
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5976AF06063C11F080EAF859C4F9AE02.roa
File: 5976AF06063C11F080EAF859C4F9AE02.roa (raw, json)
Hash identifier: /iu8eEmWOMvB40URoeSgn1rbsCu209WtKZvizYv76SI=
Subject key identifier: 45:54:44:20:B1:CD:3D:BB:77:43:BF:22:09:79:D2:09:94:01:F4:CE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D85B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5976AF06063C11F080EAF859C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:54:31 +0000
ROA not before: Thu 08 May 2025 16:29:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153722
IP address blocks: 163.223.164.0/23 maxlen: 24
2401:f7e0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55387 (0xd85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:29:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c3a7-f2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:84:96:f1:16:37:01:d2:e6:e7:f2:f2:1a:
2a:c3:26:22:b1:6a:f5:64:10:6a:85:2f:d8:68:c7:
73:64:b1:9c:59:56:eb:79:d7:42:bb:61:28:52:98:
5f:1f:bf:02:e5:87:c1:2d:50:37:17:31:5b:09:8e:
65:b0:4e:97:3b:07:e5:e0:30:1f:a2:3d:e6:19:53:
9d:e0:0c:6c:5a:a6:a3:17:3f:72:be:13:7c:57:fe:
0e:c7:1e:75:1b:dd:ac:95:7e:00:7d:35:88:58:57:
78:5f:77:05:d6:f2:c4:db:d3:fa:4f:08:b6:bb:df:
27:52:02:3e:3f:c6:e4:47:21:4c:7d:5d:dd:f9:c0:
1e:a7:7c:87:ef:83:7f:25:ed:74:c8:cf:f1:01:24:
5c:cc:eb:50:07:83:4f:e9:a7:8b:2a:bf:81:ad:7b:
4c:8b:49:ad:b0:86:6d:80:aa:70:83:4f:29:fc:3f:
1b:a9:c5:6d:fe:7d:10:39:91:40:2c:b9:be:50:f8:
6c:d3:23:f8:07:04:31:10:37:d9:3a:95:4a:8c:e0:
08:b7:06:7f:3e:fd:7f:e8:e1:bc:b2:59:e0:59:b8:
67:4a:e2:3f:fd:ff:2c:66:84:8d:08:6c:b3:80:b6:
f7:c8:f4:6f:78:8c:d3:5a:c9:38:72:cc:aa:22:a7:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:54:44:20:B1:CD:3D:BB:77:43:BF:22:09:79:D2:09:94:01:F4:CE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5976AF06063C11F080EAF859C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.164.0/23
IPv6:
2401:f7e0::/32
Signature Algorithm: sha256WithRSAEncryption
af:48:40:63:d3:31:af:09:fc:63:0f:19:d2:1c:8d:17:88:16:
d6:31:79:d6:ab:13:2a:91:9d:9c:9c:c6:a0:27:c3:39:29:c5:
28:8c:f4:fc:4a:08:12:a4:74:71:a8:02:cd:69:e7:f4:ff:29:
80:23:4a:bc:ae:fe:c0:ce:82:64:a0:e9:87:8c:ad:fa:a6:ee:
d2:43:dd:17:2a:78:30:a6:b4:9d:c5:02:8a:70:f7:81:48:a8:
24:68:46:de:c1:27:00:5e:a5:a0:97:bb:06:de:af:ed:46:e6:
37:f1:f7:da:0a:66:7d:68:f4:1b:a0:af:d7:97:ef:19:4d:3b:
a6:1f:c3:83:5e:00:a0:b0:85:bc:c7:34:c4:a3:95:16:56:cf:
56:75:b8:0e:41:28:de:ed:bc:2d:7b:6e:92:12:d8:cf:9e:ff:
06:fe:98:d6:1d:c1:ed:85:5e:0a:2f:96:15:b8:fe:b2:ec:7e:
69:06:5a:33:35:d4:c6:42:35:93:dd:02:0e:f0:e1:e6:68:42:
38:55:de:1d:97:00:4d:21:ec:d2:51:5d:96:dd:10:2b:5f:e5:
27:c6:7e:ca:4d:58:29:67:5e:c8:a4:5e:6c:fe:00:c3:fa:19:
a8:81:d1:ab:70:ab:f9:bc:c6:56:18:47:f9:bf:a2:92:2c:5d:
55:7d:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:59 2026 by rpki-client