
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/618A7D781F7111F09D1AC487C4F9AE02.roa
File: 618A7D781F7111F09D1AC487C4F9AE02.roa (raw, json)
Hash identifier: I3XhCECNXH7/mvrl9c3hf1QcMKKXrkrE9PdWmfyBpKk=
Subject key identifier: 7A:23:00:74:46:E6:95:BA:ED:6F:85:88:C8:D8:7E:12:4D:D7:63:0B
Certificate issuer: /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial: 0BD3
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/618A7D781F7111F09D1AC487C4F9AE02.roa
Signing time: Wed 02 Sep 2026 19:39:29 +0000
ROA not before: Wed 02 Sep 2026 19:39:29 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 19637
IP address blocks: 2406:2200:560::/48 maxlen: 48
2406:2200:568::/48 maxlen: 48
2406:2200:596::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3027 (0xbd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Validity
Not Before: Sep 2 19:39:29 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a987b70-382a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:f7:26:87:ea:cf:4a:c0:00:0c:a9:f7:d1:
88:7d:08:e5:e5:be:51:a1:e9:68:17:51:87:9a:3a:
15:43:39:19:32:db:69:87:a1:4f:5c:a6:bf:53:a9:
9f:b1:53:e3:4f:b0:cc:d3:57:6a:82:55:7e:33:04:
c7:d8:21:be:d3:d5:61:bc:52:f4:3b:81:5e:3e:1f:
55:f2:85:30:65:27:d1:81:43:0f:1f:d7:59:30:b8:
56:51:b9:30:aa:84:ca:6d:4e:65:97:b7:2b:43:9b:
8a:7a:2f:a0:d3:45:a6:89:68:af:e5:33:8c:a4:5d:
74:20:4c:40:7c:ba:17:70:97:bd:e7:3b:1e:b4:9e:
95:53:41:fe:52:d9:2c:93:62:8b:c2:c2:d1:6f:d8:
7d:00:4c:9a:6b:df:3d:a8:e2:40:f1:96:ad:d6:0a:
9f:2b:9b:50:2a:7e:19:a5:de:0e:ac:94:82:4b:a0:
44:2c:e0:b7:39:61:c3:aa:86:29:ef:f9:a6:47:77:
a1:60:42:18:04:df:37:d4:61:75:61:32:10:df:85:
de:e9:e7:d7:b4:1b:37:f3:a9:a5:ab:c7:82:fe:6f:
77:76:c9:7a:2d:60:72:64:eb:9a:7f:37:b9:5e:40:
65:1e:c1:c5:bb:2b:7a:aa:a0:87:05:40:1b:15:66:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:23:00:74:46:E6:95:BA:ED:6F:85:88:C8:D8:7E:12:4D:D7:63:0B
X509v3 Authority Key Identifier:
keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/618A7D781F7111F09D1AC487C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:2200:560::/48
2406:2200:568::/48
2406:2200:596::/48
Signature Algorithm: sha256WithRSAEncryption
83:e3:04:88:82:1a:1b:6f:4b:2c:84:ee:ea:cd:b0:54:48:ca:
bf:db:23:e5:6b:bb:b0:08:35:c1:c5:47:9c:7b:ec:77:b2:4f:
f7:71:64:22:d8:b3:00:2c:48:0f:7a:6a:e3:e3:b3:0d:29:10:
37:bd:84:b2:d6:c1:7d:27:06:f1:1a:24:ba:df:05:06:99:1e:
c5:dd:5c:9c:db:09:0e:5b:63:f1:30:8f:62:0c:b4:32:9f:83:
fa:09:3a:a7:31:2b:4f:79:2d:1e:13:8b:44:7d:99:1d:3e:99:
5a:6d:05:e1:e5:8d:24:c8:e0:00:b6:3d:ec:bf:f7:09:cc:55:
68:6a:59:f3:33:0a:be:84:65:6d:85:cb:9d:05:df:37:c0:ba:
42:1e:5e:55:14:a2:db:70:92:36:b0:9a:06:ac:5b:17:70:71:
8a:b6:07:21:fa:52:81:06:fa:64:6c:e0:be:ff:dc:2e:69:aa:
c5:8d:78:42:8a:75:88:67:29:e5:65:97:9b:94:ba:c2:83:43:
c0:20:e8:57:bc:61:ea:3f:9f:62:d4:8b:26:15:b0:5f:91:db:
24:5d:42:7f:6b:50:0c:80:d3:8b:e7:ce:c5:55:79:a1:3f:dd:
3d:83:c3:da:33:47:8c:c8:a7:b7:c2:57:94:06:f7:4b:3a:73:
70:9f:38:6b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF
OEY2MjZDREIwHhcNMjYwOTAyMTkzOTI5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4N2I3MC0zODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtID3Jofqz0rAAAyp99GIfQjl5b5RoeloF1GHmjoVQzkZMttph6FPXKa/U6mf
sVPjT7DM01dqglV+MwTH2CG+09VhvFL0O4FePh9V8oUwZSfRgUMPH9dZMLhWUbkw
qoTKbU5ll7crQ5uKei+g00WmiWiv5TOMpF10IExAfLoXcJe95zsetJ6VU0H+Utks
k2KLwsLRb9h9AEyaa989qOJA8Zat1gqfK5tQKn4Zpd4OrJSCS6BELOC3OWHDqoYp
7/mmR3ehYEIYBN831GF1YTIQ34Xe6efXtBs386mlq8eC/m93dsl6LWByZOuafze5
XkBlHsHFuyt6qqCHBUAbFWagMwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHojAHRG
5pW67W+FiMjYfhJN12MLMB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz
M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjk4NkQvQTAwNzREMTg1MzNCMTFFQUJBQTc1QjNBQzRGOUFFMDIvNjE4QTdENzgx
RjcxMTFGMDlEMUFDNDg3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAh
BAIAAjAbAwcAJAYiAAVgAwcAJAYiAAVoAwcAJAYiAAWWMA0GCSqGSIb3DQEBCwUA
A4IBAQCD4wSIghobb0sshO7qzbBUSMq/2yPla7uwCDXBxUece+x3sk/3cWQi2LMA
LEgPemrj47MNKRA3vYSy1sF9JwbxGiS63wUGmR7F3Vyc2wkOW2PxMI9iDLQyn4P6
CTqnMStPeS0eE4tEfZkdPplabQXh5Y0kyOAAtj3sv/cJzFVoalnzMwq+hGVthcud
Bd83wLpCHl5VFKLbcJI2sJoGrFsXcHGKtgch+lKBBvpkbOC+/9wuaarFjXhCinWI
ZynlZZeblLrCg0PAIOhXvGHqP59i1IsmFbBfkdskXUJ/a1AMgNOL587FVXmhP909
g8PaM0eMyKe3wleUBvdLOnNwnzhr
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:53 2026 by rpki-client