
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1ED07E4E2CE311F1AB1F7F2EA0833773.roa
File: 1ED07E4E2CE311F1AB1F7F2EA0833773.roa (raw, json)
Hash identifier: on2QBOd43JomNSJNJhi8+Hrk73LY6sfoknpVDnQYCqo=
Subject key identifier: D5:3B:33:70:DD:87:62:05:68:5E:FD:28:E6:47:75:F4:78:F2:36:51
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EFAA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1ED07E4E2CE311F1AB1F7F2EA0833773.roa
Signing time: Mon 06 Jul 2026 16:44:42 +0000
ROA not before: Mon 06 Jul 2026 16:44:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135073
IP address blocks: 163.128.110.0/23 maxlen: 23
163.128.110.0/24 maxlen: 24
163.128.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61354 (0xefaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:44:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdb7a-4bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:f3:0e:13:19:11:cc:5c:5c:35:a5:54:5e:
1d:ea:da:45:63:e4:98:0c:2a:1a:3f:f6:53:90:3a:
d7:09:d8:cd:62:37:7a:30:04:73:55:78:b5:7a:3c:
75:83:6f:cd:da:ff:82:1f:7d:48:d2:51:5d:fd:56:
c3:3b:3f:64:3f:fd:a8:f9:e8:6a:78:86:7e:30:b5:
16:52:41:dc:06:47:6c:29:ed:5a:2f:a0:11:83:a8:
be:8e:fd:c4:65:88:32:0a:ed:37:a4:fa:3f:ca:6b:
b4:77:15:1c:80:33:b2:c9:49:4a:c6:06:27:d9:a3:
3b:78:59:61:7c:b2:b2:4c:c1:6f:b3:51:b8:c5:21:
cf:9a:92:4b:fd:13:ea:71:a1:55:d4:51:68:58:59:
19:9f:49:70:7a:d3:48:44:a7:71:e3:5d:41:4e:0f:
f1:9b:e8:25:44:33:3e:6c:4d:c6:e7:95:03:b3:78:
62:38:18:ff:02:27:2c:42:ed:d6:40:a8:07:e5:63:
b5:0f:a0:55:79:24:32:f4:40:9b:78:96:ff:d9:45:
ad:14:d1:ec:b4:38:70:ed:a0:ca:0a:75:1c:00:c2:
d9:8f:71:3c:c8:4e:c7:3b:04:8c:62:2a:95:7c:c4:
77:63:d0:6b:ef:04:a9:89:3a:b9:35:a8:83:f3:cc:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:33:70:DD:87:62:05:68:5E:FD:28:E6:47:75:F4:78:F2:36:51
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1ED07E4E2CE311F1AB1F7F2EA0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.110.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:e7:48:98:72:5d:e9:db:d0:99:ee:17:8a:14:bf:e3:86:13:
d8:e7:f4:88:01:b6:37:96:9d:c8:3a:a2:3c:43:52:db:c5:2b:
22:00:19:1c:4b:31:26:74:fb:06:c2:64:db:b2:bd:84:74:39:
27:86:a1:1a:ea:08:85:72:e1:1b:e5:f7:fb:99:ff:55:14:26:
6e:25:9f:ba:8f:75:2e:f9:22:87:40:66:17:d7:1b:1d:28:51:
f0:13:5b:65:7a:00:47:6f:2b:25:56:e2:f4:6e:6f:2c:7e:78:
12:f5:d5:7a:08:af:0b:9e:e4:ee:2f:e7:4c:c7:e4:14:6c:fa:
51:14:2d:ce:52:18:d4:52:a1:dc:9b:54:e8:f1:e7:91:d2:1f:
c4:8a:bc:f6:1e:9b:7e:a3:7d:9d:15:53:c5:62:f7:6a:d5:3a:
03:6d:2a:85:da:5f:03:7b:3b:60:89:35:69:fc:44:be:f3:16:
4f:50:e7:1c:53:13:e2:48:1c:a9:25:f3:0f:d3:64:58:da:1e:
c1:98:5b:75:32:a5:2c:53:b5:55:5b:ae:9d:bf:1c:01:d9:5e:
55:cd:45:b3:6a:64:c4:71:79:3a:4b:45:26:b0:41:05:a9:ee:
8f:00:14:5f:56:34:28:dc:4f:23:7a:aa:df:8c:1a:cd:d4:16:
24:80:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:44 2026 by rpki-client