
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56622BC2297A11F083AE8039C4F9AE02.roa
File: 56622BC2297A11F083AE8039C4F9AE02.roa (raw, json)
Hash identifier: wN8xgQ60u9UsDNMxkNXG8Df/w8SIo+79AH2FJsVsMK4=
Subject key identifier: 2F:C6:5C:09:52:A5:71:7C:60:1C:55:3F:55:03:97:9F:9C:77:87:CF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EAAB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56622BC2297A11F083AE8039C4F9AE02.roa
Signing time: Sun 31 May 2026 17:45:57 +0000
ROA not before: Sun 31 May 2026 17:45:57 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153851
IP address blocks: 163.227.216.0/24 maxlen: 24
163.227.217.0/24 maxlen: 24
2001:df5:7b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60075 (0xeaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:45:57 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c73d5-f225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:59:6e:d5:2c:d7:00:a8:bb:85:18:06:98:
af:5e:19:dc:c4:cc:9b:60:80:31:1c:53:9d:89:fe:
b2:85:fb:4a:22:8d:2e:d6:ba:5d:a4:73:f2:6c:7c:
a8:1d:99:d8:06:7c:76:09:af:e8:a7:7f:32:fe:a6:
af:74:e7:61:e9:27:65:a5:69:65:e7:7b:60:9f:41:
07:0d:7b:10:89:d1:22:da:e6:dc:cc:c9:bb:21:a6:
7d:25:2c:57:5c:05:70:8f:cb:01:ab:72:29:51:e1:
81:f8:1f:12:fb:6e:6a:6f:b7:f1:11:37:9e:e1:ea:
78:e5:f5:6b:06:a8:eb:5f:ab:0a:ad:ef:3c:12:5a:
66:1e:74:16:5f:80:71:43:13:af:f4:e9:a7:19:9d:
c4:f4:d4:52:95:33:f8:74:f7:39:fb:ff:ef:25:b3:
ee:3a:93:49:92:c2:fe:42:a3:f6:71:bd:35:d3:0f:
32:4a:5f:47:6f:71:2c:de:cd:d6:40:9c:85:52:09:
6f:5d:9f:88:69:e3:2a:b6:50:e1:30:81:91:bd:32:
19:28:31:1b:67:28:3f:53:39:f4:97:aa:ec:76:8e:
05:27:6f:84:c0:9e:22:5d:9d:6a:3e:a9:95:63:8a:
02:f2:4e:2f:93:77:35:c8:06:83:cd:9e:78:6e:eb:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C6:5C:09:52:A5:71:7C:60:1C:55:3F:55:03:97:9F:9C:77:87:CF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56622BC2297A11F083AE8039C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.216.0/23
IPv6:
2001:df5:7b40::/48
Signature Algorithm: sha256WithRSAEncryption
62:83:3d:e2:6a:5e:b1:b8:04:46:3e:6c:1f:f1:97:a8:29:01:
f0:ad:d4:75:19:ec:d4:6e:f0:92:2a:82:96:6f:0e:91:42:6e:
7e:01:b8:e7:56:49:c5:b0:e4:e4:11:25:ad:aa:79:81:7c:40:
13:95:c6:f7:f7:b0:85:d8:15:6e:4f:d7:8d:a3:4a:73:7c:a5:
7d:75:c8:a9:59:c1:19:2d:49:06:ef:e5:a4:4b:f7:23:38:9d:
5b:26:cd:06:2d:18:0b:68:5b:46:b9:9a:6c:4c:62:d4:c4:63:
2d:cb:62:9b:a4:55:60:10:ee:58:b6:d2:9b:4f:72:bf:34:85:
7a:1f:a8:fe:c8:f1:ca:e0:6c:f3:9a:a5:5b:e6:5d:56:f3:8e:
44:9d:97:5d:b1:32:4b:b0:0f:3b:c2:59:a0:61:e3:d2:7d:98:
f7:d0:c6:63:8a:45:6d:0a:d6:9d:37:01:9f:b5:75:3f:1e:8b:
76:18:3f:64:b8:51:60:b6:2f:d9:82:97:b1:fa:f4:cd:35:67:
b7:80:d9:81:b7:5b:4a:2a:44:a7:ca:70:c1:ee:5c:24:f3:0c:
99:d4:fa:1a:be:c1:be:23:d2:08:7b:7b:ac:ee:d8:7d:22:f3:
68:fd:ed:4b:d0:fb:60:b6:f6:a9:23:a2:ae:fe:26:b7:28:9a:
2d:ed:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:41 2026 by rpki-client