
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2A716B5C43C511F1B39EF51B9F833773.roa
File: 2A716B5C43C511F1B39EF51B9F833773.roa (raw, json)
Hash identifier: enbDQ2e914aZq9xORqRrQbImLs/IC4cxfVde83Nab1s=
Subject key identifier: EC:BE:AC:3B:D8:91:98:31:21:3A:FA:0B:F8:EC:73:B1:C9:17:DD:41
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2E7C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2A716B5C43C511F1B39EF51B9F833773.roa
Signing time: Sun 31 May 2026 16:18:17 +0000
ROA not before: Sun 31 May 2026 16:18:17 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133661
IP address blocks: 162.4.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11900 (0x2e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:18:17 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5f49-85a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:c6:f5:72:9f:84:39:c1:65:18:4c:99:51:
c8:53:7f:90:68:24:96:1b:61:8d:d7:f7:1b:af:63:
5a:49:78:68:c8:d4:33:5e:2f:8d:cd:77:bf:b0:36:
f6:33:6d:04:7b:f0:a2:4e:71:9e:03:42:a9:79:fc:
34:36:99:06:f0:7c:b1:e5:94:69:9c:11:c0:c9:53:
d4:42:1d:d5:38:23:66:c2:e1:85:65:ec:1c:06:97:
60:b9:f2:4a:c9:6f:1f:90:d1:7e:6e:0d:f8:5f:e8:
f5:9a:6c:bd:39:91:ee:00:43:bb:c7:c3:5f:4a:f3:
eb:94:de:54:92:b5:69:62:e3:cc:fb:61:f4:b8:13:
f9:ae:19:ea:08:be:17:5f:fd:cc:a0:66:fb:7a:31:
55:dc:de:ba:5d:79:96:68:ca:7a:e6:bd:0e:33:26:
a4:9c:14:41:7b:7b:1e:73:e9:1f:f9:3d:90:c6:ff:
28:f4:c6:2c:cf:90:22:6b:a4:2e:07:bb:b1:23:8c:
9c:a6:fc:5b:fe:ce:a9:e8:5a:1e:66:f8:9b:e0:d8:
42:86:49:14:2a:8f:52:a3:0e:73:32:68:51:9a:18:
69:0d:52:63:cd:09:d0:c9:ff:1d:4e:ed:03:39:e4:
f8:29:b7:cd:89:05:c3:cd:59:15:3e:bf:9b:6c:0a:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BE:AC:3B:D8:91:98:31:21:3A:FA:0B:F8:EC:73:B1:C9:17:DD:41
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2A716B5C43C511F1B39EF51B9F833773.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.12.0/23
Signature Algorithm: sha256WithRSAEncryption
68:19:bf:84:24:b4:bb:fa:ba:4a:d2:55:4b:60:73:47:12:2e:
88:9e:f4:14:30:95:ad:88:51:8a:b9:19:c9:a0:16:f4:a0:36:
64:80:30:ed:65:70:e6:8f:e8:a6:de:5e:80:9b:d4:28:c3:96:
91:43:a2:35:c4:04:71:d1:9b:ad:64:68:c8:69:92:45:38:39:
31:d8:43:5f:c0:01:9d:ac:84:83:f7:29:0a:35:da:2b:72:12:
f0:7f:8d:09:46:2a:cc:9b:6b:52:04:ec:48:7c:10:75:0e:bd:
d5:c8:7e:9e:b3:38:fc:62:db:75:59:7a:a0:3f:ca:48:fb:ac:
99:a4:dd:5b:c5:bf:fb:f0:89:22:ad:bd:67:5f:43:63:41:47:
aa:28:21:14:97:db:c1:c7:4a:2f:dd:78:28:1d:8e:52:a3:ae:
07:1b:9e:bc:da:4e:05:61:3d:5c:f0:b1:ba:af:bb:8d:07:63:
b9:27:ef:fb:42:94:4f:04:e4:43:e1:bf:8c:89:d2:dc:3c:5f:
02:49:e2:0e:ab:7a:0f:2e:c8:51:83:7c:ad:01:cb:58:0b:ed:
9c:ac:5e:be:35:14:20:cd:9e:58:a3:14:10:83:7e:96:4f:36:
9a:6c:b9:5d:e6:53:4f:d8:95:eb:fa:12:f5:7a:df:27:10:47:
78:9b:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:27 2026 by rpki-client