
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/5717F26C76DC11F1B27CFF067EA30FBC.roa
File: 5717F26C76DC11F1B27CFF067EA30FBC.roa (raw, json)
Hash identifier: UnxraCxdQ4lE3he3/K4k1PrHUY4Y6JC7kU/SixWY2p8=
Subject key identifier: 3E:44:AB:E0:26:EA:20:1C:A4:71:02:98:05:89:98:C9:73:71:27:65
Certificate issuer: /CN=A918B16C/serialNumber=438FF77842067882C6D493F66B6125EF2195D547
Certificate serial: 1C
Authority key identifier: 43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/5717F26C76DC11F1B27CFF067EA30FBC.roa
Signing time: Fri 03 Jul 2026 12:40:15 +0000
ROA not before: Fri 03 Jul 2026 12:40:15 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 150001
IP address blocks: 2001:df7:1840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl
rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B16C, serialNumber=438FF77842067882C6D493F66B6125EF2195D547
Validity
Not Before: Jul 3 12:40:15 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a47adaf-3bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:31:fa:fe:69:99:91:6c:81:b3:b1:5b:27:
c9:87:b3:b9:0f:1f:2b:9f:e7:1c:dc:62:5a:34:9d:
fd:6f:25:ff:1b:b1:cc:8f:13:f9:18:ca:f2:29:fe:
6c:58:91:14:d0:9c:99:cf:e5:b8:6a:3d:69:32:05:
3b:0e:ff:d3:8a:f5:6a:de:e2:6a:cd:17:49:0a:22:
bc:fe:f6:4a:c4:fa:ae:f8:3d:41:cb:ed:a7:6d:de:
de:8f:dc:45:bc:14:ac:96:ec:56:c4:9d:62:fb:a0:
ca:f4:6e:b0:a8:13:ae:95:6a:d3:17:c8:4d:99:c4:
df:c2:90:c2:0b:b7:27:15:63:64:c0:50:03:5e:ed:
e7:f6:63:06:c5:34:94:b5:bc:f7:be:3b:fc:15:0e:
1e:40:f3:de:27:33:2c:98:48:4a:db:78:0e:7e:30:
49:6e:ed:63:e3:a7:8e:0d:94:c9:28:01:e7:38:ac:
e9:22:85:71:45:d1:b8:d6:49:95:da:05:52:4f:5e:
6b:35:02:56:ba:17:45:7f:b8:f9:c4:bc:69:c9:37:
93:6c:b3:b6:5c:ac:1e:18:9f:30:fc:45:01:c3:be:
65:36:8e:73:a1:34:c7:7d:74:cf:f3:f0:c5:70:3a:
db:b8:b0:c7:40:f8:ca:77:27:f2:e6:1c:50:b7:87:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:44:AB:E0:26:EA:20:1C:A4:71:02:98:05:89:98:C9:73:71:27:65
X509v3 Authority Key Identifier:
keyid:43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/5717F26C76DC11F1B27CFF067EA30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:1840::/48
Signature Algorithm: sha256WithRSAEncryption
6f:53:78:50:51:4c:41:6b:de:00:f8:91:71:61:e5:9f:b3:72:
8a:41:4a:17:d9:4b:69:92:f5:5d:be:9e:98:32:58:1b:60:7b:
3d:2a:ee:ed:93:0d:5d:61:bc:ea:23:b1:e0:0f:f4:55:1c:0b:
b2:fe:97:ef:66:a1:c1:c9:67:6f:15:2d:b2:89:74:73:71:f2:
29:76:1c:a1:e4:10:22:78:66:d5:80:4a:f6:09:f4:f1:f0:c8:
44:24:68:81:f2:c4:fa:92:73:a5:35:b5:4b:88:fc:48:2c:67:
ae:00:01:47:49:54:44:3f:e0:2a:82:6f:b7:4c:b0:18:9b:58:
09:bf:e9:4b:bd:97:b5:90:c0:2a:64:3a:9d:86:3a:56:74:f9:
a7:e2:47:be:da:31:c8:a4:d3:cf:63:ce:ac:cb:33:1a:35:fb:
0c:3a:32:88:32:d5:00:4b:a2:80:2c:66:8f:94:ea:68:f0:f2:
3f:91:8b:0e:ae:c5:df:f0:dd:29:e1:8d:4b:69:1e:ae:a4:4a:
6d:51:d4:c3:f1:33:55:df:f1:90:1e:7d:e4:ac:92:1e:c4:56:
6d:13:fd:52:a0:1a:6b:8f:44:19:24:bc:74:3c:ed:4e:db:db:
89:e3:e6:d8:c1:7a:49:67:72:d6:5a:56:ca:6e:1b:f0:97:b1:
66:5b:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:00 2026 by rpki-client