
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BD213423CB011F1A12B5F9AAE833773.roa
File: 1BD213423CB011F1A12B5F9AAE833773.roa (raw, json)
Hash identifier: mZbl34/ByA5pFNbz0iv6gE+Ja83Zj3HmXCgWs8GtqsE=
Subject key identifier: A8:59:5F:FE:57:A4:E8:FC:71:5C:78:BB:07:AB:11:F9:F4:E5:97:F6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EAFD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BD213423CB011F1A12B5F9AAE833773.roa
Signing time: Sun 31 May 2026 17:48:33 +0000
ROA not before: Sun 31 May 2026 17:48:33 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 154623
IP address blocks: 163.128.232.0/23 maxlen: 24
2402:57e0::/32 maxlen: 32
2402:57e0::/48 maxlen: 48
2402:57e0:1::/48 maxlen: 48
2402:57e0:2::/48 maxlen: 48
2402:57e0:3::/48 maxlen: 48
2402:57e0:4::/48 maxlen: 48
2402:57e0:5::/48 maxlen: 48
2402:57e0:6::/48 maxlen: 48
2402:57e0:7::/48 maxlen: 48
2402:57e0:8::/48 maxlen: 48
2402:57e0:9::/48 maxlen: 48
2402:57e0:a::/48 maxlen: 48
2402:57e0:b::/48 maxlen: 48
2402:57e0:c::/48 maxlen: 48
2402:57e0:d::/48 maxlen: 48
2402:57e0:e::/48 maxlen: 48
2402:57e0:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60157 (0xeafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:48:33 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7471-6be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:6c:21:ea:c5:27:03:b3:9b:53:8d:56:f9:
c8:19:aa:01:67:33:ca:70:6f:cd:a2:56:64:e7:4f:
35:26:8b:86:ef:78:af:e8:d0:1c:a5:99:17:d4:ca:
af:14:d2:26:6a:64:2a:e9:0f:80:8a:28:fd:99:33:
f8:08:c1:56:1c:eb:0f:b7:ae:87:59:7e:1b:c2:ed:
15:c5:ab:3d:bc:ed:c9:3b:c9:d6:21:ae:ac:d6:3f:
30:de:d2:1c:e0:fc:97:8b:00:69:7e:3a:63:cf:e2:
21:a7:20:ed:1f:a2:38:3b:19:02:08:83:78:34:02:
33:4f:d0:25:e8:79:bc:57:3f:58:ce:b4:45:92:04:
71:a9:a7:ac:23:24:ed:4a:25:46:2e:06:0c:95:eb:
04:ae:79:d4:f9:44:ea:3d:f5:a5:d9:22:de:9e:2b:
63:b6:94:e4:66:c9:f6:c1:8f:57:ad:c9:f0:39:a0:
1e:48:07:57:15:cb:3e:e6:06:50:ca:6b:c9:ec:96:
c1:53:f2:42:9f:d5:db:94:da:cf:e3:72:4d:a0:5f:
30:53:b9:48:c3:af:ef:1e:61:55:26:95:b5:b5:51:
e2:7e:1a:12:8b:ba:3a:80:b3:08:b4:69:02:c5:22:
37:5d:e3:4a:35:fe:7e:b2:86:c7:79:a8:dd:b8:64:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:59:5F:FE:57:A4:E8:FC:71:5C:78:BB:07:AB:11:F9:F4:E5:97:F6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BD213423CB011F1A12B5F9AAE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.232.0/23
IPv6:
2402:57e0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:73:c1:b5:9d:d8:6a:07:21:91:eb:56:6f:73:99:92:16:24:
33:c7:1a:df:aa:a6:73:fd:60:30:eb:fe:a0:09:ea:5d:93:2b:
5f:e2:50:bd:2d:ba:0e:62:31:66:11:1f:a1:a2:bb:da:00:85:
54:a8:a9:32:70:dd:73:3b:84:79:41:c0:5f:7b:6c:f9:5f:e7:
b6:e9:b8:ac:1f:eb:cc:10:a3:fd:fb:62:63:d1:4a:b2:6a:a5:
bd:85:55:0e:45:ff:5a:f5:36:f8:6a:96:13:34:bb:ce:4d:19:
d7:8b:0c:ec:a4:9e:69:26:00:ff:54:43:2b:63:ff:58:31:1a:
d7:e9:37:e1:81:86:ac:87:22:c5:dd:f1:bf:2f:a0:66:e5:bf:
28:df:51:53:7a:03:c1:d7:e7:a5:e8:fe:56:d5:3f:50:70:cc:
8f:b2:21:77:63:a2:b9:40:10:3b:a5:b0:6d:89:24:cd:78:c9:
82:09:39:9a:f4:f6:99:d5:a1:cd:b4:e2:e9:52:c9:00:ba:b5:
32:a8:b8:72:dd:cb:16:88:a3:61:22:49:a5:c5:55:88:f4:47:
40:7f:f8:01:d2:69:2e:0a:66:56:f5:6c:1a:9a:54:ef:f9:f6:
68:9a:36:50:37:9b:6f:7e:f1:01:4c:20:7c:ce:d6:f4:3c:05:
4e:43:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:28 2026 by rpki-client