
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/544C6CDC2A4011F0A9DDC84AC4F9AE02.roa
File: 544C6CDC2A4011F0A9DDC84AC4F9AE02.roa (raw, json)
Hash identifier: HjehNA78pnZLUhSGQi4FuLOMs1aY3IYDX7Otg8V9YjM=
Subject key identifier: 19:49:5A:E2:20:34:0D:71:C6:01:43:21:7E:84:5D:55:3D:58:79:C1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D8DC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/544C6CDC2A4011F0A9DDC84AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:56:42 +0000
ROA not before: Fri 09 May 2025 06:41:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147305
IP address blocks: 163.227.188.0/23 maxlen: 24
2402:560::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55516 (0xd8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 9 06:41:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c429-d8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:ac:04:ab:7e:b6:43:4c:6b:db:96:5e:2f:
2c:25:75:6f:4d:50:9c:33:22:fe:1b:c3:d9:ee:34:
f8:68:96:11:1c:2d:4d:af:58:7a:cd:88:16:99:ec:
2a:22:7a:41:1c:4a:1e:8e:99:8c:1d:05:c9:4a:ea:
0b:1b:84:4f:d8:50:59:27:47:b0:5b:08:5d:09:04:
ea:65:05:2e:97:3e:f5:31:61:fb:60:45:b4:9f:a0:
62:46:ab:b7:9f:13:3f:36:c8:51:de:04:af:57:9d:
43:dc:e4:6b:6b:54:da:2f:41:fd:40:83:57:b4:33:
92:d8:07:3b:84:6c:31:79:2a:fc:bd:97:1c:7b:27:
6c:51:c2:cf:c8:bc:49:eb:d2:36:64:13:59:05:8a:
dd:c1:1b:2b:ba:ba:2b:2b:45:0b:f5:66:8e:55:38:
47:91:aa:d9:01:6a:30:f2:65:39:6a:6e:9e:52:cb:
da:48:6e:61:fa:bd:87:86:cb:15:48:0a:21:24:f2:
3b:8d:93:91:aa:f9:6f:6c:8f:b4:92:5c:cd:dd:28:
95:f0:2c:d6:2e:5b:11:98:7c:bd:3e:09:34:72:ef:
9c:dd:de:15:1a:bb:10:3a:e7:c3:aa:a7:63:a1:35:
4b:26:e8:4f:40:0e:0a:bf:a3:87:84:4c:3d:99:cf:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:49:5A:E2:20:34:0D:71:C6:01:43:21:7E:84:5D:55:3D:58:79:C1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/544C6CDC2A4011F0A9DDC84AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.188.0/23
IPv6:
2402:560::/32
Signature Algorithm: sha256WithRSAEncryption
b7:16:f6:6e:bf:f9:ce:08:0a:46:96:c6:6c:77:f0:8c:ad:dd:
be:19:de:e8:1a:87:ba:e6:46:88:b6:bc:c8:cb:b5:ec:62:6d:
26:4c:0b:7c:5b:dd:f9:be:e6:04:05:c4:0f:f7:df:c8:6a:95:
fa:a1:59:87:53:27:cd:8d:3a:be:13:d4:05:42:c8:03:93:06:
99:9e:c7:5b:00:de:c7:45:9d:12:ef:d7:e1:97:5f:0d:b4:98:
4b:91:e1:e4:22:3f:a0:a4:e1:55:d9:99:43:d8:ad:f2:3b:40:
59:2b:76:1e:31:a3:14:f7:e7:40:a2:a6:90:74:26:b8:1c:8d:
42:01:53:89:1c:2b:fa:85:b5:55:8a:2a:a3:96:09:2a:d0:d2:
b2:da:1d:29:3a:3a:3e:b4:63:c0:90:cb:94:22:19:d8:31:9f:
b8:7f:0f:37:89:53:c0:a3:db:f8:60:34:1c:85:72:17:10:c1:
be:8e:16:ab:34:b9:6f:93:df:59:1d:4d:e4:5f:4d:a5:0c:ba:
d4:fe:dd:20:16:86:e7:34:bf:af:ee:71:2f:69:76:f8:2c:73:
fe:a2:34:f9:78:0d:e2:2f:0f:ad:5e:bc:2e:ad:5e:ed:1c:7c:
9f:57:d8:dc:84:a2:5e:5c:e5:b4:f7:09:a4:5b:71:61:af:91:
a6:ba:77:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:42 2026 by rpki-client