
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E079CA90146211F0B2EE292EC4F9AE02.roa
File: E079CA90146211F0B2EE292EC4F9AE02.roa (raw, json)
Hash identifier: zTN+xVh/2uU51hXGTwzJIlj1rgTmb5dP6Y1E2siFFY4=
Subject key identifier: 34:76:CC:58:9E:64:F7:E0:A0:88:06:4A:C5:69:33:A8:0C:1E:93:9C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D859
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E079CA90146211F0B2EE292EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:54:28 +0000
ROA not before: Thu 08 May 2025 16:29:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153704
IP address blocks: 163.223.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55385 (0xd859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:29:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c3a4-8896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:83:b4:cf:8a:cd:f1:d2:a7:c8:71:aa:75:
b5:2b:7f:ae:77:f9:18:af:56:e3:72:d2:9f:64:e2:
97:a6:28:36:db:28:41:4e:84:37:e1:45:dc:dc:df:
01:17:c3:15:2f:06:f6:89:76:22:ca:5b:e8:3c:fa:
98:da:68:64:01:00:41:dd:3a:42:4b:22:45:d6:12:
8a:67:4e:5f:99:ac:dc:9f:e3:06:c8:b6:a2:8d:47:
77:d4:6a:ab:7a:20:d9:5f:60:e3:b6:f9:0b:a6:a4:
21:2b:7f:37:13:f1:5f:d1:a7:b6:39:86:bb:57:e8:
02:38:e9:70:c0:62:7a:ba:3c:ea:8b:b1:fc:8d:ab:
04:75:0a:9c:6b:c7:ae:58:32:92:2b:6f:0d:28:23:
aa:d1:d5:3e:da:ea:ce:4e:57:8a:bb:8f:f5:85:f7:
5a:97:74:99:a8:f2:9a:78:e9:99:41:96:b2:99:8c:
8d:28:a7:84:e4:8a:b7:cd:2f:16:7d:4e:38:f1:0e:
0e:2f:bf:ee:07:11:e7:47:9a:90:b7:84:5f:8b:72:
9f:ab:fb:9e:5b:73:fc:b7:06:bf:36:86:bd:e3:07:
7f:57:d2:3d:63:04:c6:94:ce:cb:af:93:59:37:e6:
3d:d6:2b:fc:84:fd:81:bf:22:4c:c6:a5:c5:0c:de:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:76:CC:58:9E:64:F7:E0:A0:88:06:4A:C5:69:33:A8:0C:1E:93:9C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E079CA90146211F0B2EE292EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.128.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:66:2d:ab:01:4d:9a:0e:f6:d7:e1:5a:90:68:bc:68:15:59:
1b:be:0d:10:c4:bc:6d:28:45:a0:fb:fe:0f:a5:c1:61:67:8b:
20:b1:a7:43:5d:75:1a:e6:5b:62:47:c6:69:40:e8:bb:3c:e5:
cf:c7:02:d8:6b:53:61:83:eb:85:e4:14:91:b6:de:33:cc:e5:
fb:ae:ef:e8:7f:95:cf:ac:92:c8:10:32:2c:e9:49:fc:40:c5:
83:47:46:39:74:43:50:14:d7:ad:c9:70:32:e9:23:f8:36:16:
72:d2:d7:52:a3:f0:08:2f:6d:84:b9:b2:c1:aa:17:e7:ab:17:
f5:cf:cb:02:90:96:40:87:02:b1:94:af:4b:46:7a:9d:dd:77:
b0:29:45:2a:96:ed:c6:b6:61:ad:62:3f:1c:ea:7c:22:5f:a1:
f7:d2:c8:cb:38:47:f3:ce:8e:cf:66:9c:bb:fc:ce:46:9c:e2:
20:23:11:b9:d0:af:17:66:96:b3:3f:9f:d4:37:24:c4:70:d7:
f1:1b:57:e5:8a:ce:b1:e9:b9:51:3a:f8:55:44:92:55:c8:aa:
04:9c:1f:69:4e:61:f1:36:bf:72:5e:fc:94:5f:3e:4a:60:53:
05:37:a4:98:2c:40:b1:10:4c:71:a4:78:f5:54:2f:4a:97:0a:
71:33:2f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:06 2026 by rpki-client