
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/937BDE78096C11F0A606D725C4F9AE02.roa
File: 937BDE78096C11F0A606D725C4F9AE02.roa (raw, json)
Hash identifier: ffG8tDo0BPl6xrz7FlDt076zr8aE95GFQgsanw3yhCk=
Subject key identifier: 14:0D:01:4A:68:66:4E:D7:45:82:9A:C0:02:56:16:AF:01:28:5C:9A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D38D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/937BDE78096C11F0A606D725C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:26:42 +0000
ROA not before: Thu 08 May 2025 16:06:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136347
IP address blocks: 163.223.66.0/23 maxlen: 24
2001:df5:35c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54157 (0xd38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:06:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bd22-f76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:a3:d3:7a:83:e7:62:2a:3f:df:6d:ca:56:
f8:dc:10:05:4b:13:bc:8f:c9:61:48:c5:0d:f3:c0:
76:3c:01:81:5e:14:aa:c7:12:05:a9:09:76:e0:c2:
c1:b5:be:13:03:76:80:c4:b6:d5:8b:15:5b:f3:44:
29:27:04:0e:18:b0:09:83:ad:c3:94:b2:fb:13:a3:
e0:8b:a9:33:3e:b4:0f:44:16:2b:3b:ca:42:a9:dc:
45:57:56:b4:41:5e:1e:70:5f:d5:7d:33:26:24:ab:
dd:b1:c3:69:6a:bf:5b:09:39:62:a1:8c:c8:4c:e7:
ad:22:7d:e7:c2:2a:73:0c:a8:09:22:1b:d3:79:80:
00:0f:a3:77:d3:4f:94:3a:a3:1e:76:16:5f:03:cb:
4a:f1:ab:c6:bf:a9:4e:6d:57:dc:1b:3d:7f:33:67:
70:66:8f:26:55:85:be:c2:7c:07:51:07:d7:a5:68:
31:a3:2a:61:69:10:9e:85:56:37:08:6e:8c:6e:d1:
7e:fd:c2:dd:9f:ee:d6:97:16:88:6c:2f:44:c0:5e:
4d:23:04:8a:4d:cb:7a:b4:df:08:dc:2e:24:63:2c:
40:8a:48:93:f3:e5:ce:19:f1:27:12:f8:57:f2:78:
b0:e0:8f:67:f3:98:6b:bb:0f:0c:28:87:44:07:79:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0D:01:4A:68:66:4E:D7:45:82:9A:C0:02:56:16:AF:01:28:5C:9A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/937BDE78096C11F0A606D725C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.66.0/23
IPv6:
2001:df5:35c0::/48
Signature Algorithm: sha256WithRSAEncryption
9f:a2:b9:9b:77:e0:17:7d:ba:1a:f1:6d:98:a2:70:10:8d:c6:
de:35:aa:ae:c9:27:33:6d:cb:8a:a3:24:a5:1d:4e:d8:3d:e3:
08:08:26:e8:e0:40:0a:25:4b:d3:1e:c7:36:d3:8c:46:4e:0e:
19:d1:5d:4c:e4:18:11:28:74:73:b9:a3:63:ae:47:67:40:2b:
a2:0f:9e:ba:2f:3c:70:ee:fb:d5:3f:a8:54:25:39:98:2e:68:
66:e2:01:11:e6:13:e4:2a:52:b7:59:f9:32:38:8e:0c:82:01:
db:c2:24:fd:2e:8f:0a:61:f7:06:47:e8:c8:11:86:60:13:14:
85:8d:43:2b:9c:a0:6b:90:8b:73:0c:5d:d7:5a:c6:0e:4b:7d:
3d:a9:19:09:83:02:86:69:36:d9:a1:af:02:3c:ad:30:47:46:
4f:6c:0c:ba:f0:46:d7:9e:d1:5b:7e:9e:58:e8:e5:d0:88:07:
35:32:8c:6e:b1:68:e0:8e:ae:ae:38:97:c6:d8:be:6e:b8:ca:
be:79:61:4b:67:3d:a5:b2:39:03:52:40:e0:38:60:4f:fb:46:
91:91:a0:98:4e:20:f3:ee:b1:e8:7e:e8:7d:ef:48:fc:51:78:
d8:56:c1:50:7e:05:bc:dd:74:f9:b1:ef:30:6f:03:d0:d5:86:
4f:28:52:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:20 2026 by rpki-client