
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EF6100C282111F1A54782E3BF833773.roa
File: 2EF6100C282111F1A54782E3BF833773.roa (raw, json)
Hash identifier: LK2slcliVbtbbTT2MEMEAnhNC1t/E2R8W+0EMbUl3Eg=
Subject key identifier: 18:6A:73:59:28:84:42:0E:A7:49:F6:85:34:6F:0A:FE:94:0E:FA:CB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F435
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EF6100C282111F1A54782E3BF833773.roa
Signing time: Mon 06 Jul 2026 17:23:19 +0000
ROA not before: Mon 06 Jul 2026 17:23:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146992
IP address blocks: 163.128.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62517 (0xf435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:23:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be487-ad2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:24:16:a4:c2:08:78:1a:ec:07:81:97:1e:
f4:92:09:05:c0:48:62:7f:8b:f4:10:c2:6d:00:cf:
88:5d:90:5a:cd:36:d1:d3:45:82:44:e6:0f:1a:b9:
ef:8c:18:64:7b:f4:ed:64:4d:7e:c5:96:b6:1d:2b:
d3:62:06:f0:dc:e3:e8:27:7c:53:16:4b:19:0f:03:
a4:9f:3e:96:c5:b8:98:e7:31:aa:d5:f3:88:dd:08:
3c:d0:97:ab:fc:33:f3:4d:cd:a2:dc:bd:35:74:3a:
6b:34:0f:00:2e:cb:ae:79:fd:04:11:d1:22:27:e8:
a7:cc:28:09:66:9f:3e:61:0a:ec:cd:50:84:ea:66:
e8:4e:51:3f:29:f3:41:3e:ee:3c:71:2d:17:04:94:
00:be:e4:05:59:ea:75:03:43:67:66:f0:d2:ea:92:
b9:56:d7:5f:cc:eb:72:ab:11:ec:ee:a0:5b:aa:37:
9c:e7:e0:71:8c:15:a3:d9:8e:a5:7e:f9:35:7f:2e:
1d:02:ba:25:9d:4e:00:b7:bb:79:d8:ce:4b:5a:8f:
20:37:53:69:3f:21:4d:d2:f0:92:18:15:c7:37:bd:
fa:45:05:d9:a0:5f:88:a1:25:10:65:8f:37:52:6d:
e9:3c:f3:34:e1:fd:b0:31:87:31:31:b4:78:86:30:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6A:73:59:28:84:42:0E:A7:49:F6:85:34:6F:0A:FE:94:0E:FA:CB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EF6100C282111F1A54782E3BF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:57:b5:75:af:dc:c4:63:67:c2:55:7f:90:e4:0a:96:48:4f:
4f:f3:8d:28:fd:be:c7:30:9e:dc:0b:41:b7:6a:98:a3:19:a0:
1b:04:21:94:ed:16:c3:a6:1f:ea:10:84:40:ba:8c:78:07:2f:
06:5d:29:95:01:56:cb:91:6e:b1:b9:7b:b0:ba:4b:f4:24:9e:
ba:5e:7f:d1:a8:24:87:1e:1d:85:62:bd:6b:94:0f:45:a1:6d:
d4:ef:29:37:fe:17:6c:da:0a:ed:f7:70:6c:32:0d:21:60:9b:
90:db:43:66:d8:bb:38:1d:2d:50:31:b8:89:e4:8f:76:26:e9:
31:a5:f6:dc:f1:48:b0:38:c6:1b:26:f2:75:65:94:41:e8:c3:
32:ec:c9:3a:fa:33:12:13:5f:e4:49:a7:25:18:67:da:d5:fa:
f8:a8:13:2c:df:ad:3d:c3:4a:de:e0:b9:b7:3c:d3:7f:ad:8d:
43:50:c5:47:37:11:c4:47:39:c0:68:31:42:cb:41:34:c1:a9:
54:97:80:0d:86:ec:4d:94:61:4e:20:ed:3e:36:76:aa:14:96:
65:62:e9:07:1c:bb:d6:45:ec:68:42:c7:37:a8:9f:c6:9f:ea:
79:d0:aa:2e:e4:74:af:40:f1:cc:2a:2e:65:ad:fd:b0:da:31:
85:57:9e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:55:43 2026 by rpki-client