
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EDC68834C911F18A36AC8CC6833773.roa
File: 63EDC68834C911F18A36AC8CC6833773.roa (raw, json)
Hash identifier: rlN17oTSPxkx14f/g68kYQ4YohswbUVuxGIyJa9La6s=
Subject key identifier: 79:00:5B:D3:11:2B:A0:AB:B2:5D:7F:60:BB:DD:CC:2A:F1:88:59:F4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DE0E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EDC68834C911F18A36AC8CC6833773.roa
Signing time: Fri 10 Apr 2026 10:46:19 +0000
ROA not before: Fri 10 Apr 2026 10:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154581
IP address blocks: 163.128.142.0/23 maxlen: 24
2001:df6:de40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56846 (0xde0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 10 10:46:19 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69d8d4fb-41f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:c3:62:27:b4:f9:ab:cb:4d:14:9c:1d:e9:
53:f4:ed:7f:a8:86:45:7e:b2:c5:e0:f6:4e:59:b6:
25:c1:25:3e:a8:05:ee:e6:fd:aa:db:da:64:63:90:
65:42:07:a0:bb:87:30:0a:da:36:5d:e8:19:fd:47:
8c:5a:2f:66:ef:22:91:82:f1:5a:68:9e:6c:6d:d8:
7d:0b:4e:b8:09:a6:5b:fe:51:a4:04:e5:84:5c:1d:
24:b4:a6:a6:5d:56:b4:c2:c8:4c:0e:8c:f2:85:a4:
4b:69:bc:41:b5:e2:12:e8:f9:26:bc:95:00:dc:f3:
10:c5:cd:c7:7b:12:a1:48:3e:c2:f0:99:70:85:6e:
b3:d1:c6:b3:c7:59:fb:c0:f5:80:a0:35:44:3a:3d:
e0:0b:8a:cb:a5:c1:0c:ce:16:07:c9:b9:1d:f7:bb:
27:3d:bb:2e:05:32:34:92:99:a0:ba:b0:00:93:2f:
35:64:b8:29:1f:57:c0:28:ee:ee:bd:87:3b:45:3c:
17:f4:01:55:a5:60:09:3e:e5:29:9d:b1:27:86:f2:
ee:e6:93:f2:40:91:ac:43:01:f7:ef:45:6b:00:75:
3e:fb:cb:53:87:1d:52:46:40:ae:63:0b:81:ff:5c:
70:20:64:d2:26:5d:02:68:cc:1a:9d:95:53:c6:9d:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:5B:D3:11:2B:A0:AB:B2:5D:7F:60:BB:DD:CC:2A:F1:88:59:F4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EDC68834C911F18A36AC8CC6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.142.0/23
IPv6:
2001:df6:de40::/48
Signature Algorithm: sha256WithRSAEncryption
13:d0:09:f5:25:9a:41:14:70:b6:23:83:fa:f1:3d:cd:80:33:
1b:07:35:78:73:35:5a:9e:38:08:32:f1:c9:23:fb:45:79:ee:
0b:e0:d7:9f:6d:16:b8:7a:a5:71:6f:6b:13:9d:71:9b:3e:02:
9a:3e:ca:62:31:6b:35:69:f8:7b:f6:2d:ba:9e:55:bb:95:3b:
ea:68:12:9d:eb:68:d7:39:c4:ed:07:15:7f:72:48:7d:b8:52:
2b:e7:f5:33:00:34:bc:6d:2a:b1:01:89:d1:00:9a:4d:0e:cf:
66:0a:73:11:52:c4:c4:00:01:ea:a0:50:f4:58:bb:4b:34:cb:
73:28:87:c3:44:16:2b:36:4a:ee:9c:02:a8:ea:22:28:71:a5:
0e:46:d6:ea:d9:74:3c:83:9b:a7:d9:ac:63:ca:9f:77:fc:17:
6f:5e:8f:b8:e7:d0:36:88:69:c1:99:27:98:7a:7c:41:75:ee:
0f:56:81:85:f3:0b:6c:a7:eb:ca:c2:6a:d9:3a:c9:a8:0b:ad:
69:55:f2:b1:c8:41:0e:b0:62:69:24:d5:9f:c2:4e:54:aa:76:
b7:5e:59:58:05:aa:89:87:31:95:eb:f5:1a:c1:0d:45:fe:8f:
7c:1a:b0:8d:44:ef:b1:1a:ce:d0:b4:19:83:9d:7b:af:56:e7:
d1:b7:bd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:43 2026 by rpki-client