
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/ED8B1602A0D711EFB982AD62C4F9AE02.roa
File: ED8B1602A0D711EFB982AD62C4F9AE02.roa (raw, json)
Hash identifier: 4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=
Subject key identifier: E7:3C:B6:E3:94:92:63:AE:E5:55:C8:A0:0C:E0:08:27:0D:36:46:01
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 05B9
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/ED8B1602A0D711EFB982AD62C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:51:31 +0000
ROA not before: Wed 03 Sep 2025 00:15:36 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 38001
IP address blocks: 2401:df40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1465 (0x5b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: Sep 3 00:15:36 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47ca3-c62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:bc:f5:2c:14:f6:0c:d3:73:df:81:2c:45:
b3:22:2d:fd:32:de:e5:12:c3:d4:3e:59:a5:c2:52:
88:47:ea:b4:6e:33:e0:ae:6a:e0:be:5c:c8:17:b4:
2d:00:17:7b:6e:06:10:88:12:bc:f1:df:a5:98:ab:
5e:2b:92:3e:d1:99:cf:18:22:ed:4f:42:97:95:85:
c5:46:52:b9:81:53:9b:85:a5:93:fd:fa:4c:25:12:
a8:90:c0:c0:96:f2:48:c4:1d:54:5d:b1:4d:2a:06:
e7:50:73:ef:fa:15:bf:26:88:3c:63:a9:be:01:fc:
ad:d0:79:52:81:54:1c:c7:28:1f:e6:d9:d7:15:f7:
ec:5b:92:70:fa:7b:8c:c7:23:8b:23:07:66:80:81:
2b:39:b0:14:9c:4b:b0:37:51:3b:db:6c:13:8d:8d:
23:74:2c:78:a1:4e:a3:ed:f5:28:6b:92:4e:91:c7:
25:75:09:64:ea:a1:90:62:ae:30:02:4c:4a:ec:95:
3c:82:db:b9:ba:96:c3:54:f2:cd:3b:1c:b3:22:a0:
ce:35:29:64:7e:8b:d9:ad:d8:9a:2e:0e:41:77:f0:
86:3d:80:84:a0:05:29:9b:46:03:73:52:b2:93:07:
56:79:10:d2:f8:ba:42:44:ae:b6:74:7d:7c:7b:27:
24:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3C:B6:E3:94:92:63:AE:E5:55:C8:A0:0C:E0:08:27:0D:36:46:01
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/ED8B1602A0D711EFB982AD62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:df40:2::/48
Signature Algorithm: sha256WithRSAEncryption
90:15:b8:54:74:b7:71:e7:59:b2:64:8e:0c:a4:64:d1:33:4e:
c9:99:29:30:83:55:fe:07:c6:c1:59:41:8f:65:91:73:3f:7c:
09:da:3f:5d:0a:42:7c:af:85:2c:05:1b:1c:36:ff:0b:c5:bf:
86:bd:d4:bb:fe:ee:99:c0:d4:4b:3f:16:7c:b5:cf:3d:19:54:
90:73:3a:e5:7d:a1:8b:c3:44:ac:18:3a:b6:69:02:ad:89:53:
31:e4:ee:46:f1:f7:c3:db:15:24:73:ec:ce:c1:c9:6a:d1:2b:
50:b2:1e:9a:ba:ce:e4:da:95:ec:ce:12:25:48:32:15:23:8e:
b9:b4:c1:61:5a:e3:45:37:c6:00:f4:1e:e2:53:62:da:5d:d5:
f3:a5:c8:af:88:55:d0:7d:bb:53:f7:00:f2:08:ef:67:1b:5c:
fd:7b:e5:d1:b5:f6:5e:9a:4e:02:b6:33:00:9e:1a:46:91:3e:
5a:af:f7:da:ce:ee:ed:03:51:2e:ba:94:5a:da:df:b9:43:48:
3d:c6:c1:8a:48:b6:16:84:82:03:dc:1c:60:1d:8a:0e:20:a9:
31:d3:5b:03:13:ef:4a:00:71:17:7d:ef:f8:69:9e:b6:2e:c9:
7f:8d:5c:d4:cb:dc:19:d3:c2:09:8a:3b:5e:24:4d:3d:0d:5b:
6b:3c:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:10 2026 by rpki-client