
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/1F40296A65AA11F1A2780DB67847A888.roa
File: 1F40296A65AA11F1A2780DB67847A888.roa (raw, json)
Hash identifier: aRlf2HNOEY9j5M9MXEWB2McO60V4ZIRW70DicGrMpWQ=
Subject key identifier: 26:16:1A:FC:6E:80:FF:86:E7:B5:CE:6E:89:41:C5:9B:00:56:2C:56
Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Certificate serial: 35CD
Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/1F40296A65AA11F1A2780DB67847A888.roa
Signing time: Wed 16 Sep 2026 11:31:35 +0000
ROA not before: Wed 16 Sep 2026 11:31:35 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 147302
IP address blocks: 180.149.219.0/24 maxlen: 24
182.255.48.0/24 maxlen: 24
182.255.49.0/24 maxlen: 24
182.255.50.0/24 maxlen: 24
182.255.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl
rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13773 (0x35cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Validity
Not Before: Sep 16 11:31:35 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6aaa7e17-c12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:e6:d3:cb:09:d4:86:bb:58:58:39:06:e2:
22:db:c9:54:6e:48:27:96:71:d3:09:bf:22:0a:1d:
b1:22:0d:6e:cb:d0:46:7d:5d:98:e9:81:fd:5f:d3:
e8:c2:4d:b1:59:b6:c3:dd:41:62:ae:a4:da:12:0f:
67:e7:b7:f6:87:0d:88:ad:44:7a:71:3c:ec:3e:8a:
8d:38:b3:21:33:da:91:81:79:0c:b5:ad:38:1a:e0:
c7:b5:d3:0c:74:8a:03:b3:75:62:bd:45:7c:53:10:
02:4f:83:a1:f1:ff:de:ce:cb:e0:44:b1:96:85:21:
29:e2:51:1b:36:a3:3d:ca:24:7d:26:a8:80:56:b0:
5b:58:b6:37:09:21:fe:99:a5:64:4b:4e:b3:29:43:
5d:d7:7f:bc:af:0e:19:c3:2a:7d:09:54:3c:e5:e8:
68:3d:16:4e:97:94:49:e5:51:8d:61:d0:2b:c0:c1:
08:3f:7a:78:1f:b2:79:10:b6:51:ff:9b:12:aa:6f:
92:ee:6b:74:e2:7a:a5:6b:1b:eb:dd:f8:aa:32:8c:
f5:f0:49:53:9a:5a:10:d4:fd:45:45:b0:8d:ae:17:
91:6e:ef:c4:4e:b4:61:21:3c:06:6e:0c:ed:de:c0:
f5:f7:4c:92:a5:3d:be:9f:b1:03:9d:02:c8:ce:63:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:16:1A:FC:6E:80:FF:86:E7:B5:CE:6E:89:41:C5:9B:00:56:2C:56
X509v3 Authority Key Identifier:
keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/1F40296A65AA11F1A2780DB67847A888.roa
sbgp-ipAddrBlock: critical
IPv4:
180.149.219.0/24
182.255.48.0/22
Signature Algorithm: sha256WithRSAEncryption
67:ba:ad:21:a7:d4:75:3a:c9:f5:20:69:9a:b0:73:05:e3:28:
8f:51:0a:1d:63:e6:7c:33:b6:1e:a6:cf:33:47:a0:ab:db:df:
d6:3b:7b:aa:7f:ea:f7:8d:99:dd:bd:ca:03:84:37:f8:83:07:
1b:1b:cf:f9:ad:ac:58:4a:19:7f:30:f5:b2:50:1e:21:33:3a:
d2:3d:cb:bf:c3:53:83:f7:95:0b:18:ed:41:5e:19:55:ca:b2:
87:dc:2d:ca:83:80:ab:cb:86:06:2d:a0:da:b4:24:f5:50:91:
51:e5:00:1a:ce:0c:f0:bf:90:c4:a4:0a:cf:28:32:0b:5f:0b:
fd:c0:38:5c:26:ef:1c:9f:60:3f:35:ee:06:4f:35:62:ba:30:
4c:6b:3a:25:ed:f2:ca:46:9e:68:23:13:98:a5:82:89:81:e5:
7d:6d:36:2e:19:2a:cd:a6:b3:24:30:1e:8a:70:4b:c5:40:cc:
41:90:1f:03:f2:69:a4:21:6a:c0:f9:cf:10:08:83:d7:6d:64:
01:cd:47:51:1f:57:db:73:0f:02:a5:cc:cb:76:77:7a:fb:41:
5a:37:28:ee:71:de:ea:47:4e:3d:2c:a8:25:56:a9:67:5c:b5:
d2:12:1a:b1:b5:62:5d:9c:c0:70:bd:e6:11:bb:a4:42:fe:1b:
bb:b9:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:28:57 2026 by rpki-client