
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/80708DE2267611F1BE9D6DCBAE833773.roa
File: 80708DE2267611F1BE9D6DCBAE833773.roa (raw, json)
Hash identifier: jGySyCZGfLJ6Gub4dNKlt20vYdC2D9wIP1qqcY9QBu8=
Subject key identifier: 65:FC:EC:62:FA:35:8A:AC:EC:25:29:C0:BC:9F:C8:27:99:91:DE:CC
Certificate issuer: /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Certificate serial: 02
Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/80708DE2267611F1BE9D6DCBAE833773.roa
Signing time: Mon 23 Mar 2026 05:09:43 +0000
ROA not before: Mon 23 Mar 2026 05:09:43 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 139623
IP address blocks: 212.23.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Validity
Not Before: Mar 23 05:09:43 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69c0cb17-4be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:3d:98:cf:e7:45:18:51:b2:56:39:f7:9e:
69:62:07:12:58:79:1d:eb:58:da:cb:b0:d5:13:8e:
c5:55:fa:10:c1:00:b1:4f:70:3d:1c:de:f8:ef:97:
65:17:40:c1:c0:96:cc:9c:ff:44:f2:2d:8e:3f:fb:
cb:00:b1:95:c4:a7:d7:39:eb:71:d4:53:3a:ed:57:
b0:71:02:b4:d9:96:23:ab:27:99:29:d9:2c:06:cc:
1e:e7:58:ed:ae:62:99:6f:aa:2d:39:d2:c2:cd:a4:
49:73:0b:90:58:e3:da:2f:bc:1b:6e:96:11:df:cc:
0f:31:51:0a:53:59:79:d1:fd:29:b3:48:bf:ed:be:
7d:6a:a1:49:d4:1d:a7:4e:a7:96:02:9a:49:cb:a5:
83:06:13:13:86:e7:d8:4c:66:e2:d4:63:1d:72:cd:
da:73:ad:21:12:e2:e8:ec:46:31:d5:95:f1:56:b4:
66:8b:5a:d9:b2:8f:c1:89:32:03:bf:99:16:41:be:
5c:2b:50:2f:c2:37:3c:b6:a5:28:eb:b7:f5:a4:14:
ae:a3:f9:8c:c4:d0:c6:44:44:26:80:5e:a3:3b:55:
30:49:22:8d:d7:f0:70:99:ba:c5:5b:46:b5:dd:da:
7a:e4:76:2a:22:d9:b9:0b:57:b3:f0:05:bc:f0:35:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FC:EC:62:FA:35:8A:AC:EC:25:29:C0:BC:9F:C8:27:99:91:DE:CC
X509v3 Authority Key Identifier:
keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/80708DE2267611F1BE9D6DCBAE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
212.23.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ea:14:51:19:19:f1:4c:96:80:7b:61:05:02:88:76:84:53:
c3:d9:fb:52:21:7e:d9:d8:53:28:15:1d:ef:2d:e6:3c:3d:40:
b6:d2:fa:84:9a:6d:7f:95:ca:17:4a:ce:80:70:41:94:e4:72:
92:b5:af:ac:c0:0b:b1:04:b4:53:73:49:59:a4:ee:ef:37:7f:
88:b6:8b:86:56:5e:c3:d5:fc:1c:ec:1d:a1:ac:81:25:95:2a:
9a:22:77:b1:0b:44:64:84:ee:de:83:ed:53:0c:32:fa:d2:bd:
97:5b:e2:34:2d:d4:a8:f9:98:8d:7b:f6:6f:9a:ea:50:5f:1e:
53:0f:68:0e:65:21:05:8e:2e:70:22:b8:3d:2a:61:78:97:83:
37:ab:fb:3f:6b:2e:27:33:f6:a7:09:63:c3:e1:e8:71:71:bd:
25:f5:23:ac:0c:e3:66:9d:e9:28:a1:77:ba:05:89:7a:82:ab:
3d:b1:a2:72:76:6a:96:4b:3b:fc:13:c2:28:2c:c9:3e:8b:e0:
a5:e8:9d:6a:15:f7:03:44:16:21:da:c5:6a:2d:0e:f3:31:78:
4c:96:f5:25:46:3a:0c:52:37:80:74:06:bb:f0:71:d2:2d:b0:
9d:c2:6c:3e:ea:3c:02:fc:23:7d:d7:2e:e2:fc:67:f5:f8:ff:
40:46:39:36
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RDY2MzExMC8GA1UEBRMoMzY3M0I2OEM5NEZDMjFGRjNGQ0RFNkEzOTNFRUM2M0Ix
NkMwMTRGRTAeFw0yNjAzMjMwNTA5NDNaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YzBjYjE3LTRiZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeQj2Yz+dFGFGyVjn3nmliBxJYeR3rWNrLsNUTjsVV+hDBALFPcD0c3vjvl2UX
QMHAlsyc/0TyLY4/+8sAsZXEp9c563HUUzrtV7BxArTZliOrJ5kp2SwGzB7nWO2u
Yplvqi050sLNpElzC5BY49ovvBtulhHfzA8xUQpTWXnR/SmzSL/tvn1qoUnUHadO
p5YCmknLpYMGExOG59hMZuLUYx1yzdpzrSES4ujsRjHVlfFWtGaLWtmyj8GJMgO/
mRZBvlwrUC/CNzy2pSjrt/WkFK6j+YzE0MZERCaAXqM7VTBJIo3X8HCZusVbRrXd
2nrkdioi2bkLV7PwBbzwNYF9AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUZfzsYvo1
iqzsJSnAvJ/IJ5mR3swwHwYDVR0jBBgwFoAUNnO2jJT8If8/zeajk+7GOxbAFP4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzL0NENDcwQ0FFMjRF
QjExRjE5MDg2OTAyRUIxRUU1MjhFL05uTzJqSlQ4SWY4X3plYWprLTdHT3hiQUZQ
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvTm5PMmpKVDhJZjhfemVhamstN0dPeGJBRlA0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDY2My9DRDQ3MENBRTI0RUIxMUYxOTA4NjkwMkVCMUVFNTI4RS84MDcwOERFMjI2
NzYxMUYxQkU5RDZEQ0JBRTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADUF9AwDQYJKoZIhvcNAQELBQADggEBAIzqFFEZGfFMloB7YQUCiHaE
U8PZ+1IhftnYUygVHe8t5jw9QLbS+oSabX+VyhdKzoBwQZTkcpK1r6zAC7EEtFNz
SVmk7u83f4i2i4ZWXsPV/BzsHaGsgSWVKpoid7ELRGSE7t6D7VMMMvrSvZdb4jQt
1Kj5mI179m+a6lBfHlMPaA5lIQWOLnAiuD0qYXiXgzer+z9rLicz9qcJY8Ph6HFx
vSX1I6wM42ad6Sihd7oFiXqCqz2xonJ2apZLO/wTwigsyT6L4KXonWoV9wNEFiHa
xWotDvMxeEyW9SVGOgxSN4B0BrvwcdItsJ3CbD7qPAL8I33XLuL8Z/X4/0BGOTY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:32:08 2026 by rpki-client