
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/3848F884F23311EE97946A35C4F9AE02.roa
File: 3848F884F23311EE97946A35C4F9AE02.roa (raw, json)
Hash identifier: iLTm1oru1pBo+aA4NVsRCbbmKUmROroBew15v4NmRQY=
Subject key identifier: 46:E5:4F:FB:53:6F:98:30:8A:F9:B6:9F:65:A2:E0:34:53:DF:9E:9B
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 110E
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/3848F884F23311EE97946A35C4F9AE02.roa
Signing time: Thu 30 Apr 2026 17:21:39 +0000
ROA not before: Thu 30 Apr 2026 17:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7545
IP address blocks: 147.76.52.0/24 maxlen: 24
147.76.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4366 (0x110e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: Apr 30 17:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f38fa3-e680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:59:a5:d4:7c:e5:0c:eb:d2:ee:bc:57:2e:
b4:17:fc:48:83:3d:7c:f5:ce:e1:d4:a9:31:da:cf:
70:97:c1:74:5f:00:04:65:03:da:f5:ba:6a:7f:ab:
a9:f3:43:45:57:e2:b4:02:e5:df:be:50:53:68:0d:
77:0f:22:5f:fb:84:ca:3e:13:ef:21:05:1f:ce:0d:
c9:da:61:ae:29:51:9d:a9:47:01:3c:55:34:dc:ae:
c6:2f:9b:88:39:45:62:e3:0d:84:ea:5b:fa:f2:43:
bc:41:a5:10:e6:de:74:b9:21:a3:63:4b:d2:50:7e:
10:ac:f2:56:7f:e0:b4:33:fa:35:1b:b1:76:ab:10:
1a:c4:28:68:ed:e8:66:9d:02:10:2f:2c:f1:13:f1:
b0:63:74:ea:06:2a:81:73:62:76:f6:a7:89:b7:ac:
c3:44:e0:65:50:ad:a6:78:92:92:2a:8d:7b:ab:a6:
53:06:ea:98:4b:d1:e5:d7:5b:7f:58:17:69:3a:34:
be:70:75:0f:82:06:b8:a7:0f:0a:e7:0a:39:03:34:
ff:e4:ba:71:0d:5e:ab:94:d4:76:79:0e:f8:13:bc:
7e:3e:6d:65:fd:15:c0:7e:fb:69:81:77:5d:58:64:
23:25:21:ab:4a:8f:b8:2b:68:21:19:df:8a:33:69:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:4F:FB:53:6F:98:30:8A:F9:B6:9F:65:A2:E0:34:53:DF:9E:9B
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/3848F884F23311EE97946A35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
147.76.52.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:6b:d8:9e:7b:10:53:f2:99:22:40:78:2f:d9:e8:9f:ca:41:
6e:f9:60:81:e9:4c:1f:f6:31:c9:7b:34:57:4b:da:f5:68:cd:
cb:72:88:f3:21:d5:cf:de:7f:02:bd:88:8d:8b:8a:15:20:ea:
a6:33:8c:b3:97:2a:76:4e:3e:02:50:ee:3a:82:bd:ff:7f:d7:
12:51:f9:c8:c8:36:2d:29:b1:88:db:11:8f:71:c7:1b:9d:49:
18:23:84:12:e7:31:f8:30:ba:7e:b5:75:0b:79:2d:f9:bb:b5:
3b:40:5a:8e:75:f9:67:2c:16:5c:bc:be:6e:ba:94:24:8a:b8:
b9:e8:36:af:1e:f7:c7:38:e3:fc:fe:65:4b:60:97:a3:ad:14:
26:04:52:9a:f2:8f:45:f0:e0:38:42:6b:38:dd:ea:74:56:0e:
e8:d6:07:e3:4d:f6:24:eb:e9:64:bd:3f:27:b5:68:bd:08:6a:
0b:e7:27:a5:63:3a:11:46:36:f8:30:18:4d:1e:d1:db:86:bd:
91:f0:b6:e1:25:c1:51:1c:25:5a:89:e9:58:d4:92:30:eb:fa:
54:6e:94:ed:45:3d:f5:95:0d:7b:3e:94:42:4a:52:e8:1a:46:
99:12:53:8d:29:3f:1d:5d:9a:44:b9:cd:78:e7:5e:bd:a9:77:
04:da:d6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:05 2026 by rpki-client