=A919F0DA/serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Certificate serial: 08D4
Authority key identifier: 94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/22EA7FCC21F111EC85C6186EC4F9AE02.roa
Signing time: Sat 08 Aug 2026 15:10:17 +0000
ROA not before: Sat 08 Aug 2026 15:10:17 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 55824
IP address blocks: 2001:4408:4300::/45 maxlen: 45
2001:4408:4508::/45 maxlen: 45
2001:4408:4d00::/45 maxlen: 45
2001:4408:4d08::/48 maxlen: 48
2001:4408:5b00::/45 maxlen: 45
2001:4408:6700::/45 maxlen: 45
2001:4408:6700::/48 maxlen: 48
2001:4408:6701::/48 maxlen: 48
2001:4408:6708::/45 maxlen: 45
2001:4408:6d00::/45 maxlen: 45
2001:4408:6d08::/45 maxlen: 45
2001:4408:8508::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Validity
Not Before: Aug 8 15:10:17 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a7746d9-707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:ef:49:0c:82:d1:02:54:e6:1f:4f:0b:db:
d5:c3:9f:5e:74:a9:9d:5d:8b:3a:8f:94:16:10:2b:
81:c4:fb:32:c9:e2:26:c0:ef:0e:7c:03:eb:ab:d3:
90:8c:94:f4:66:bf:54:3c:05:db:d6:7b:3e:1e:ab:
1a:67:1a:13:8d:96:56:87:5a:58:34:e6:7e:4c:bd:
36:03:da:4c:37:5a:7f:01:58:c3:15:da:1b:e7:16:
2a:62:10:44:66:e9:cc:64:d3:ec:a0:a6:e7:98:09:
16:0b:36:d1:d5:9a:8b:e6:8d:c3:8f:f3:f9:14:a8:
b6:8f:c9:68:fc:04:ea:6d:a7:fc:5b:da:e1:21:08:
76:06:2e:32:39:bc:8e:9e:80:af:6f:eb:59:b5:fd:
cb:fd:2b:49:20:bf:21:62:e2:8d:36:a6:80:74:d2:
aa:c2:3d:02:64:aa:88:e3:c3:00:70:94:d4:26:8b:
6c:fc:76:6f:67:07:9a:75:03:7e:7e:99:12:15:5a:
b7:9b:85:37:18:b0:c7:bb:53:cc:51:d9:89:2e:a5:
ce:6f:9a:ac:07:0a:bc:92:73:ca:51:66:1d:2f:d6:
93:77:c1:4b:ad:08:db:ab:95:aa:38:29:4e:db:33:
c1:41:fd:6b:4e:00:50:9a:ba:1c:39:60:20:3e:a0:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2B:9F:CD:06:AC:BE:3D:37:D8:41:25:96:FC:BD:57:64:60:05:67
X509v3 Authority Key Identifier:
keyid:94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/22EA7FCC21F111EC85C6186EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:4408:4300::/45
2001:4408:4508::/45
2001:4408:4d00::-2001:4408:4d08:ffff:ffff:ffff:ffff:ffff
2001:4408:5b00::/45
2001:4408:6700::/44
2001:4408:6d00::/44
2001:4408:8508::/45
Signature Algorithm: sha256WithRSAEncryption
4a:b4:be:e8:40:09:bc:1d:e0:4b:03:36:1b:9a:0c:f4:59:d2:
36:18:10:9e:e0:f9:8e:19:7b:06:55:e0:93:7f:8f:6a:ea:02:
86:bb:3b:a2:5a:c2:82:57:70:30:c5:d2:ac:a9:68:68:50:f4:
94:2d:9a:ac:01:ab:a0:2d:87:4b:33:3d:08:79:5f:a2:e4:a3:
ce:49:ee:b6:83:32:79:93:97:cb:93:28:41:2d:b2:be:0f:52:
74:f3:8d:d6:4a:fd:6c:72:28:e3:de:7e:11:d4:c0:96:53:4d:
42:f7:c3:19:25:4b:84:17:3a:c6:f1:e9:f5:8e:8b:7b:dd:e2:
c1:77:20:6b:96:dc:68:24:e6:0a:67:3b:55:23:a1:88:f4:df:
ca:1a:ac:e8:93:af:1b:d3:c5:b8:d9:37:07:b6:c4:08:1b:45:
88:f5:e6:66:f4:52:f9:bf:4f:6e:70:3e:a7:68:5f:56:0b:e6:
31:49:e2:f8:ae:92:12:3e:e8:dc:16:4a:60:36:df:52:18:6d:
7f:42:c4:2d:62:4c:99:b1:62:e4:5b:95:12:eb:c0:5e:8e:35:
11:55:c5:45:ab:c1:7c:bc:33:fb:f8:d3:5a:d0:ba:28:46:00:
18:5d:73:1f:35:19:a2:a8:a5:5a:e2:a4:b2:76:cf:71:1b:1d:
fd:20:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:26:16 2026 by rpki-client