
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/998CA7F6B29611F0A9620F65C4F9AE02.roa
File: 998CA7F6B29611F0A9620F65C4F9AE02.roa (raw, json)
Hash identifier: h/qo7UbEbLV18o6jkscnIksGW89xzlKj6ySEYB/Jbpk=
Subject key identifier: B8:27:34:4C:D1:58:37:05:95:8C:EB:19:DE:04:C4:D6:9F:B9:80:9D
Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Certificate serial: 6A
Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/998CA7F6B29611F0A9620F65C4F9AE02.roa
Signing time: Sun 26 Oct 2025 18:07:14 +0000
ROA not before: Sun 26 Oct 2025 18:07:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153473
IP address blocks: 163.227.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Validity
Not Before: Oct 26 18:07:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68fe6352-f46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:39:fd:c1:03:d0:00:1e:77:cc:5b:a0:78:
73:7f:b7:79:c9:b4:e9:73:de:9c:fc:59:15:19:63:
99:15:97:fe:80:f4:0e:44:cf:aa:a0:da:ad:85:5a:
6f:98:d6:89:ba:de:7c:ad:f8:a2:a5:dd:f2:8c:25:
26:e0:d2:e0:41:70:f9:bb:1f:92:07:b9:60:c1:7c:
61:37:4c:8b:22:f7:f2:88:7d:6e:9a:54:d0:30:32:
59:2e:27:60:8a:40:28:f4:66:7e:e5:e5:94:ae:32:
d1:0e:0e:85:3d:b3:50:32:5c:ae:36:a2:c5:47:36:
c1:bc:17:e6:b8:5f:5a:b8:f3:e3:39:b9:fc:16:72:
22:0f:0c:99:45:a1:70:67:5f:d0:37:68:a9:d4:8a:
1f:1a:88:c8:09:3e:ff:9a:c3:c9:69:9b:63:48:e2:
90:5a:9d:ec:97:eb:57:19:8a:f2:ef:05:7e:0b:7f:
d1:1f:a5:d1:6f:d6:4d:52:da:27:3e:91:e4:df:d3:
cb:cb:89:66:5b:5f:7c:64:a3:37:95:0d:76:94:c5:
44:41:d2:3a:69:9f:96:a5:c7:db:0c:db:5d:a9:16:
a9:43:d9:48:fa:42:03:06:73:69:91:7c:e7:08:a5:
23:5d:03:ad:65:00:87:56:d9:2e:41:f0:2c:3d:eb:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:27:34:4C:D1:58:37:05:95:8C:EB:19:DE:04:C4:D6:9F:B9:80:9D
X509v3 Authority Key Identifier:
keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/998CA7F6B29611F0A9620F65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.227.88.0/23
Signature Algorithm: sha256WithRSAEncryption
72:f5:7b:9c:21:47:3e:5f:05:ff:25:53:d4:a4:fd:bf:c4:73:
91:bd:50:2c:b0:e5:62:36:5f:8a:ca:45:06:9e:14:5a:1b:b9:
81:ca:e3:4f:ea:c7:51:98:39:7c:28:7b:04:e3:f2:71:27:a0:
85:d8:c6:0f:2f:f9:3b:83:48:b3:98:97:0a:80:a5:eb:1b:23:
eb:4b:47:c6:7c:70:e0:66:88:69:39:b1:78:ba:4f:0d:8f:49:
fb:fc:c1:39:23:6e:f0:58:34:30:d9:4c:10:32:73:ea:33:0d:
23:2f:ea:f8:bf:3e:f5:b1:61:4a:1b:4d:e1:9b:b3:16:55:b0:
72:ff:9e:81:14:6e:98:33:02:19:79:8a:97:21:3b:9c:9e:b0:
b7:d8:4b:5e:f5:a8:18:e0:91:13:6f:6b:22:a1:31:8f:d6:4b:
5e:70:0b:40:0f:82:5a:fc:fb:f0:32:47:02:0b:19:a2:6c:3e:
32:8e:55:eb:a6:54:c2:d8:f8:5c:36:7a:95:b5:7d:ce:97:cd:
6d:78:4b:25:28:ae:79:2a:57:59:0a:f1:56:73:c9:0f:5f:98:
cb:1a:58:15:8a:f9:61:52:a5:af:32:d1:9a:87:9b:a0:7a:e4:
78:6a:28:78:ee:47:f8:0f:5e:de:65:6c:25:4b:1f:25:56:f6:
be:f0:78:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:24:14 2025 by rpki-client