
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0054432693FA11EEACB4CA40C4F9AE02.roa
File: 0054432693FA11EEACB4CA40C4F9AE02.roa (raw, json)
Hash identifier: 85x7ZVZ8mJf+7u/Mu+iPAb/oeTBHm0m4ACyw4ab8lwM=
Subject key identifier: F7:E4:4D:F9:E2:BA:65:71:B7:00:36:39:84:71:67:7D:BF:67:49:E5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F615
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0054432693FA11EEACB4CA40C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:38:54 +0000
ROA not before: Mon 06 Jul 2026 17:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151709
IP address blocks: 115.187.24.0/23 maxlen: 24
2001:df3:2340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62997 (0xf615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be82e-2c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:01:33:48:09:bf:d7:b4:9f:49:f4:c3:b7:
74:c4:71:49:a4:8e:9c:d9:5c:ae:c0:ea:52:ac:cc:
98:6a:11:2f:90:49:cd:49:20:d5:54:bd:7e:29:95:
63:98:d8:17:cb:fa:77:3f:32:1f:4c:26:83:6e:b7:
73:b5:16:72:4c:af:6d:eb:bd:d9:0f:b7:ce:09:f9:
e1:d5:fd:ff:c1:f4:af:f1:42:98:ff:b0:15:0a:a4:
ed:42:fa:77:19:a6:f4:f9:29:76:25:83:e8:4f:69:
07:10:05:49:63:1d:17:7d:24:c9:6e:72:db:de:3f:
21:66:7a:9a:b0:02:4d:dc:60:e3:aa:e8:f9:2b:31:
bf:9d:40:56:f8:f4:a5:2e:53:fa:e8:a4:e3:cb:83:
3d:92:aa:42:f8:63:7a:01:08:f0:63:13:27:70:8c:
eb:52:9e:ba:6d:b7:24:0a:16:8d:dc:28:a0:31:37:
27:4e:b2:55:2a:d5:b2:d9:23:e8:35:f5:24:af:f7:
8b:7e:82:27:8f:16:f5:32:23:bc:58:03:0a:a5:ac:
bd:08:9d:d5:78:d3:4f:6a:e4:d8:d9:14:1b:2b:cd:
89:51:40:e6:96:27:bd:3f:86:18:cb:46:3b:14:ad:
95:60:89:b1:65:57:08:5e:7f:73:33:75:84:e5:49:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E4:4D:F9:E2:BA:65:71:B7:00:36:39:84:71:67:7D:BF:67:49:E5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0054432693FA11EEACB4CA40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
115.187.24.0/23
IPv6:
2001:df3:2340::/48
Signature Algorithm: sha256WithRSAEncryption
35:3a:eb:ad:15:f5:52:f1:18:0b:b1:d7:04:54:d0:d3:e6:0b:
f7:07:95:2f:86:2a:c7:80:61:27:5a:66:94:26:bc:c9:4e:9e:
ad:64:08:f8:a7:29:c5:5d:4d:0f:44:a6:f9:38:41:ba:46:68:
d7:bc:ca:75:e3:4f:a7:0f:7f:49:41:6b:23:85:47:1b:61:84:
0c:67:30:d7:e5:2c:49:b8:2c:9b:03:ab:a5:f2:b4:eb:63:2b:
38:c8:96:22:31:1d:1d:fd:1b:1f:6b:69:d5:17:1d:3f:8c:69:
57:a8:83:bb:1f:cc:a8:c6:91:7e:bd:1b:da:e7:5c:95:fd:dd:
2c:f1:d0:47:40:6e:f9:ab:5d:4e:9d:90:b0:f3:76:3f:6e:2a:
80:52:d3:4f:fd:cf:d1:52:73:9e:e8:ae:4f:f8:73:72:d3:d3:
2e:40:9f:2c:4e:5c:64:28:60:10:94:15:f6:26:a1:cb:22:9c:
22:c3:e5:82:60:53:1f:f2:a2:ea:8a:06:a7:ab:6d:90:1c:18:
ea:69:b7:dd:44:df:15:ff:c3:da:b4:e5:b7:a0:de:3c:34:9c:
fe:97:1b:a1:ec:b8:96:b1:ae:d7:86:3f:b3:46:0a:97:50:11:
53:9f:12:6b:4d:7a:e0:2a:a4:d7:66:bd:f6:37:f6:c1:29:f4:
9f:5b:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:41 2026 by rpki-client