
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/400CD62A2F3611F1B3A86321A8833773.roa
File: 400CD62A2F3611F1B3A86321A8833773.roa (raw, json)
Hash identifier: IvY7LU71Dr8kQxekpYj0wMp9FOLJe5Z4yHErcsZYTn0=
Subject key identifier: DA:2F:6A:29:88:63:B3:39:17:D9:D6:94:43:21:AA:AA:A2:5E:7A:A9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DD83
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/400CD62A2F3611F1B3A86321A8833773.roa
Signing time: Fri 03 Apr 2026 08:30:54 +0000
ROA not before: Fri 03 Apr 2026 08:30:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154567
IP address blocks: 163.128.104.0/23 maxlen: 24
2001:df6:d8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56707 (0xdd83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 3 08:30:54 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69cf7abe-5605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:36:61:11:3a:7c:73:45:b7:98:a6:9b:75:
e9:c8:d9:2f:05:55:10:6a:6f:34:0c:2c:60:63:f7:
1b:8b:b0:45:cb:89:56:bc:11:f4:16:69:09:0d:3a:
00:6e:8e:d9:8c:dd:74:49:38:17:83:3a:4e:4f:48:
b2:e4:e0:11:22:e8:9a:81:6a:fa:f2:3a:58:95:17:
2e:74:13:8f:9a:7e:cb:70:fa:7c:74:0b:b4:1c:74:
d5:0c:7b:61:10:b5:cb:07:56:8b:03:c9:13:4e:81:
58:3d:1a:6c:56:01:e9:2e:18:71:94:80:27:c3:56:
7f:1f:fa:7a:df:6d:16:8a:3f:30:2a:3e:54:1b:23:
09:30:d8:25:f9:78:1c:cc:c8:aa:87:24:12:dd:a4:
11:91:d4:20:2b:30:d6:ad:1d:46:bc:d4:a0:12:d4:
aa:47:ab:b6:80:60:34:b5:53:11:e8:28:14:51:d1:
58:5a:10:c8:50:52:ca:f5:5d:45:b7:78:30:70:18:
f2:0c:9c:d0:25:6a:69:86:44:80:0d:18:c4:13:8a:
13:a6:99:70:b0:f2:a2:6b:13:17:a5:63:bf:7b:f8:
41:27:70:54:ff:3d:ea:4b:b7:f5:27:00:4c:33:46:
23:b0:52:7b:5d:62:c1:99:f9:f9:12:4f:25:ae:6a:
7e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2F:6A:29:88:63:B3:39:17:D9:D6:94:43:21:AA:AA:A2:5E:7A:A9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/400CD62A2F3611F1B3A86321A8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.104.0/23
IPv6:
2001:df6:d8c0::/48
Signature Algorithm: sha256WithRSAEncryption
58:a0:61:4b:69:48:11:ed:ab:a1:02:81:4f:83:26:00:e3:86:
9f:90:2c:bf:62:73:44:e9:ef:4d:30:a4:ad:d3:28:58:f9:52:
3a:63:5d:66:40:bd:28:bd:2e:28:b3:87:3f:d8:68:65:23:0d:
e3:b3:33:86:05:5a:2c:85:b9:8b:f0:07:3d:37:1c:30:9f:84:
bb:68:b1:fa:b3:09:34:f2:1d:58:cd:28:4f:0f:de:4c:58:4d:
a2:2f:cf:ad:aa:ad:1f:2d:75:d0:e5:f5:22:75:59:8a:0a:97:
23:67:e0:ff:7c:5a:ed:13:57:46:0f:9b:71:dc:65:71:ea:c1:
d4:2b:0c:58:6c:5b:8a:d0:44:8a:9e:74:bf:9a:bb:88:56:56:
47:0e:61:c9:e9:8b:ed:3a:52:8d:d9:75:79:99:29:38:db:24:
9c:4a:ba:3d:28:98:77:18:e4:90:dc:9e:ff:1b:ef:45:12:54:
d5:30:11:db:bd:b1:2e:79:92:ab:f0:c1:b6:76:f1:a1:03:a5:
0c:9e:86:8c:43:09:84:5f:d0:ea:e1:36:5b:e5:45:b5:0e:15:
05:f9:37:b7:e1:fd:d3:3c:c9:89:d1:a2:3e:ee:8b:0e:fc:80:
85:fb:a9:52:28:e9:31:3a:f7:45:70:9c:90:9e:24:f7:17:fb:
75:8c:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:45 2026 by rpki-client