
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2727CA9C38B511F19E82B1BE93833773.roa
File: 2727CA9C38B511F19E82B1BE93833773.roa (raw, json)
Hash identifier: wzOWo3oWCsX4byrDIvXQIXOMhNVaxvvuebc5FgAtsuY=
Subject key identifier: 37:7F:C8:1E:CD:D5:1A:A6:F4:A9:02:EF:70:20:8A:B7:B3:AB:14:93
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F719
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2727CA9C38B511F19E82B1BE93833773.roa
Signing time: Mon 06 Jul 2026 17:47:48 +0000
ROA not before: Mon 06 Jul 2026 17:47:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154597
IP address blocks: 163.128.177.0/24 maxlen: 24
2001:df6:e3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63257 (0xf719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:47:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bea44-91e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:1c:e6:e9:48:d1:a8:f0:16:40:91:61:7e:
c1:9d:90:4c:61:fc:06:b7:aa:32:e0:63:36:b1:4d:
58:46:4f:6e:75:8e:97:d4:52:c0:ac:bf:21:a4:66:
39:f4:04:67:a0:92:19:7c:f4:dd:ba:54:39:57:19:
1f:58:17:12:82:d1:a1:87:0e:d1:86:7e:89:1b:d7:
58:a6:5e:ff:f1:f0:e6:16:e4:16:ec:03:ff:e2:54:
53:16:3e:1e:18:f3:1d:68:49:32:36:8a:45:fe:cf:
90:6f:56:2c:d7:00:40:48:8a:f3:c0:47:76:fa:9c:
9e:9c:5b:b7:06:55:6a:1b:9e:93:70:30:33:ca:26:
73:92:23:ef:30:6b:f3:af:a4:54:6c:9b:a9:f7:2e:
f6:b0:d9:e7:d5:f5:15:2f:e2:96:d5:5e:73:a7:e5:
91:01:7d:ff:4e:d2:de:c6:cd:20:c1:4d:66:0d:d3:
23:83:e9:58:2d:8a:88:57:43:b1:5d:21:c6:02:b3:
92:54:db:17:33:8b:7c:1d:c1:41:d6:7d:2e:42:ab:
82:69:35:71:c4:cb:33:37:9c:d3:68:86:76:de:e8:
a4:90:a3:f1:8a:c2:1d:08:1e:e4:4b:cc:a3:72:30:
97:3e:a0:cc:b0:96:2b:9c:a0:8f:14:94:53:e1:17:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7F:C8:1E:CD:D5:1A:A6:F4:A9:02:EF:70:20:8A:B7:B3:AB:14:93
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2727CA9C38B511F19E82B1BE93833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.177.0/24
IPv6:
2001:df6:e3c0::/48
Signature Algorithm: sha256WithRSAEncryption
27:37:42:c0:98:76:9e:0b:a6:69:b5:30:5f:18:4f:29:c9:14:
10:44:29:9d:09:3d:c0:50:b4:8a:ad:84:af:ce:aa:ba:94:f0:
38:f9:f0:0a:82:d2:e3:fc:5b:85:35:fd:24:f5:98:24:2c:ad:
5d:39:3f:51:71:b7:ed:c5:f1:a5:2a:a3:c9:82:f5:f9:06:77:
03:c7:2e:d3:b0:a6:65:fe:96:34:a1:50:f3:bd:68:4a:85:88:
f3:36:57:97:97:79:38:0a:88:65:06:54:6f:db:13:e8:2c:c7:
22:2a:e0:a1:24:fd:3f:85:e7:c1:1f:ce:7d:43:3a:74:3e:c6:
59:51:6c:f2:e7:19:03:aa:8d:4c:e5:73:ce:a2:58:2c:bc:e8:
1e:65:dd:ed:09:56:d5:ef:9b:1a:00:ca:46:16:04:b8:dc:bb:
6a:60:98:58:97:6e:6b:98:ca:5d:ab:70:46:7b:be:3c:9c:ab:
9d:17:94:c3:ea:67:cd:02:97:4d:d3:c3:95:95:a4:88:25:72:
d2:83:44:1b:1d:1d:5b:9b:ce:bd:0d:cc:d3:ba:a0:2d:bf:85:
12:ce:11:ef:14:26:84:a3:0e:af:11:09:a2:61:37:83:7b:a1:
b4:ec:56:8d:7f:55:f2:42:25:27:52:78:19:f6:61:c0:3a:67:
a5:06:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:25 2026 by rpki-client