
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/18EB15B84C6C11F1A78F0F88C2833773.roa
File: 18EB15B84C6C11F1A78F0F88C2833773.roa (raw, json)
Hash identifier: Gx1/bgiTTtC0ZtbXuD3ZiQ31WylCA/sLch7wjwJEjVs=
Subject key identifier: 8C:24:74:B0:61:61:DD:7F:DB:F9:2B:FC:AC:2B:18:14:B9:6D:37:72
Certificate issuer: /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Certificate serial: 51
Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/18EB15B84C6C11F1A78F0F88C2833773.roa
Signing time: Sun 10 May 2026 12:30:59 +0000
ROA not before: Sun 10 May 2026 12:30:58 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138358
IP address blocks: 144.79.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Validity
Not Before: May 10 12:30:58 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a007a82-99d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:61:7f:e3:a1:cc:27:49:34:4d:45:b5:fb:
28:d6:71:5f:a9:54:64:f6:4f:89:21:3a:dd:8c:c1:
4c:1a:8b:c0:69:11:03:03:78:b1:21:83:af:85:e2:
da:76:cf:66:8e:64:a4:02:79:8e:6c:32:5d:0f:fa:
90:a8:20:d4:54:22:db:de:a3:5c:0f:9b:40:64:12:
3d:d4:77:bc:e4:a6:cc:11:61:87:d2:ab:bd:2a:c2:
79:e2:c9:47:02:51:d5:69:a8:f4:45:52:aa:36:29:
d6:31:cc:6d:29:d4:ae:a4:ce:f5:15:6f:d3:fe:3c:
24:64:54:81:37:04:fd:03:86:47:1a:31:6e:be:de:
8c:8c:b8:89:1d:f9:d2:7d:1a:96:12:2e:59:52:0c:
24:aa:84:74:6b:52:85:08:85:cd:4e:6c:11:03:94:
5b:0f:e8:74:14:ff:a0:7c:db:e7:89:51:ac:d7:8f:
d0:82:8c:38:91:aa:48:eb:a3:d2:9f:f2:bb:5e:6e:
59:32:ec:b6:30:4d:a6:ba:b9:43:93:32:4a:13:39:
fa:5a:08:00:98:2a:03:a5:e2:ab:3d:ec:8a:3a:1e:
52:f4:02:d4:4c:e7:ae:19:91:87:b0:0f:a7:b5:0f:
17:40:b6:9b:05:99:5d:b3:f7:d5:cf:8f:91:2c:ba:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:24:74:B0:61:61:DD:7F:DB:F9:2B:FC:AC:2B:18:14:B9:6D:37:72
X509v3 Authority Key Identifier:
keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/18EB15B84C6C11F1A78F0F88C2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.219.0/24
Signature Algorithm: sha256WithRSAEncryption
00:96:53:54:92:87:a8:bb:30:a7:14:be:10:4d:81:4f:b1:09:
1d:c8:aa:57:39:4a:8c:3d:0f:12:fd:d6:a5:49:00:d0:cb:68:
8e:1e:68:9d:28:6a:9a:e9:95:64:8c:49:f2:54:d2:1d:ba:a8:
28:e8:13:8b:ff:0b:64:17:79:3e:89:19:99:4b:6f:e4:25:3a:
ca:b0:59:58:3c:e0:57:be:a3:35:71:11:11:97:79:3f:2e:46:
39:e3:53:47:2f:58:73:e6:5b:4f:9f:df:c1:d4:85:2b:bf:35:
14:03:c7:44:64:a6:30:a7:e8:3e:e2:7f:9d:c5:0f:6e:d7:cf:
00:c0:92:21:79:fb:57:ac:6a:06:e5:8e:b8:d4:70:f8:d7:0e:
6b:23:48:29:03:a4:aa:28:86:cf:b2:fe:cd:a8:b5:bb:d5:6f:
08:c5:07:cb:a3:64:ca:99:51:3a:31:9d:3d:4d:a3:45:b9:d2:
91:bb:47:67:00:e6:7b:a8:f6:17:45:26:78:2b:6c:c3:4e:eb:
07:be:7d:95:4b:de:aa:91:9a:42:40:9e:bf:b9:4e:fd:d7:59:
d3:28:bb:a4:7b:6f:ac:89:f8:a8:39:f2:07:d7:cf:9d:5f:d0:
64:2f:26:00:ec:23:c4:ef:e1:47:30:d1:39:eb:f1:e3:c7:ed:
11:58:89:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:36 2026 by rpki-client