
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7CDD4AAE63F111F18AA533C18E47A888.roa
File: 7CDD4AAE63F111F18AA533C18E47A888.roa (raw, json)
Hash identifier: hSmQMY7cbz+BlceIpps4tt1Yeo9Krt0oqSokbQg4YKY=
Subject key identifier: 7F:32:A7:8A:A9:43:9E:C0:2E:64:67:C7:5F:30:04:FC:FD:16:D8:B7
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 303F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7CDD4AAE63F111F18AA533C18E47A888.roa
Signing time: Tue 09 Jun 2026 10:53:46 +0000
ROA not before: Tue 09 Jun 2026 10:53:46 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151364
IP address blocks: 162.4.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12351 (0x303f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jun 9 10:53:46 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a27f0ba-0918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:47:dd:8c:fd:d9:52:8f:ba:4a:8b:ab:67:
d1:81:73:58:87:18:1f:1b:ae:8c:68:8e:ef:38:be:
a7:ee:93:96:90:fc:fd:b6:17:59:a7:4b:25:f9:7d:
f9:ef:9e:78:a0:8e:b5:36:1e:fc:89:6e:63:32:db:
f8:05:4f:fc:4e:5a:a6:10:57:50:2d:81:ce:33:bc:
35:99:48:74:57:bb:b5:a5:ec:ff:49:19:9f:26:b3:
a2:77:19:7d:6e:36:02:ca:5e:53:86:d6:9e:af:d6:
a2:2e:33:10:a2:16:7f:c0:ab:4a:da:33:e3:6b:6f:
3e:72:ea:99:3c:ac:ba:3f:15:40:8b:e6:65:f4:29:
52:e8:7f:98:98:08:6d:5d:77:af:f1:62:32:28:ae:
3e:86:88:ae:4a:4c:b0:88:c6:e4:b8:86:17:1c:e7:
e5:30:25:ea:59:b1:ac:58:68:71:93:58:3e:49:96:
54:b3:c4:e0:2a:19:c0:ae:f2:3b:0d:9a:96:f0:d1:
72:1c:f5:22:6f:0d:34:3b:76:60:2a:ee:76:35:a2:
25:76:dd:d5:fe:16:5e:f7:59:c3:d0:b9:08:28:7f:
ae:44:28:79:48:1d:fb:e9:62:8e:53:8a:b8:7b:3a:
22:45:a0:af:de:b4:8a:66:81:21:66:61:d4:69:75:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:32:A7:8A:A9:43:9E:C0:2E:64:67:C7:5F:30:04:FC:FD:16:D8:B7
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7CDD4AAE63F111F18AA533C18E47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.97.0/24
Signature Algorithm: sha256WithRSAEncryption
36:47:7d:d3:37:58:52:32:3b:a3:00:3a:d5:87:fe:79:d4:0e:
8d:4e:08:07:0a:1b:9e:32:3c:62:48:c0:bb:b5:a7:3a:45:15:
42:4b:13:e4:6d:d8:ca:7e:6c:11:36:06:36:e9:1a:c9:e9:b3:
e4:49:a9:6c:63:80:b3:5c:24:f9:3b:55:6f:c0:53:7b:6c:c0:
06:cc:0b:27:a0:62:4d:08:b2:b6:41:e2:03:6a:0e:98:f5:5c:
e6:a4:f8:cf:1b:9b:a7:23:f2:e4:bb:0f:e7:bb:d4:76:4e:59:
25:10:52:4c:1c:a5:4f:37:00:8a:11:0e:ee:b5:bc:2b:65:55:
3a:fb:f6:22:9b:b2:e3:6d:11:05:77:a8:fc:66:8f:36:83:43:
8c:02:d0:91:8e:82:a7:f1:ee:1a:36:18:de:d4:f6:e3:bc:7b:
e9:18:9c:8c:7e:f8:53:22:26:33:41:bf:aa:79:60:0e:f7:9b:
bc:1e:91:b8:bb:17:d3:3f:da:dd:3d:b2:dc:c0:3e:2f:b0:4b:
a4:ec:02:53:ab:20:08:50:58:71:e2:df:31:e5:1a:51:98:42:
7b:7c:01:82:9d:9d:4c:7e:e3:b1:1f:ac:5c:59:df:08:bd:0b:
c4:bf:a7:c4:05:b7:30:1e:5d:9d:88:ca:90:19:59:ee:ce:95:
34:42:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:43 2026 by rpki-client