
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa
File: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (raw, json)
Hash identifier: nWtabR7nOhGufvq+gkx3bXJFQRRyMbogt12nPEsCiOg=
Subject key identifier: 42:8F:2E:3C:6F:78:DA:45:29:44:27:9D:45:EC:48:2D:A3:47:93:DD
Certificate issuer: /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Certificate serial: 0113
Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa
Signing time: Tue 21 Apr 2026 06:39:48 +0000
ROA not before: Tue 21 Apr 2026 06:39:48 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 45476
IP address blocks: 203.208.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl
rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C31C, serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Validity
Not Before: Apr 21 06:39:48 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e71bb4-4493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:c6:ed:2f:87:f0:c5:b5:14:28:eb:58:18:
e5:4e:40:37:82:b0:37:7e:35:26:bf:97:54:1a:e7:
dd:56:52:f0:ca:5b:ac:a4:8d:e8:2e:7d:03:de:61:
50:58:ea:8f:ed:a7:52:33:76:cc:28:80:f8:aa:e5:
6a:4e:eb:a1:df:4a:11:88:8b:b0:ce:9e:87:6e:7d:
cf:bf:49:6b:af:25:60:97:50:54:71:7b:d2:8e:8c:
fd:4d:96:b6:d7:e2:be:63:1f:e0:6a:f1:0e:51:27:
2d:78:20:07:e0:70:bb:8e:71:99:e8:ef:7e:e8:e2:
df:70:6b:c2:a3:8e:b1:e9:41:d7:5b:84:af:3b:9f:
69:e2:f1:64:64:1d:89:e7:45:24:41:85:b7:44:c5:
46:b3:bc:24:53:44:94:fc:05:43:f7:eb:39:d6:f4:
05:47:6a:25:a5:da:56:ad:f9:1f:7c:4e:0c:9a:f8:
2f:a9:b2:92:2e:db:6f:67:50:75:3f:69:10:41:aa:
8c:64:89:18:9f:6b:41:ec:9e:83:53:f1:c5:dd:2f:
e4:72:cb:93:33:cc:58:c5:6b:46:0b:ab:85:24:e8:
fc:71:1a:6a:30:76:b4:2d:18:c0:0e:63:5f:50:24:
e7:df:36:e1:79:a5:78:43:93:56:6b:6b:66:a1:aa:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8F:2E:3C:6F:78:DA:45:29:44:27:9D:45:EC:48:2D:A3:47:93:DD
X509v3 Authority Key Identifier:
keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.208.21.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ff:6e:6c:5d:84:d0:a4:ba:c8:0b:db:3a:c2:72:21:4a:29:
b9:48:d6:14:54:67:71:fa:6f:05:2b:97:5f:b4:c3:cb:d6:a0:
49:fe:ce:66:f9:3a:d5:cf:a3:b2:69:8b:64:28:74:a7:6b:cc:
28:19:a9:30:2f:ad:7f:e7:97:72:5d:a4:c6:b0:c8:f9:92:1a:
ff:cb:d5:94:ac:38:57:d1:6a:50:b7:84:ee:2b:98:ca:3f:52:
7f:b3:1e:17:aa:70:f6:16:f4:fe:f6:c3:3d:46:90:df:b9:0c:
1c:02:5e:d4:11:20:98:26:39:c9:5c:f9:1a:13:c2:86:49:45:
96:0d:20:f2:75:68:a2:1b:5e:c8:43:c2:02:f9:64:8d:e0:47:
3d:0c:54:fc:30:91:75:05:a8:b3:0f:da:3b:44:3d:2c:ba:33:
63:8d:e6:8d:64:b3:27:0c:3b:ff:61:32:e5:b1:ff:1e:7c:d6:
b7:04:5d:69:36:8e:9e:7a:15:7b:70:2d:b7:5d:4b:26:fc:9f:
ba:c9:db:25:92:56:66:72:4e:1f:5e:fc:a3:c4:a4:bb:86:f1:
4c:5a:6a:8a:a5:0a:76:a7:49:b8:e0:79:4a:85:53:7a:63:7d:
ad:89:bd:41:47:f4:f7:73:0e:f2:7b:24:3d:df:30:ad:62:3d:
39:45:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:34 2026 by rpki-client