
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F87B578CB5E611F08C07425AC4F9AE02.roa
File: F87B578CB5E611F08C07425AC4F9AE02.roa (raw, json)
Hash identifier: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=
Subject key identifier: 9E:D5:FE:5A:42:00:78:E9:64:C2:30:E6:9B:14:2C:44:5B:7D:48:FA
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 05AA
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F87B578CB5E611F08C07425AC4F9AE02.roa
Signing time: Tue 07 Jul 2026 01:27:46 +0000
ROA not before: Tue 07 Jul 2026 01:27:46 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 401783
IP address blocks: 203.32.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1450 (0x5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jul 7 01:27:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4c5612-1a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:52:90:26:b6:ac:d7:dc:cf:ff:30:ad:4d:
e3:20:74:99:87:22:43:e6:04:5a:90:85:45:1a:a9:
35:c8:77:ee:bd:75:c3:2f:c3:2f:25:be:41:5b:81:
b8:34:49:4e:83:2a:eb:9a:2c:aa:65:56:56:a2:73:
ca:e6:87:d7:ce:66:7e:ec:7d:4d:59:d5:8d:b9:c9:
f1:53:c6:e3:84:70:a1:6e:56:77:d1:3b:45:ec:b6:
c2:70:4e:36:4a:3b:cd:2c:5c:b8:76:ba:09:a8:fd:
e0:10:97:05:6d:b2:03:98:57:32:9e:9a:3a:ca:5a:
db:2b:79:3f:16:54:31:11:3d:9b:d9:31:15:b1:7d:
f4:83:31:39:7e:05:25:5b:dd:a1:3e:70:f4:f2:52:
0f:ae:3e:ea:51:3e:f6:4a:5a:0b:a6:e4:fa:ff:97:
fe:a5:64:2e:7b:40:17:cc:5d:12:1d:48:fc:b8:d9:
af:cc:1a:d8:bd:13:9c:9a:44:11:24:b0:83:62:44:
3e:9e:bd:9e:51:fe:6e:d2:85:89:b7:5d:cb:0f:78:
99:42:32:4c:d4:f5:64:db:52:82:15:97:e4:57:b2:
ff:af:0d:24:75:23:56:e9:63:c2:68:23:a1:61:08:
98:f1:ce:2b:2e:3e:cd:d8:b4:e5:7f:65:6d:1e:bd:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D5:FE:5A:42:00:78:E9:64:C2:30:E6:9B:14:2C:44:5B:7D:48:FA
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F87B578CB5E611F08C07425AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.32.21.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a5:4e:50:6f:68:66:9a:ef:cf:20:37:f4:75:18:1e:10:cd:
77:3f:2c:1e:71:9b:58:62:49:70:77:e1:72:2e:eb:83:06:f6:
78:c6:56:e6:70:42:de:f9:3b:98:20:47:a6:05:be:20:5e:d9:
f9:62:f4:57:81:92:43:e8:2f:48:c0:96:1b:90:20:47:f8:fa:
5e:bb:2a:ce:76:31:48:05:f3:00:1d:54:00:60:8d:ba:6e:b9:
5f:a2:f7:f4:80:de:9a:22:7b:ac:88:5d:ed:d2:9e:4a:23:a6:
ff:b2:ca:d8:ef:50:48:f1:4e:f1:ce:94:35:52:7a:6e:a1:ef:
13:f2:9e:7a:fb:a1:4d:87:a0:63:13:eb:86:8e:b8:91:ab:2f:
21:1a:ed:c7:bd:5c:58:ed:27:65:b7:2d:a3:2d:4d:58:40:62:
6f:69:bb:98:db:5b:a5:15:d2:36:a4:cc:b3:76:d5:1f:09:db:
52:ed:11:92:6d:bc:6b:b6:6b:54:3a:be:a6:1b:b1:f7:56:f1:
6c:10:21:cd:05:16:64:9f:fd:b4:9c:2e:77:27:45:ed:16:f6:
d0:e8:82:72:5d:a1:ea:41:83:12:5f:4e:88:03:87:ab:a8:10:
f5:e7:0d:b7:b5:02:4b:fc:58:86:7c:3c:72:3d:a6:8a:10:3e:
2b:dc:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:16 2026 by rpki-client