
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DBB4BB6A48F911EC9F04C439C4F9AE02.roa
File: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (raw, json)
Hash identifier: TW3Yzr4nVCh6fw/bwk2DNXvw9C9/OVS9zcojLveOPlk=
Subject key identifier: E7:19:5B:B0:48:62:2F:BA:D8:06:6F:EE:DB:15:C7:3B:EF:01:6E:07
Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Certificate serial: 074E
Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DBB4BB6A48F911EC9F04C439C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:04:32 +0000
ROA not before: Thu 16 Oct 2025 23:33:46 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 16509
IP address blocks: 204.48.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Validity
Not Before: Oct 16 23:33:46 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a46390-1eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:1a:26:22:12:a7:60:1a:99:5f:0e:c5:25:
49:bc:f7:e7:84:03:72:3e:2a:d3:49:e0:6c:13:90:
93:ea:89:f8:2c:6d:61:56:25:45:e4:63:f5:f7:66:
69:0c:61:bb:ae:1b:5a:95:b4:5e:15:89:81:81:df:
79:2a:ee:1a:35:bc:37:f3:ab:a8:01:f6:5e:45:e5:
bb:ac:6a:f8:78:ce:ec:4a:8c:a2:7a:f0:b6:52:20:
3a:ec:fc:b0:3b:a0:89:8a:c4:29:7a:ee:c5:d9:a1:
18:c9:85:9d:93:42:f1:20:b4:d0:50:03:67:a8:15:
a3:34:59:62:6a:63:06:94:c1:55:1a:4a:6c:cf:b1:
01:a9:ef:73:90:07:1f:89:df:06:8b:52:f8:19:c0:
f0:49:97:e7:20:47:1a:45:23:56:47:89:80:2b:3e:
70:26:9e:bd:2f:18:df:9d:93:8b:3f:85:1b:a4:9c:
81:9a:ca:ed:d7:cc:3c:bd:39:d1:3a:25:74:30:45:
44:9c:57:ff:60:fc:86:90:f5:f3:f6:22:f6:48:6e:
5d:28:83:a9:bd:25:73:27:4f:1a:10:c2:56:d3:14:
f5:7e:22:a5:7b:ae:65:aa:79:14:95:9e:16:c5:9d:
bb:a7:95:e6:20:d0:bf:35:a7:a7:88:fe:49:89:49:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:5B:B0:48:62:2F:BA:D8:06:6F:EE:DB:15:C7:3B:EF:01:6E:07
X509v3 Authority Key Identifier:
keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DBB4BB6A48F911EC9F04C439C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
204.48.63.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:68:37:8e:22:a9:97:39:27:9f:04:43:de:7b:32:e0:c3:ca:
c6:b6:fe:22:5f:cc:d9:f5:be:6f:12:f2:22:36:4c:99:f8:09:
eb:56:c9:19:9f:fe:4b:bc:87:76:d5:ee:05:c9:a1:f2:6d:46:
1c:fc:aa:de:cc:3e:ee:64:e7:4b:b5:38:f4:40:f7:f0:35:7b:
2c:80:3d:39:1e:78:74:e6:df:d8:60:d1:6f:7f:6e:a7:4a:a1:
d6:dc:e0:ed:af:ac:4f:e4:a7:08:2e:28:74:c1:bd:6d:75:6a:
d8:59:97:97:e5:91:d5:f8:fd:1b:e7:fc:d0:14:39:65:c6:b2:
c2:48:59:6d:3c:45:b5:a1:be:14:53:6d:19:24:ad:ef:03:f9:
97:dc:13:06:d2:bf:a6:df:ee:73:93:79:f1:0f:9b:75:88:58:
d1:44:fa:9f:ac:94:ff:d0:df:01:9c:f8:27:92:13:3c:b8:0e:
14:04:e7:98:8f:c3:69:d4:fb:3d:6b:6c:03:ab:90:7e:77:70:
2f:aa:13:25:ba:d0:69:37:6a:4c:b2:cc:96:f0:ce:1a:bf:62:
95:0a:ab:2d:c2:bd:e9:fa:22:70:f7:66:3d:2a:9e:04:1b:d6:
6e:b6:10:04:5b:26:0c:83:b4:4b:70:07:4e:3b:60:b4:28:32:
e1:4b:2e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:56:33 2026 by rpki-client