
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/783FBEE4430711EAB1201F6BC4F9AE02.roa
File: 783FBEE4430711EAB1201F6BC4F9AE02.roa (raw, json)
Hash identifier: 31dQK67wiYiy5G3Mr5Z9I8W/2zQAHp6VfQMF8EbdjCc=
Subject key identifier: A1:3E:64:73:71:D2:25:F3:36:0A:61:B4:01:00:11:75:5D:78:71:CB
Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
Certificate serial: 0BA8
Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/783FBEE4430711EAB1201F6BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:44:35 +0000
ROA not before: Tue 06 Jan 2026 19:15:44 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 7575
IP address blocks: 203.2.136.0/22 maxlen: 22
2405:ce00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl
rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2984 (0xba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
Validity
Not Before: Jan 6 19:15:44 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a450d3-d023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:a3:09:02:4f:eb:ba:a7:2f:46:0a:de:22:
cd:51:a5:7e:a8:f4:b2:dd:53:3e:d0:6b:3d:21:db:
aa:0b:79:95:67:a5:59:97:04:71:60:fd:4c:f0:12:
25:40:df:54:ee:4e:e9:d2:17:5b:38:a4:5c:4e:84:
15:fe:14:5f:33:00:b3:ef:8b:2d:ae:0d:83:cb:e6:
e0:2e:20:e4:54:d5:19:79:ba:99:be:90:d6:a0:8e:
23:17:36:cf:af:70:8d:ac:9b:2c:0a:c2:7b:21:28:
82:3d:2e:30:a7:5f:bd:69:5f:7a:be:11:2d:e9:85:
29:dc:95:b4:9a:fb:26:0c:a1:23:ea:51:dc:91:2e:
4a:9e:eb:7d:a4:81:55:f5:2c:62:5b:00:08:c3:6f:
3f:71:40:09:7e:f2:7d:e2:5c:0f:97:10:5d:2c:c8:
2c:ba:78:cb:ee:5f:02:45:8c:f6:84:90:3d:0c:20:
4c:20:2f:87:90:bc:7d:1f:cb:24:53:2b:2e:89:60:
72:49:ba:58:52:5a:18:1c:a5:67:4d:d6:62:9c:6b:
de:54:2d:6c:4e:e3:4e:a5:83:2a:36:6a:79:5f:60:
92:d2:99:1e:be:7c:1e:a2:43:73:02:b9:78:16:59:
16:94:ab:6b:d1:db:bf:ef:d3:b8:06:bc:1a:42:e7:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:64:73:71:D2:25:F3:36:0A:61:B4:01:00:11:75:5D:78:71:CB
X509v3 Authority Key Identifier:
keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/783FBEE4430711EAB1201F6BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.2.136.0/22
IPv6:
2405:ce00::/32
Signature Algorithm: sha256WithRSAEncryption
51:8a:2c:0e:d7:5c:1e:c8:d8:b2:bd:e5:01:97:d5:e1:65:0a:
76:d3:09:48:ed:94:d2:79:f2:df:64:4a:9e:64:13:a2:57:e0:
58:76:5d:7e:e0:6b:11:30:c7:00:10:d2:eb:dd:77:d7:f1:cd:
df:a3:4f:14:42:a4:10:ed:28:d3:d8:58:9e:cb:c8:cd:8f:86:
7d:27:1d:9c:cd:1d:1c:49:4f:63:6d:7e:de:14:d3:9e:9e:24:
2c:63:65:e0:f6:c5:33:ce:2d:07:e2:a9:4c:9f:29:a3:49:fa:
be:e6:b3:c0:83:30:68:1b:ac:b8:5a:9f:83:66:4a:91:3f:8a:
89:aa:24:37:23:21:1b:cc:b8:87:e0:88:84:f2:57:e8:71:f0:
b5:f4:1f:36:8b:f2:d4:8c:df:57:4c:4b:28:22:0b:e8:72:d4:
08:17:d5:1d:e1:e4:fd:43:c5:13:9e:b3:2d:a2:fa:b4:6c:30:
76:c3:7f:1f:06:f8:2f:09:9a:13:bc:4f:9c:fa:4f:65:b4:76:
4e:4f:89:b3:f6:df:18:81:4f:da:63:f3:f9:ee:bf:1d:af:d0:
28:6e:ec:05:6b:39:e3:c0:46:47:2e:3f:71:dd:61:17:d2:dd:
c6:e8:92:da:8d:06:37:e4:02:a7:0f:64:42:35:91:3c:63:03:
ef:25:d9:ea
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz
NThGNTJGRUYwHhcNMjYwMTA2MTkxNTQ0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTBkMy1kMDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq2ujCQJP67qnL0YK3iLNUaV+qPSy3VM+0Gs9IduqC3mVZ6VZlwRxYP1M8BIl
QN9U7k7p0hdbOKRcToQV/hRfMwCz74strg2Dy+bgLiDkVNUZebqZvpDWoI4jFzbP
r3CNrJssCsJ7ISiCPS4wp1+9aV96vhEt6YUp3JW0mvsmDKEj6lHckS5Knut9pIFV
9SxiWwAIw28/cUAJfvJ94lwPlxBdLMgsunjL7l8CRYz2hJA9DCBMIC+HkLx9H8sk
UysuiWBySbpYUloYHKVnTdZinGveVC1sTuNOpYMqNmp5X2CS0pkevnweokNzArl4
FlkWlKtr0du/79O4BrwaQucPswIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKE+ZHNx
0iXzNgphtAEAEXVdeHHLMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz
MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OENBQkYvRjk5NTJBNUM0MzA2MTFFQTg1QkNGNTZBQzRGOUFFMDIvNzgzRkJFRTQ0
MzA3MTFFQUIxMjAxRjZCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCywKIMA0EAgACMAcDBQAkBc4AMA0GCSqGSIb3DQEBCwUAA4IBAQBR
iiwO11weyNiyveUBl9XhZQp20wlI7ZTSefLfZEqeZBOiV+BYdl1+4GsRMMcAENLr
3XfX8c3fo08UQqQQ7SjT2Fiey8jNj4Z9Jx2czR0cSU9jbX7eFNOeniQsY2Xg9sUz
zi0H4qlMnymjSfq+5rPAgzBoG6y4Wp+DZkqRP4qJqiQ3IyEbzLiH4IiE8lfocfC1
9B82i/LUjN9XTEsoIgvoctQIF9Ud4eT9Q8UTnrMtovq0bDB2w38fBvgvCZoTvE+c
+k9ltHZOT4mz9t8YgU/aY/P57r8dr9AobuwFaznjwEZHLj9x3WEX0t3G6JLajQY3
5AKnD2RCNZE8YwPvJdnq
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:42 2026 by rpki-client