
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2ACF9E0C855C11EB8C076013C4F9AE02.roa
File: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (raw, json)
Hash identifier: RNuWwl4ucRlwsOZtGnFpFuiswJzOcCNas2gxr3gm8mE=
Subject key identifier: 87:A4:CD:1B:44:CD:40:C4:AA:DD:46:DE:87:8F:CE:02:5B:DF:8F:E9
Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial: 358B
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2ACF9E0C855C11EB8C076013C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:07:31 +0000
ROA not before: Thu 08 Jan 2026 15:10:54 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 38196
IP address blocks: 203.124.26.0/23 maxlen: 23
203.124.26.0/24 maxlen: 24
203.124.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13707 (0x358b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Validity
Not Before: Jan 8 15:10:54 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a47253-4c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:5d:c7:6e:88:17:0e:53:aa:7c:65:c2:7e:
b9:b0:ff:29:c2:24:63:05:a5:96:ee:4c:a7:36:57:
d0:c0:27:1d:8d:12:c2:12:c7:72:57:c9:aa:0d:9b:
0d:6a:0e:40:4a:a5:68:2b:3c:1d:74:fe:21:bb:6e:
b3:4a:b7:b6:80:3e:52:ed:d2:8a:70:b9:77:42:24:
ca:ab:9b:94:5d:1c:d6:01:ba:a0:6f:d8:2f:45:54:
28:0a:7a:e8:29:17:2e:e8:e3:2d:d0:cb:66:24:06:
25:85:6c:ad:1d:bb:8e:a9:dd:bf:d8:12:2d:24:06:
13:b1:6d:b1:29:4a:b8:58:a6:9f:2b:c5:88:3e:f9:
7c:1a:60:f3:86:d1:ca:0d:7f:10:57:65:00:61:04:
e9:00:2f:2f:b1:41:59:dc:68:99:69:47:b4:79:de:
e8:3d:9e:0d:e0:e3:1f:99:f9:01:60:b0:f9:89:a9:
d4:de:be:54:a0:47:c6:b3:d9:0f:61:d3:84:91:1b:
9c:3b:cd:80:50:cc:15:69:e3:42:9a:6a:9b:c2:4a:
a3:c1:4b:86:f1:44:04:76:69:d1:fe:75:ce:98:ab:
7b:63:8a:18:8e:ca:e5:f1:6c:a6:61:1a:59:fa:18:
da:60:13:59:d4:99:86:83:97:ca:7b:bb:11:c1:d5:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:CD:1B:44:CD:40:C4:AA:DD:46:DE:87:8F:CE:02:5B:DF:8F:E9
X509v3 Authority Key Identifier:
keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2ACF9E0C855C11EB8C076013C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.124.26.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:12:0e:70:4d:3a:bf:69:0b:92:b6:8d:f7:9c:fc:41:5c:59:
9f:c8:60:5e:c3:58:40:fe:10:6b:45:ca:c3:32:f8:d5:8c:c8:
06:c1:fb:cc:8d:4a:82:01:dc:75:90:5c:1b:e4:a4:9a:9b:ac:
d9:30:12:47:3b:75:52:a9:cc:cc:39:45:57:8a:f6:3e:76:64:
53:2b:fc:ca:1a:35:be:52:c3:d2:b2:c6:28:c7:f5:f4:9f:db:
6a:af:6b:76:5d:70:0f:a4:11:8d:71:f7:fe:6d:08:18:41:4a:
c5:77:38:39:b6:0a:e4:6a:9b:9f:47:79:2e:62:aa:cd:70:7f:
13:c6:70:bb:7a:fd:1c:b4:a5:d7:68:1f:43:43:00:40:52:be:
07:84:5a:01:2e:02:fe:a3:e9:ff:7e:da:4c:d1:c3:a9:64:8f:
1c:c1:02:4e:64:e4:14:19:47:a5:6c:68:cd:45:de:31:83:fa:
73:c1:4d:8f:60:5b:76:cb:22:2c:39:27:b3:d7:5b:8f:3d:7d:
50:30:7c:d6:2c:dc:03:46:4b:2c:2b:d4:b2:c3:48:31:44:4f:
5a:65:f3:a4:5b:29:10:54:48:df:5b:c9:85:c0:8c:58:ab:a1:
bc:24:b6:d7:8b:9f:71:e7:98:12:7c:cd:b0:4f:8a:96:cd:a1:
51:1a:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:25 2026 by rpki-client