
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/996E5CDEA3C911EEBCE0B90CC4F9AE02.roa
File: 996E5CDEA3C911EEBCE0B90CC4F9AE02.roa (raw, json)
Hash identifier: 91uWrcs7yoQ782XC0Z/eW34T+RVh2kGHdw2zVs0yivg=
Subject key identifier: 1F:76:D9:6F:45:40:44:62:1F:EE:8F:BF:B9:42:76:B3:BC:87:3E:77
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA03
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/996E5CDEA3C911EEBCE0B90CC4F9AE02.roa
Signing time: Sun 31 May 2026 17:40:42 +0000
ROA not before: Sun 31 May 2026 17:40:42 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151727
IP address blocks: 210.79.136.0/23 maxlen: 24
2001:df3:3440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59907 (0xea03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:40:42 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c729a-2d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:34:eb:23:9f:ac:38:ae:e3:c6:1e:54:fa:
55:d5:98:82:0d:4c:d5:79:23:62:c2:6d:47:97:f1:
c1:9f:ea:13:82:6a:83:75:73:a9:9c:ec:3f:8e:7d:
64:78:05:3b:de:71:0a:2a:0f:1a:77:f7:ff:d0:57:
cf:ad:b7:e5:10:63:12:48:79:80:6c:6a:45:d3:07:
75:99:53:c2:79:61:1c:3b:05:c0:de:3f:d4:8a:fa:
86:dc:75:6f:fe:e1:eb:8c:f1:69:29:5f:56:a4:90:
a4:0f:a1:95:f1:bd:8b:59:db:f1:dc:86:03:8c:24:
df:66:ef:14:a3:5f:81:c9:89:54:55:56:bc:bb:17:
19:6a:2a:0f:42:1e:8a:be:5c:c4:39:8b:1e:94:d8:
eb:01:6f:99:5e:b7:6b:93:31:75:1f:36:21:11:75:
13:fc:40:8d:2f:59:bf:90:a0:2c:11:72:58:0c:f7:
f1:93:a6:52:52:14:13:20:5f:a7:c4:2b:69:f5:c5:
62:55:3e:7a:16:e6:7e:77:07:3c:c3:59:66:b9:be:
04:9e:61:ab:a4:55:60:5a:ba:52:17:69:69:ed:ea:
8d:ee:df:08:4b:7c:f6:c8:29:97:74:9c:fd:07:5d:
ab:53:57:3a:4f:8a:a6:f1:ee:c9:14:04:c7:bc:ed:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:76:D9:6F:45:40:44:62:1F:EE:8F:BF:B9:42:76:B3:BC:87:3E:77
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/996E5CDEA3C911EEBCE0B90CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.79.136.0/23
IPv6:
2001:df3:3440::/48
Signature Algorithm: sha256WithRSAEncryption
73:cb:00:b7:37:7b:f1:eb:da:6b:aa:2f:47:f8:51:a9:21:64:
0c:01:7e:d3:86:27:0c:fb:13:a2:8e:90:56:bb:a8:f0:1a:ba:
ba:4c:8b:12:3a:18:ea:74:81:03:51:aa:66:0a:55:ed:0c:f5:
6e:15:58:ae:9a:6b:74:c6:29:92:a9:f9:4b:62:77:5e:30:ee:
16:63:8c:fe:88:06:fc:92:2f:fc:62:2e:ab:90:7f:a7:6f:df:
29:e9:dd:5b:04:d9:83:33:a9:3c:3e:34:c8:65:02:92:fc:20:
7f:23:70:75:46:12:ae:22:7b:89:4a:c2:a7:0d:20:b1:7e:5d:
57:8d:87:1c:aa:92:b2:a0:0f:ad:7c:a2:32:42:f7:d8:ce:4b:
12:14:fc:63:f8:62:7d:e0:86:96:08:5e:9e:09:2e:b3:e9:d6:
4f:9f:e2:7b:ef:8c:0b:01:7a:70:b3:5d:b1:55:74:a7:80:db:
8c:88:21:88:ae:26:41:52:91:e2:fd:0f:08:82:9a:22:5e:9b:
40:f4:e6:c9:91:7f:7b:48:d7:22:09:3b:78:0f:7a:4c:e7:66:
9b:9e:74:3f:81:dd:3a:2c:79:45:23:1f:dd:2b:a7:bc:ce:a5:
08:18:3b:19:ee:aa:11:ac:78:7a:7a:5a:63:43:08:fc:5d:e5:
b8:40:65:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:26 2026 by rpki-client