
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/937BDE78096C11F0A606D725C4F9AE02.roa
File: 937BDE78096C11F0A606D725C4F9AE02.roa (raw, json)
Hash identifier: ozoNopaCJzkJmc11c6cJXhNFu1InjtsHytK/i3cptN0=
Subject key identifier: 62:89:DB:76:65:C3:70:6F:07:02:9B:7F:53:85:A5:D8:6F:FB:DD:6E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E498
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/937BDE78096C11F0A606D725C4F9AE02.roa
Signing time: Sun 31 May 2026 16:55:07 +0000
ROA not before: Sun 31 May 2026 16:55:07 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136347
IP address blocks: 163.223.66.0/23 maxlen: 24
2001:df5:35c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58520 (0xe498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:55:07 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c67eb-339e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:12:2d:8c:56:80:f0:f7:a3:f3:ac:a7:dc:
06:da:0c:31:0a:c4:0c:3f:44:5a:98:a2:ee:a3:7f:
04:ab:b0:b0:34:e3:56:ba:ca:65:47:5a:59:9c:e6:
83:82:b8:fa:0d:98:fc:f2:4c:8c:d7:14:36:0c:ea:
b0:fd:eb:69:0e:83:c9:8a:c6:34:c1:fe:46:a8:8f:
25:7c:a3:ba:02:1b:cb:25:ec:12:a8:fb:ac:da:b9:
ee:74:90:6c:71:a1:5c:b7:f0:62:88:81:c0:68:5c:
4a:32:63:67:8c:3b:a9:87:b2:87:9a:9f:b6:f7:76:
b2:82:91:7d:87:1d:1f:6d:de:0d:cd:05:23:c6:d4:
2d:19:76:4d:7e:63:81:bd:83:94:30:2b:e5:90:51:
35:48:f3:6c:d8:3b:6f:5b:53:3a:1a:6b:47:34:b7:
00:8d:65:ae:cb:af:0f:1c:27:84:21:11:40:03:5c:
c7:98:60:20:6e:01:1f:b6:98:c2:ed:ee:0b:9a:9d:
49:1b:47:91:81:49:b2:79:81:73:6d:c1:42:e2:69:
0b:f6:02:9f:a9:bf:c8:01:0f:fe:71:56:a9:33:ae:
a0:de:8e:a8:df:fc:ef:38:a0:5a:57:a3:c8:21:b0:
f5:1e:3f:f5:97:14:58:96:43:bd:da:20:15:14:f3:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:89:DB:76:65:C3:70:6F:07:02:9B:7F:53:85:A5:D8:6F:FB:DD:6E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/937BDE78096C11F0A606D725C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.66.0/23
IPv6:
2001:df5:35c0::/48
Signature Algorithm: sha256WithRSAEncryption
33:16:0d:c8:2b:d7:2b:ab:ba:b3:aa:9c:ff:8f:4d:aa:b0:07:
c8:89:64:7a:b1:b5:1d:dc:1a:82:6a:e2:f0:d2:a1:a0:42:0a:
f9:7b:97:c8:3a:2f:03:14:ab:3c:4b:70:a7:78:03:bf:dc:c4:
6c:97:6a:9c:27:b4:38:bd:45:ab:35:15:6a:5c:63:ce:23:fe:
ef:5c:bc:98:a2:5c:15:e4:85:28:14:57:3f:ff:e7:46:6a:85:
35:b1:60:a8:2c:d7:66:fc:6d:ae:13:81:d5:8b:82:a1:28:b3:
61:c8:d9:5c:5a:50:3d:10:b8:2b:8c:9e:dc:33:01:98:86:69:
77:74:07:6c:0a:0c:63:84:5c:cc:0b:9c:ad:36:d6:86:d0:3b:
42:cd:0b:c6:aa:da:91:7f:1a:5b:68:43:ae:17:30:c4:f4:2b:
97:f9:71:0a:58:22:bf:ee:a9:cb:10:79:6a:47:e7:c8:b7:36:
a0:65:56:43:93:3d:b3:56:a1:76:2b:7f:aa:51:0c:41:ad:3f:
81:7c:66:08:21:a7:88:8a:70:e9:6c:d2:1d:e2:f9:52:f7:93:
e1:80:ed:ed:1e:8d:d3:0b:76:2e:9e:d9:e7:f2:39:0f:47:01:
f6:f1:85:e1:cc:30:93:eb:9a:9c:74:e6:d1:53:57:ac:7d:1e:
a4:0e:16:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:23 2026 by rpki-client