
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF04FB60B03011F19902D3523B11F970.roa
File: DF04FB60B03011F19902D3523B11F970.roa (raw, json)
Hash identifier: 3zrT9OUbIDfvb1rDC8ajZnoQgek60SJH/PfBHExyURs=
Subject key identifier: 82:B1:71:8A:8E:BF:81:D8:2B:73:BB:33:2D:31:CA:B8:9D:A7:38:58
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FC77
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF04FB60B03011F19902D3523B11F970.roa
Signing time: Mon 14 Sep 2026 11:45:33 +0000
ROA not before: Mon 14 Sep 2026 11:45:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154893
IP address blocks: 163.52.87.0/24 maxlen: 24
2402:74a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64631 (0xfc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 14 11:45:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa7de5c-6784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:77:44:2e:7b:d8:b7:d0:7f:54:c9:a0:ff:38:
87:cf:87:2f:6a:1c:f1:f4:93:1b:51:61:67:1a:a9:
1f:4c:fe:63:c4:43:8a:24:0a:0d:ac:e5:9c:16:39:
20:97:c9:55:a1:26:33:90:ae:a9:89:04:69:5f:f0:
0f:6a:e4:28:5f:e1:a2:35:15:a3:06:2b:e4:57:5b:
84:9e:93:70:2d:a2:41:97:7f:92:64:42:fa:79:39:
38:7c:bb:63:ff:65:cd:de:49:f6:eb:dc:e4:80:85:
55:03:c2:cc:34:9d:18:81:9a:63:8b:20:b2:f1:ee:
83:35:a1:ab:93:15:df:51:c0:1a:77:14:a4:41:7f:
be:83:52:75:c9:2f:7e:19:13:27:7b:99:d9:c5:3d:
c7:6c:fb:8e:e8:f4:c1:8f:dc:c1:e5:3c:ab:9c:16:
6e:1a:8d:43:2e:85:95:16:62:6c:0a:a4:88:1d:96:
77:fa:d2:31:b1:61:3a:2b:be:db:3b:9f:c4:c3:0e:
27:75:8d:43:f6:0e:41:96:cf:6b:e0:f0:d9:37:bf:
99:fe:97:6c:e4:a3:98:37:ca:98:4a:26:81:2f:8a:
2d:b4:da:32:46:a9:b6:e2:35:3d:b5:c4:4c:b2:b5:
de:1f:a7:a4:a1:45:a7:8a:ec:b4:38:e4:47:3d:fb:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B1:71:8A:8E:BF:81:D8:2B:73:BB:33:2D:31:CA:B8:9D:A7:38:58
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF04FB60B03011F19902D3523B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.87.0/24
IPv6:
2402:74a0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:65:a8:2a:ea:cf:14:42:6c:35:b6:c8:d4:22:a5:40:dd:7b:
8f:2d:95:db:7b:d2:d7:5a:f7:d4:97:c6:59:3f:e0:f5:6a:b5:
eb:9f:18:9e:ba:03:6f:b1:30:2b:84:00:55:0b:d3:52:b3:06:
c3:d6:9f:13:81:90:3e:af:fa:bd:de:7e:c8:9a:68:ac:23:59:
47:23:50:a6:b8:d2:00:8e:8e:f6:c3:05:83:60:c6:74:2c:41:
05:69:b3:de:12:e2:e0:86:ea:e0:43:c0:68:1b:ff:1d:eb:43:
af:f8:94:46:45:f1:7c:62:81:12:3b:4d:e2:79:99:04:62:8f:
60:be:15:7f:cf:bf:09:7b:95:a9:6e:23:3d:0f:4f:18:33:84:
c5:65:d7:9d:04:fb:c6:4b:98:a6:d2:c5:46:b2:42:c6:26:3e:
1b:b0:63:c1:28:34:38:e8:5f:94:6d:00:0b:c9:6c:95:41:a9:
b2:ce:93:69:15:0d:8f:34:8a:47:b0:4a:06:96:af:15:91:2e:
95:98:6b:29:94:71:ce:ca:55:ca:ac:a2:16:41:fc:da:d3:31:
e3:c0:dc:0e:96:74:74:f9:51:a3:3f:4a:06:5c:ac:68:3f:e1:
22:d4:92:c0:d4:c7:a1:55:1f:77:48:f2:c4:59:3f:a7:72:fd:
0f:1d:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:49:26 2026 by rpki-client