
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/BFDC8CE68AAB11EF93DB792CC4F9AE02.roa
File: BFDC8CE68AAB11EF93DB792CC4F9AE02.roa (raw, json)
Hash identifier: wkvyO2o6LF9oqZ2WfiFlM73GqnUxri239jf1iKk7alc=
Subject key identifier: A1:EC:32:1E:9D:38:F2:3B:77:7C:FC:4C:6B:2A:79:B8:F5:D2:9F:7D
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 02B6
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/BFDC8CE68AAB11EF93DB792CC4F9AE02.roa
Signing time: Mon 22 Jun 2026 06:32:48 +0000
ROA not before: Mon 22 Jun 2026 06:32:48 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 18256
IP address blocks: 87.124.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Jun 22 06:32:48 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a38d70f-cd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:e0:61:41:a1:3a:8d:9c:51:25:87:ed:2b:
cc:66:51:94:7f:f2:2a:55:44:ad:1d:f8:bb:b9:70:
bc:7e:41:aa:9d:b0:c7:8c:d4:2a:8e:b1:9d:c5:7b:
bd:10:1e:25:ad:03:2e:95:18:af:fe:60:d1:56:b0:
7d:a9:7a:b5:92:35:dd:4c:41:eb:d9:29:24:d2:36:
84:72:c1:e2:94:04:c0:5e:4f:a0:12:db:c4:5d:18:
60:a9:f6:35:b5:4b:b7:c8:79:fd:98:22:fb:03:11:
9d:ea:95:3f:aa:a8:13:cc:64:0c:a3:32:a0:6d:a1:
fc:2c:9a:cd:05:b0:c2:a4:fc:48:dc:d6:ea:90:cc:
22:f6:64:4c:10:47:54:ed:97:19:68:58:9f:3a:fc:
25:78:1f:a6:8c:f8:31:96:09:ff:96:12:36:36:ab:
16:aa:80:1b:dd:16:37:94:07:42:6e:46:a9:a5:dc:
7d:c1:24:13:84:dd:24:55:cc:41:7e:7b:b5:3e:00:
4a:2b:61:10:10:20:4a:01:69:5f:ab:b3:cd:f8:5f:
a0:db:0a:84:51:18:6f:45:a8:db:f5:57:94:e1:2b:
33:7f:4c:b7:77:78:b8:b8:5d:f1:39:0f:68:33:7e:
90:83:7e:fb:d5:44:2f:0b:d1:c3:d1:69:fa:2c:ff:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EC:32:1E:9D:38:F2:3B:77:7C:FC:4C:6B:2A:79:B8:F5:D2:9F:7D
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/BFDC8CE68AAB11EF93DB792CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
87.124.71.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:af:6c:3c:75:4d:38:cd:1d:55:52:6b:e6:9e:f0:b8:98:2f:
fd:b9:c0:d8:65:5f:58:71:86:1e:28:39:20:db:11:dd:f6:c5:
03:6c:33:1c:b4:87:84:63:43:82:5f:fd:67:59:e2:b1:bb:84:
a5:0d:bf:66:87:8f:37:d7:9e:1a:96:95:3a:6c:22:02:c6:d5:
06:6b:f8:8d:70:fc:a5:3c:56:ed:ac:47:76:5e:32:1e:82:ed:
3f:1e:02:61:e1:90:71:3a:e9:65:e1:42:b2:08:2d:6e:a7:34:
60:ba:b4:5d:7a:6a:a7:87:67:d7:c7:ca:88:0a:8c:15:1c:32:
52:92:6d:ef:1e:65:06:76:a7:5e:3c:fa:a8:ee:65:5a:89:2e:
42:c5:26:3e:c3:06:8c:84:cc:8c:56:36:5f:60:0f:84:a2:01:
17:6e:dc:22:61:8a:ed:3a:f6:60:40:36:b5:06:cd:86:06:c6:
7e:82:3e:74:1b:44:ea:ae:d2:1b:14:60:8a:e5:a2:23:08:ef:
0b:c2:96:2d:48:6e:84:44:e8:b2:b0:31:82:14:62:d8:cc:c1:
e0:ec:92:97:43:b7:d5:bf:7f:20:be:bd:3c:16:34:a4:81:3a:
4f:da:0e:b5:72:15:55:12:ce:d7:a1:d8:45:cc:fe:87:0c:37:
b4:5e:4f:69
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKDcxRjQwMjE4QzFBRjQ3QzVFOTkzQTIxQTJCMjkyODRF
NEMzMkM5MzQwHhcNMjYwNjIyMDYzMjQ4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM4ZDcwZi1jZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKfgYUGhOo2cUSWH7SvMZlGUf/IqVUStHfi7uXC8fkGqnbDHjNQqjrGdxXu9
EB4lrQMulRiv/mDRVrB9qXq1kjXdTEHr2Skk0jaEcsHilATAXk+gEtvEXRhgqfY1
tUu3yHn9mCL7AxGd6pU/qqgTzGQMozKgbaH8LJrNBbDCpPxI3NbqkMwi9mRMEEdU
7ZcZaFifOvwleB+mjPgxlgn/lhI2NqsWqoAb3RY3lAdCbkappdx9wSQThN0kVcxB
fnu1PgBKK2EQECBKAWlfq7PN+F+g2wqEURhvRajb9VeU4Sszf0y3d3i4uF3xOQ9o
M36Qg3771UQvC9HD0Wn6LP/EMwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKHsMh6d
OPI7d3z8TGsqebj10p99MB8GA1UdIwQYMBaAFHH0AhjBr0fF6ZOiGispKE5MMsk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy82REUzQ0U3QzM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4WHBrNklhS3lrb1Rrd3l5
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2NmUUNHTUd2UjhYcGs2SWFLeWtvVGt3eXlUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvNkRFM0NFN0MzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvQkZEQzhDRTY4
QUFCMTFFRjkzREI3OTJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAV3xHMA0GCSqGSIb3DQEBCwUAA4IBAQCgr2w8dU04zR1VUmvmnvC4
mC/9ucDYZV9YcYYeKDkg2xHd9sUDbDMctIeEY0OCX/1nWeKxu4SlDb9mh483154a
lpU6bCICxtUGa/iNcPylPFbtrEd2XjIegu0/HgJh4ZBxOull4UKyCC1upzRgurRd
emqnh2fXx8qICowVHDJSkm3vHmUGdqdePPqo7mVaiS5CxSY+wwaMhMyMVjZfYA+E
ogEXbtwiYYrtOvZgQDa1Bs2GBsZ+gj50G0TqrtIbFGCK5aIjCO8LwpYtSG6EROiy
sDGCFGLYzMHg7JKXQ7fVv38gvr08FjSkgTpP2g61chVVEs7XodhFzP6HDDe0Xk9p
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:47 2026 by rpki-client