
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/DFC15BFCEE2A11F08F37AFA2486F56BC.roa
File: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (raw, json)
Hash identifier: SDyY9CxWbpTxTv2y+7w0t15rfAMVOucoRmveZEJG2J4=
Subject key identifier: 77:60:DF:67:4E:6A:33:93:21:F2:B3:40:D7:4D:60:3D:9A:A0:10:ED
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 3667
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/DFC15BFCEE2A11F08F37AFA2486F56BC.roa
Signing time: Sat 18 Jul 2026 15:10:30 +0000
ROA not before: Sat 18 Jul 2026 15:10:30 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 23647
IP address blocks: 202.51.65.0/24 maxlen: 24
202.51.66.0/24 maxlen: 24
202.51.67.0/24 maxlen: 24
202.51.77.0/24 maxlen: 24
202.51.79.0/24 maxlen: 24
202.51.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13927 (0x3667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Jul 18 15:10:30 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5b9766-d178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:4f:5a:0d:4c:9b:cd:39:2d:ca:4e:23:ae:
ff:19:4e:ba:48:1e:55:a9:36:06:60:3e:d0:cb:3e:
ad:74:01:b2:d3:82:4c:57:49:df:06:1f:07:83:a4:
24:56:ec:bf:20:bf:d0:c4:6a:c4:bd:58:2e:ec:e4:
05:4f:85:94:5e:88:69:7e:cd:d9:b8:47:54:b5:1e:
83:cf:ee:22:cc:49:bb:e9:22:ad:2f:87:49:7e:73:
32:44:ea:fe:25:60:9e:48:fb:3d:c7:3c:ea:15:d6:
3e:81:d3:68:fd:b3:b6:1b:70:a0:5d:d2:82:2d:e5:
aa:90:47:41:5a:ae:94:1d:7c:0f:40:e4:8d:6d:26:
49:7f:97:08:fa:60:81:04:69:4d:17:e6:54:2a:0b:
6d:4d:14:93:0f:0e:c6:7d:56:70:40:9b:ba:e3:0d:
4c:0f:e4:5b:8d:36:ee:59:94:eb:81:17:17:6b:81:
15:27:b0:97:06:ad:8d:ca:ae:0d:5e:5e:fc:20:1e:
53:7e:8b:9e:1d:fd:b6:c9:0c:0c:db:00:dd:04:28:
ad:30:3a:79:3a:40:65:01:4f:38:ba:89:e4:aa:97:
3a:f3:22:56:2c:cb:2d:93:2c:0e:0f:93:69:a3:fa:
59:36:c3:f9:4f:05:72:75:74:df:13:ee:80:90:42:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:60:DF:67:4E:6A:33:93:21:F2:B3:40:D7:4D:60:3D:9A:A0:10:ED
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/DFC15BFCEE2A11F08F37AFA2486F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.51.65.0-202.51.67.255
202.51.77.0/24
202.51.79.0/24
202.51.94.0/24
Signature Algorithm: sha256WithRSAEncryption
50:81:e8:eb:ec:29:81:7c:d1:e7:f7:b9:fc:1a:2d:ed:01:2b:
b7:67:03:dd:b0:d1:43:72:fc:f4:96:82:18:6f:f1:51:c2:9f:
64:5e:8c:7f:ed:43:88:b8:f2:12:a1:66:3b:c7:64:75:e5:83:
89:65:cd:c9:36:b4:45:b9:c3:46:02:7e:69:1e:e0:ad:c8:aa:
f2:c7:fd:a2:b0:86:a9:d6:e8:04:fa:af:bf:22:00:35:b7:fc:
dc:8f:99:96:66:94:d2:f2:44:6d:ba:49:b8:7b:97:fe:11:f6:
a1:16:52:e5:da:45:aa:1d:4b:4d:bd:4f:73:14:3c:ce:52:d5:
3b:68:7b:7d:69:30:50:d2:05:a8:15:c1:2d:8f:e3:b9:5d:a4:
d8:0b:7c:b5:bc:70:84:39:1d:b3:34:f3:59:7d:f7:56:e2:35:
40:66:db:ec:85:0a:8c:82:ab:6b:db:72:6b:64:1a:60:3b:0f:
31:87:96:6f:5e:52:a6:d3:cd:23:8a:e2:e6:0d:cb:c9:4b:24:
d6:e8:cb:79:3e:76:be:b3:5e:3b:35:a5:9c:72:b8:36:68:92:
42:a2:7f:85:56:4c:d1:f4:ca:6f:d8:5b:3f:d9:ba:6d:57:eb:
dc:d4:d8:d4:c1:00:cd:6d:b3:56:f9:ed:d3:1d:5c:2e:7f:9b:
21:b8:66:00
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgICNmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG
MkYxN0YzRkYwHhcNMjYwNzE4MTUxMDMwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTViOTc2Ni1kMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Z9PWg1Mm805LcpOI67/GU66SB5VqTYGYD7Qyz6tdAGy04JMV0nfBh8Hg6Qk
Vuy/IL/QxGrEvVgu7OQFT4WUXohpfs3ZuEdUtR6Dz+4izEm76SKtL4dJfnMyROr+
JWCeSPs9xzzqFdY+gdNo/bO2G3CgXdKCLeWqkEdBWq6UHXwPQOSNbSZJf5cI+mCB
BGlNF+ZUKgttTRSTDw7GfVZwQJu64w1MD+RbjTbuWZTrgRcXa4EVJ7CXBq2Nyq4N
Xl78IB5TfoueHf22yQwM2wDdBCitMDp5OkBlAU84uonkqpc68yJWLMstkywOD5Np
o/pZNsP5TwVydXTfE+6AkEIh+wIDAQABo4ICejCCAnYwHQYDVR0OBBYEFHdg32dO
ajOTIfKzQNdNYD2aoBDtMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE
ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEY1NTAvOEI5QkQyMDIxRDg1MTFFMkI0MTIzMERDMDhCMDJDRDIvREZDMTVCRkNF
RTJBMTFGMDhGMzdBRkEyNDg2RjU2QkMucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm
BAIAATAgMAwDBADKM0EDBALKM0ADBADKM00DBADKM08DBADKM14wDQYJKoZIhvcN
AQELBQADggEBAFCB6OvsKYF80ef3ufwaLe0BK7dnA92w0UNy/PSWghhv8VHCn2Re
jH/tQ4i48hKhZjvHZHXlg4llzck2tEW5w0YCfmke4K3IqvLH/aKwhqnW6AT6r78i
ADW3/NyPmZZmlNLyRG26Sbh7l/4R9qEWUuXaRaodS029T3MUPM5S1Ttoe31pMFDS
BagVwS2P47ldpNgLfLW8cIQ5HbM081l991biNUBm2+yFCoyCq2vbcmtkGmA7DzGH
lm9eUqbTzSOK4uYNy8lLJNboy3k+dr6zXjs1pZxyuDZokkKif4VWTNH0ym/YWz/Z
um1X69zU2NTBAM1ts1b57dMdXC5/myG4ZgA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:13 2026 by rpki-client