
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85CE86AA1E7411F082F64275C4F9AE02.roa
File: 85CE86AA1E7411F082F64275C4F9AE02.roa (raw, json)
Hash identifier: Q1RDkFDWDa9aU0iE4LxGRz6yMkoB4/16W2Tw+OnLD4U=
Subject key identifier: 5B:E0:44:1E:D6:93:D7:58:BA:A5:AD:3D:26:EB:D3:F9:34:80:64:89
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E3D4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85CE86AA1E7411F082F64275C4F9AE02.roa
Signing time: Sun 31 May 2026 16:48:46 +0000
ROA not before: Sun 31 May 2026 16:48:46 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 135364
IP address blocks: 163.223.250.0/23 maxlen: 24
2001:df5:5340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58324 (0xe3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:48:46 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c666e-552a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:f3:7b:4a:ec:f6:56:7c:32:63:3f:dd:94:
f0:b3:b8:50:a3:80:b1:fb:c6:06:50:54:a1:f1:1d:
79:78:7e:06:5a:0e:3f:90:88:aa:5e:c5:62:d1:01:
5f:a3:56:73:34:51:0d:cc:ca:60:40:2d:2d:8a:cd:
a2:1d:75:83:38:35:11:4d:a5:2b:01:7f:98:9a:56:
c4:87:42:a6:4d:90:c6:8c:15:18:0d:52:96:c2:4a:
0f:be:63:d8:3d:83:70:97:96:ca:e3:8e:48:28:d2:
7c:d3:45:97:c6:06:1e:be:6a:16:9d:4d:ec:a6:ee:
de:58:29:9b:6c:00:35:e1:11:92:96:f3:a0:0b:1f:
5a:ed:a6:51:19:e2:ca:84:e4:2e:4f:15:e3:56:60:
8f:44:c2:ee:80:6d:40:43:20:4e:cf:84:0d:24:76:
06:78:42:87:51:0f:51:1a:d9:d2:55:c8:0b:e0:07:
91:b5:1e:a4:19:bc:6d:26:3d:2f:63:08:5e:c8:ef:
d5:03:41:0b:a3:70:98:de:18:47:fb:fa:54:85:6f:
f1:59:54:13:ec:b3:52:ef:08:37:31:0e:9b:9e:ad:
53:1c:80:17:92:37:02:25:fd:bd:79:f0:0f:e5:31:
1f:77:4d:79:ad:f6:91:3f:8e:52:43:cf:a8:f7:58:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E0:44:1E:D6:93:D7:58:BA:A5:AD:3D:26:EB:D3:F9:34:80:64:89
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85CE86AA1E7411F082F64275C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.250.0/23
IPv6:
2001:df5:5340::/48
Signature Algorithm: sha256WithRSAEncryption
af:fc:02:49:77:31:5d:36:04:29:74:7f:fb:17:f0:5a:d8:a4:
74:3d:9d:cc:59:74:86:b6:2f:3f:cf:05:8c:9c:4d:c7:6b:dd:
53:a7:ce:10:ab:f6:f7:32:d4:ae:b7:40:a4:ba:dc:6a:bf:cd:
7a:94:08:c3:19:ee:44:87:78:ff:97:b6:d2:19:10:b8:3f:4f:
5d:24:d3:01:65:53:5c:0a:57:d7:fc:8f:07:9d:97:09:52:46:
d3:eb:f9:77:53:23:0c:d4:fa:cb:74:4a:1b:6d:2b:15:e0:95:
00:ee:ba:10:ed:fe:4a:0a:42:be:27:8b:5e:3b:06:77:b4:65:
74:4a:df:16:17:3e:0a:d9:e9:54:68:1c:cb:15:a2:37:13:f5:
99:f5:1d:1c:79:a4:a0:30:75:4d:fa:a6:32:d1:fa:b9:5f:a8:
15:20:43:ec:da:6b:8d:03:c8:36:7d:2b:2d:1e:1e:16:35:94:
51:d2:41:91:2e:fe:d6:17:96:f9:f5:e0:b8:34:ab:82:2d:09:
d5:40:e6:5b:6f:8c:77:29:d7:8a:ed:52:f9:9b:fd:80:bb:af:
40:d3:5a:77:1e:2b:d1:4b:db:20:0a:0b:e3:c9:93:60:7f:90:
51:51:d9:32:e8:e7:0e:93:cc:46:61:ea:b0:d5:da:56:9e:57:
00:e1:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:54 2026 by rpki-client