
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56DD161E0F9611F083EA4F0DC4F9AE02.roa
File: 56DD161E0F9611F083EA4F0DC4F9AE02.roa (raw, json)
Hash identifier: KfvyfGkUZ8fw2PepxEcJ3kZhm+4Fu2ep7FYLMTGH/Po=
Subject key identifier: 92:B5:AB:17:F9:87:A6:0D:A2:57:80:52:E9:03:D0:24:98:60:20:28
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA8F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56DD161E0F9611F083EA4F0DC4F9AE02.roa
Signing time: Sun 31 May 2026 17:45:08 +0000
ROA not before: Sun 31 May 2026 17:45:08 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153700
IP address blocks: 163.223.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60047 (0xea8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:45:08 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c73a4-bd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:dc:a1:20:df:e6:2e:42:78:13:9a:48:40:
dc:33:c0:4f:a2:8b:3d:72:c4:74:03:60:74:41:ea:
25:0f:a4:59:cd:54:e3:e0:eb:45:4d:f1:1c:5b:5a:
71:e4:eb:5f:2b:46:42:3f:a0:26:74:88:d5:b2:67:
78:29:13:3f:5d:63:1e:74:5f:b4:8b:95:09:76:88:
26:f2:06:c7:69:d8:ce:bc:b9:80:5a:e0:14:f9:cc:
c0:f2:18:21:09:f2:cd:9d:26:af:bf:bd:18:b2:b3:
c5:da:5c:ca:56:ba:73:81:c1:d1:4b:be:50:d1:ba:
24:1b:19:cd:e0:e1:ae:be:fc:16:0f:6d:81:32:90:
d0:20:43:22:e5:99:04:3b:2e:d5:89:36:90:f7:e7:
23:d6:ce:d1:57:8f:0b:85:00:40:f1:bd:21:1c:11:
74:2b:c6:0b:5e:c9:70:ec:2a:97:2f:e5:bc:11:c7:
9a:47:92:f9:07:95:5d:83:4e:36:64:b5:b5:4f:f4:
58:91:22:ca:d2:67:1e:f8:93:3d:60:77:91:cc:3e:
6c:6a:41:cb:1e:d1:56:9d:80:ac:25:15:da:ec:28:
51:53:1d:57:73:82:80:de:46:21:3a:dd:f8:fc:b7:
2d:88:86:0f:5f:d5:69:f7:07:f9:07:35:fe:70:64:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B5:AB:17:F9:87:A6:0D:A2:57:80:52:E9:03:D0:24:98:60:20:28
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56DD161E0F9611F083EA4F0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.122.0/23
Signature Algorithm: sha256WithRSAEncryption
69:9b:50:0f:cf:fb:e3:f7:a5:21:29:bd:21:20:d7:4a:88:64:
01:2c:2c:bf:b6:bc:4e:8b:c4:11:fd:77:3b:f1:33:b0:c3:85:
ff:98:e8:06:a1:b7:be:00:88:21:d9:9e:e5:bc:4f:c8:d1:7a:
79:a9:ad:db:3c:2b:45:3c:07:0c:ca:84:0d:39:72:bd:7b:43:
bf:54:2e:b2:ab:88:9e:5c:11:f7:97:4d:f5:47:cf:53:0d:af:
68:f0:22:8a:8b:bf:5c:24:1e:d4:9a:d9:d1:c5:03:38:d3:24:
80:c6:51:56:08:1d:d5:78:be:0d:7f:ea:1e:68:c5:75:bd:e4:
e0:85:e8:9b:36:b3:63:c0:fa:da:59:59:24:e7:50:7f:74:f4:
9a:a4:c8:ca:a9:45:59:40:ed:62:ff:a9:1e:9c:d8:9e:ce:0d:
fc:c1:d8:94:33:cf:b4:28:78:1d:8f:5b:79:69:ca:3f:a6:75:
94:27:6a:65:7d:67:41:04:f2:86:64:5b:84:59:5a:19:4e:8c:
8c:bf:6d:9f:71:27:96:d4:f7:46:76:7d:01:d9:01:a6:6f:83:
bd:10:b0:28:36:7c:53:d7:9f:7e:68:36:02:72:36:a0:c2:bd:
51:55:25:54:f1:c8:7c:42:02:0d:20:3d:af:60:79:94:69:7f:
76:74:23:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:15 2026 by rpki-client