
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16353960DFCB11EB8FA1794CC4F9AE02.roa
File: 16353960DFCB11EB8FA1794CC4F9AE02.roa (raw, json)
Hash identifier: voh//HLNHqeND1nS29kLNxb32/2p40zThwep5q9QeeY=
Subject key identifier: F9:6C:BE:66:15:DD:34:8A:DB:50:B8:23:37:8D:45:15:A7:DC:6C:31
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E33C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16353960DFCB11EB8FA1794CC4F9AE02.roa
Signing time: Sun 31 May 2026 16:43:50 +0000
ROA not before: Sun 31 May 2026 16:43:50 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 134342
IP address blocks: 45.126.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58172 (0xe33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:43:50 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6546-5d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:2b:4a:05:c3:07:4f:d4:dc:a5:52:5f:9c:
cf:a7:8b:58:bf:94:52:e6:22:86:d2:9c:87:dd:80:
1a:44:42:15:a6:7e:02:cd:4b:ab:b7:33:e0:a2:a7:
58:fc:0f:80:03:1d:80:1c:e8:46:c9:fe:2c:27:9a:
26:d4:dd:2b:9d:d5:3b:63:0e:2d:84:60:14:77:56:
91:38:4d:3c:29:23:c1:a2:bd:f6:98:95:41:a8:49:
c2:9e:66:73:f3:e3:b6:db:d8:a9:ad:d9:6f:1d:74:
03:61:af:01:8a:b5:13:05:6b:61:18:13:35:5a:2d:
a9:e8:c9:97:3a:cf:b6:d7:93:19:19:d0:a0:7b:19:
a6:93:05:59:77:dd:e7:ce:de:c9:ea:a1:f0:4b:bf:
18:bc:0d:3d:2c:69:a9:4a:ff:2d:38:9f:43:7e:34:
3d:89:21:7b:b3:9a:1b:f8:a4:1d:5d:5d:00:40:27:
2d:72:f5:c8:d6:39:4e:a2:b4:8d:91:55:43:3b:73:
6c:60:3f:0f:4b:9e:76:2c:8f:fe:51:0b:15:82:10:
c8:4b:ed:e2:da:f6:9c:d6:e0:4c:98:1a:ca:5b:a3:
75:1e:ea:83:79:08:f2:41:1c:e0:a4:cf:e2:88:38:
1a:93:d0:9b:5d:ab:22:89:97:f6:00:89:cf:f5:86:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6C:BE:66:15:DD:34:8A:DB:50:B8:23:37:8D:45:15:A7:DC:6C:31
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16353960DFCB11EB8FA1794CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.8.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:4c:22:69:c0:5a:13:88:d6:29:f9:22:0f:1d:be:b8:53:cb:
73:17:df:36:88:82:b5:55:ad:c5:a1:61:e8:9a:68:ac:ef:e9:
61:13:49:4e:85:1a:aa:19:88:8a:db:32:67:e2:82:71:47:31:
b5:03:0b:05:68:b5:56:a8:6c:e4:3a:84:31:03:0a:bd:3f:d5:
14:b2:95:40:a3:17:bb:60:f4:39:2a:a5:a2:3b:95:c3:c8:87:
0e:4c:83:80:02:3d:fc:bd:d2:89:c7:25:a4:76:9e:ce:40:11:
5b:92:60:0c:2f:2c:e7:5e:0b:cc:d5:0a:3a:57:05:dc:0b:5b:
98:bb:60:a3:b8:0e:1f:cd:81:f5:df:1a:d2:0d:ab:a1:e2:06:
03:b0:75:0c:42:80:b2:ce:98:80:72:20:dc:4f:2b:47:3b:d9:
d3:46:c6:a5:f5:52:14:c9:e8:b1:89:99:db:ac:20:64:bf:a8:
17:a6:38:1b:31:9f:45:5f:5f:26:92:0c:88:0d:0f:67:5c:fa:
30:73:46:cc:f9:6b:e1:e7:cd:fa:c8:1f:33:63:e6:14:77:93:
ee:73:67:3b:8b:17:a4:d5:f4:42:19:6d:e8:ad:85:aa:6f:bb:
76:c4:c4:05:2c:2e:b0:32:1b:0b:27:a5:68:bc:1b:73:28:c7:
71:7f:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:27 2026 by rpki-client