
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa
File: 63F5D1BE104B11F0B006D834C4F9AE02.roa (raw, json)
Hash identifier: 4CQxBBILwwY7eNZ/SvlMHHrM0APVbGkNbjnwMBC9TvI=
Subject key identifier: 88:B5:93:5B:01:4D:91:76:4D:34:95:9B:C2:DB:FE:F3:84:35:9A:1C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EC17
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa
Signing time: Thu 04 Jun 2026 05:37:22 +0000
ROA not before: Thu 04 Jun 2026 05:37:22 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133976
IP address blocks: 163.223.102.0/23 maxlen: 24
2401:f5a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60439 (0xec17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 4 05:37:22 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a210f12-a130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:94:0d:4b:08:a9:b9:0b:04:3a:92:7d:19:33:
0f:d2:a8:e9:b9:cc:70:96:d3:72:40:2a:e9:7c:98:
9c:ab:64:3b:20:97:a9:47:c7:36:c7:5e:59:5c:49:
07:2f:4a:16:28:8d:a5:2f:b6:99:65:c1:34:99:2b:
62:a0:2e:c5:02:8f:34:93:42:3f:da:0a:b1:a9:80:
7e:a6:6f:69:2d:42:cb:6b:cc:4e:e4:7f:35:da:e4:
ea:6c:ba:84:b0:5c:79:cc:05:fd:55:f6:71:8f:d3:
c2:02:40:cb:7f:22:f2:93:1b:37:c9:08:78:b4:1e:
8b:9a:62:97:6f:b9:d2:53:3c:f4:b2:2c:ca:fe:dd:
ff:a0:f4:50:df:a1:20:9b:6c:ef:57:03:82:b2:43:
49:67:8f:d0:49:13:ef:0f:86:46:d6:c7:47:3c:ea:
d0:37:14:6c:5e:56:04:88:db:b2:cd:5f:5e:e7:56:
31:e2:b1:ca:7d:33:63:70:02:34:e8:09:0f:1a:60:
84:4d:9a:68:63:8e:d8:c9:ee:e2:c1:84:e8:15:31:
6c:15:ab:4e:ea:97:13:8c:39:d8:a8:2c:98:67:93:
99:b7:4c:a6:cc:c5:ba:87:d0:6d:58:80:33:5f:8e:
4f:cb:59:3b:9f:0b:5e:ce:4c:75:de:95:0e:65:46:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B5:93:5B:01:4D:91:76:4D:34:95:9B:C2:DB:FE:F3:84:35:9A:1C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.102.0/23
IPv6:
2401:f5a0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:61:73:a2:64:12:6a:c7:d0:1a:ea:78:0b:11:42:a1:72:0a:
e5:a3:77:63:9a:2f:92:00:d1:1c:3f:11:11:a1:c7:90:0d:8d:
b5:f9:2b:f3:83:67:28:98:17:71:0a:8a:ad:86:2f:37:e6:fa:
20:f6:83:b7:dc:7c:b9:1e:7b:40:a4:28:43:48:be:57:17:5b:
19:81:ea:f4:04:1a:62:f7:fa:b8:59:af:c4:72:2e:c6:cd:56:
45:90:a4:e0:85:0b:fa:86:15:a5:33:f5:20:60:e9:9d:0c:14:
1b:d0:6e:d6:fb:96:26:95:ea:22:6d:b7:8b:07:35:38:60:16:
56:22:21:1c:01:5c:8b:c0:13:48:1b:c6:25:b8:e5:fe:e9:08:
c7:be:46:ce:90:f6:8b:1a:9e:9c:20:3f:59:f8:27:e2:86:04:
37:7a:0b:60:84:29:d9:65:e4:46:da:1b:82:ea:d2:ea:ee:95:
ec:b4:36:b5:85:92:35:f5:3c:66:61:13:a5:58:f9:ad:dc:ca:
de:c9:d8:1b:a5:f4:51:fc:07:02:3e:ea:6a:6d:a1:6a:f2:88:
88:e2:e6:a8:ad:11:a2:8d:d5:35:74:6c:bc:c2:88:d4:e4:88:
ac:4b:e3:8f:bb:89:2c:62:2a:99:e3:ab:f5:f5:ca:f7:1e:5b:
80:64:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:50 2026 by rpki-client