
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67298C50CE9A11F0B8544609C4F9AE02.roa
File: 67298C50CE9A11F0B8544609C4F9AE02.roa (raw, json)
Hash identifier: 8mwA5txn6e46/kji5X333G33cBr4wxnrtWRbYO9zgas=
Subject key identifier: A9:84:DC:0A:49:59:92:31:34:36:D5:3A:82:CD:95:EF:51:68:A8:B5
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2E8A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67298C50CE9A11F0B8544609C4F9AE02.roa
Signing time: Sun 31 May 2026 16:18:44 +0000
ROA not before: Sun 31 May 2026 16:18:44 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 134889
IP address blocks: 161.248.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11914 (0x2e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:18:44 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5f64-a4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:32:6c:73:84:68:84:a8:ad:87:c4:50:b2:
a0:a8:78:8f:75:6b:be:f7:1f:77:23:5e:c3:05:08:
05:3f:c7:eb:77:08:08:ef:b8:43:16:aa:e9:44:3a:
17:90:51:fd:f0:c1:d9:09:44:a0:78:a2:a9:19:f1:
6a:c2:ed:88:71:99:d2:90:1c:e0:15:67:26:95:10:
52:8f:c9:0c:2b:81:83:53:83:da:e5:fd:68:10:18:
36:e0:6f:5a:e1:10:d8:64:d0:32:7b:e1:36:d2:99:
bf:38:60:8c:12:0f:62:b7:85:cd:94:20:1d:e5:5f:
00:ba:71:10:86:db:e9:54:45:71:6a:e6:ad:44:cf:
4b:32:f7:93:7e:fb:47:ab:79:da:31:bf:34:f3:40:
e7:f3:9f:75:21:b7:dc:ee:2e:f4:0f:e0:4b:99:ce:
df:29:ee:75:7b:53:10:34:a2:35:fc:89:3f:ac:56:
57:5d:d5:60:40:8e:65:ac:8c:73:8a:9c:0e:a0:b4:
53:c8:a0:51:6b:34:61:06:25:3c:e9:c7:c4:1e:07:
86:71:20:f6:1e:15:17:e0:ac:7a:54:e2:74:9c:06:
92:bc:d9:9f:ff:a1:36:8b:49:44:e3:57:48:b9:76:
50:88:50:c2:16:38:cc:35:39:87:e1:12:e4:5a:be:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:DC:0A:49:59:92:31:34:36:D5:3A:82:CD:95:EF:51:68:A8:B5
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67298C50CE9A11F0B8544609C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f7:36:57:b8:52:47:96:3f:1b:2b:88:12:14:93:48:e9:44:
f9:36:34:78:36:b2:92:3d:fd:90:51:fe:26:25:ed:d8:49:37:
87:20:8b:7f:c7:a4:fa:67:00:56:0c:13:19:55:8f:51:53:bc:
9c:5c:97:f5:6c:0d:d1:d2:c9:5c:57:e2:fc:52:38:fd:98:c8:
71:51:33:96:c6:af:ab:59:06:4c:7e:d7:c4:dc:7d:cb:bf:f3:
be:a1:c7:8f:02:e6:07:a6:2b:5e:d9:1a:54:f5:84:ad:04:f6:
11:c5:96:42:41:ee:70:60:c2:04:45:d5:ec:d8:04:96:91:e1:
89:88:fa:ae:18:bc:24:94:ee:fb:4b:59:01:fd:88:da:d8:8d:
6b:bb:be:43:58:88:ef:17:32:43:4d:63:31:be:ba:76:12:1e:
7a:a8:23:c7:b8:3d:e2:e4:c9:b2:a0:d4:df:af:82:b0:b9:fa:
ee:84:1e:6a:ce:2a:34:e9:bf:cf:ce:4f:46:48:b4:05:f6:62:
53:c6:25:81:3b:35:fb:32:b4:b2:f1:ad:ff:b2:58:d9:cb:b2:
e5:fe:07:13:4d:d3:84:d2:d0:57:8b:a7:aa:29:4a:fb:6b:21:
b8:a9:d4:ea:24:0e:99:26:a3:87:cb:86:6b:a4:60:76:c9:e5:
a1:de:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:48:56 2026 by rpki-client