
$ rpki-client -vvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/0F7A780C278211F19C45DF9DCA833773.roa
File: 0F7A780C278211F19C45DF9DCA833773.roa (raw, json)
Hash identifier: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=
Subject key identifier: 6B:FC:77:40:FF:85:F7:29:12:E3:B6:F0:DF:3E:6A:92:29:7A:1B:B0
Certificate issuer: /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial: 04
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/0F7A780C278211F19C45DF9DCA833773.roa
Signing time: Tue 24 Mar 2026 13:04:58 +0000
ROA not before: Tue 24 Mar 2026 13:04:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152320
IP address blocks: 163.128.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Validity
Not Before: Mar 24 13:04:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69c28bfa-2932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:0e:36:76:15:3c:c6:47:64:f0:0b:22:e0:
0a:99:38:18:9b:a6:77:a7:51:68:29:9c:48:ce:03:
de:04:bc:40:d2:66:94:06:b8:e8:0b:38:20:11:7e:
fd:f5:95:df:a8:d0:31:05:d7:13:e7:76:36:2d:34:
8e:e4:ec:3a:87:5a:d5:64:03:51:f6:7d:ae:4a:23:
b8:f5:96:61:fe:4b:bb:e7:36:fe:ae:cd:18:88:2f:
53:77:3c:4e:cf:ed:6f:0e:8b:3d:42:0a:25:07:20:
9d:53:dd:43:6c:d0:96:3d:c4:8c:8e:89:60:32:91:
6e:ca:c4:f9:f4:53:70:46:2a:84:1f:c4:18:a6:89:
7e:90:80:02:46:87:35:06:57:7c:51:84:57:23:5c:
06:a3:0c:5a:6e:a9:38:ac:3a:1a:bf:d2:4e:bc:2d:
98:30:5c:a9:5e:c8:28:a5:de:87:20:c0:22:71:c7:
e5:d4:e0:d4:a6:c3:fd:b6:95:c0:78:60:61:13:d1:
e8:cb:d5:6d:04:c7:86:c4:43:9e:26:0e:28:89:57:
ad:1f:c8:a6:2e:3c:bf:b4:43:c5:24:bd:fc:8b:d3:
68:cd:6e:c0:67:bf:1f:e0:dc:ac:1f:50:7b:f3:2d:
09:27:04:9d:8f:e5:ee:af:11:b7:ea:49:b1:d0:17:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FC:77:40:FF:85:F7:29:12:E3:B6:F0:DF:3E:6A:92:29:7A:1B:B0
X509v3 Authority Key Identifier:
keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/0F7A780C278211F19C45DF9DCA833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.100.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:26:30:83:b2:30:0d:30:67:3c:7b:83:83:64:4c:aa:f7:e0:
eb:91:ae:ef:0e:05:53:a3:f8:12:60:13:71:7e:f4:36:ff:43:
09:92:3b:55:ab:f0:b8:68:20:3d:ea:f2:bb:c6:1b:c1:79:7e:
a7:e8:81:18:53:26:37:bd:03:3c:00:44:af:84:ff:fe:0d:e7:
53:69:e7:7b:79:9f:a4:28:fb:7f:66:9e:bf:80:00:c8:bd:ca:
2e:3a:91:07:23:6b:2e:67:cd:3b:c2:b2:f2:f8:ca:53:43:7a:
6f:30:5c:a4:fa:87:67:06:4d:88:88:33:03:fa:64:68:b0:d7:
36:92:4c:cd:fe:0f:12:11:3f:aa:3a:be:b4:e3:9b:ca:ac:07:
b4:65:0c:5a:ce:1e:aa:81:af:c0:ed:72:7c:36:c0:e7:09:30:
3e:4a:c0:46:9a:fb:b4:57:c5:fc:b5:3f:4f:c6:89:06:03:7d:
43:60:05:f9:22:2c:77:ff:6e:d0:c6:c3:95:1f:66:c0:d0:49:
74:2e:66:06:53:7a:08:b1:5c:e8:fd:62:21:ad:a7:25:ba:eb:
15:a9:a6:fa:5c:72:7a:3c:94:ef:69:9d:e1:5e:1d:4d:56:be:
a5:67:89:d9:55:09:65:20:86:f3:bb:9a:ec:4b:32:83:25:1d:
55:ae:25:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:12:46 2026 by rpki-client