
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa
File: E66D1ADAC9AB11EF94E78272C4F9AE02.roa (raw, json)
Hash identifier: 1SS16YMwLcF3IhUuEFPSDNkmntfWHU43LkuWGhOLSvc=
Subject key identifier: 20:4B:BB:AF:9A:42:90:83:C3:DD:0D:B1:E1:13:64:E0:7B:A6:5D:D7
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2EC0
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa
Signing time: Sun 31 May 2026 16:20:28 +0000
ROA not before: Sun 31 May 2026 16:20:28 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138751
IP address blocks: 161.248.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11968 (0x2ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:20:28 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5fcc-d593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:73:a5:a7:e6:0a:8d:e6:89:f5:b3:7c:5f:
64:53:d1:36:d0:d5:1f:55:b9:93:b9:06:72:d6:8c:
1d:2c:24:46:b1:97:5b:7e:fb:56:5e:40:43:ba:ff:
d6:dc:bd:13:d2:d5:98:67:56:d3:06:29:0b:36:f8:
ac:e1:fb:5a:3b:13:80:e0:4f:ad:47:4f:28:e6:b8:
cd:4e:9f:b8:a3:fd:c6:21:bc:11:f9:ce:73:b1:47:
51:b3:e7:a3:d6:d1:13:72:45:25:50:b5:3e:c2:2b:
0e:3b:40:64:0d:79:97:5c:3c:58:03:40:b9:2c:aa:
69:c0:0f:42:96:26:02:f5:31:00:98:95:d8:f2:4c:
15:0e:e2:d4:9d:a9:48:29:b5:a1:1a:49:b7:42:9b:
69:3a:0f:0d:39:01:ce:8b:32:59:81:a8:47:c6:98:
3c:f8:47:38:ab:62:cd:1f:23:b6:18:0e:14:6f:40:
04:af:70:b4:3b:73:c1:62:a1:06:ec:66:63:5e:1b:
76:be:7c:77:99:0b:45:df:1d:25:97:10:4c:53:77:
2d:6c:e7:aa:cd:e9:f2:4f:88:29:e6:50:4a:b5:f2:
d6:dc:2c:f3:8c:50:b6:64:23:8c:e3:0a:30:80:70:
36:67:11:eb:8c:bb:7c:ff:36:af:bc:e2:22:e3:62:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4B:BB:AF:9A:42:90:83:C3:DD:0D:B1:E1:13:64:E0:7B:A6:5D:D7
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.68.0/23
Signature Algorithm: sha256WithRSAEncryption
55:eb:0a:ae:65:cb:54:82:ca:5d:de:d7:54:ad:d6:c7:27:e9:
1a:0c:c3:f3:61:11:6f:55:2d:58:d3:55:fd:06:6b:3a:e8:fc:
95:b7:66:68:e9:46:52:5b:a8:fa:a7:13:8c:b4:70:80:b0:4d:
82:c0:73:41:bf:ca:50:1a:f5:48:60:08:4e:83:6b:f2:1e:1a:
8a:32:0b:f1:95:c4:db:48:99:1b:5b:1e:4c:83:45:1c:e5:e8:
59:5f:a5:f4:a2:95:e1:e8:2e:3a:c0:63:85:6a:f2:84:1b:96:
a6:9e:41:e4:4e:22:be:2f:0c:a5:19:72:3a:f0:0b:aa:e3:f2:
2c:05:9f:a2:a7:6b:62:23:37:da:f0:c7:83:00:be:96:ea:db:
28:83:3b:5d:9c:17:c6:35:15:77:0e:cf:4e:94:fc:b0:44:22:
3e:03:09:4a:ce:24:44:ff:fd:21:cd:8b:61:bc:d1:e0:1d:04:
28:1f:9f:bd:fb:2b:b3:54:c1:63:c5:ca:aa:77:92:1c:75:25:
e6:08:53:c7:21:4e:bc:55:e6:ad:1d:2f:07:fb:4a:fd:11:be:
e0:3f:a3:e9:2f:7b:c9:1a:97:8c:e3:aa:0f:fa:64:89:a1:ba:
75:91:9b:ce:f6:43:58:25:4b:39:f5:ca:42:95:64:d7:88:0d:
a0:4d:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:50 2026 by rpki-client