
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A74DF3303D4411F08E0BFE85C4F9AE02.roa
File: A74DF3303D4411F08E0BFE85C4F9AE02.roa (raw, json)
Hash identifier: ayMI4QCs1+Tsdg30umWjDsBMkvzNq2de9E/+69dCnNY=
Subject key identifier: 56:F9:6B:8F:78:8B:92:AF:69:D9:C4:C2:6D:6B:75:96:07:59:0B:1B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F6CA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A74DF3303D4411F08E0BFE85C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:45:00 +0000
ROA not before: Mon 06 Jul 2026 17:45:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153846
IP address blocks: 163.227.210.0/23 maxlen: 24
2402:6a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63178 (0xf6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:45:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be99b-5787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:ef:a6:79:33:a1:18:68:10:80:76:d3:b0:
8f:26:a6:49:41:e9:d2:f2:67:2a:73:62:a4:62:20:
72:77:0e:31:f2:37:da:8f:8c:3e:17:a8:a6:c8:6e:
e7:68:c1:ff:11:87:af:b0:0b:c5:28:10:cd:5e:94:
4c:5a:fe:8d:e6:9b:ac:cb:7f:86:eb:46:ee:71:01:
58:4d:4e:1c:55:15:24:f9:18:9a:87:81:bd:ab:f7:
31:7c:ba:50:80:e8:54:5d:80:71:14:74:80:b5:c8:
28:13:88:39:03:ce:d6:ed:e8:82:f2:1a:d5:1d:46:
00:4d:c6:75:eb:26:64:55:af:dc:8a:99:38:3d:ec:
c7:f8:5e:62:61:68:f8:31:e8:ae:ca:a0:ab:96:fa:
04:09:e8:4f:f1:29:6c:a1:43:38:23:e2:8c:53:ab:
37:c9:90:93:83:f4:00:6b:98:3a:26:44:99:82:4d:
5c:ff:88:2c:0e:06:05:d2:22:54:82:80:49:fb:11:
5c:2c:73:02:7c:ee:00:03:3f:b7:66:00:5b:04:64:
0e:ee:7e:d4:14:7e:ba:84:74:ea:fe:37:bc:2a:b4:
88:c0:a3:27:c6:b4:43:0b:d6:c0:9a:8c:61:8b:82:
c7:e1:7f:fd:63:35:01:c5:d7:b6:07:c4:8c:82:4b:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F9:6B:8F:78:8B:92:AF:69:D9:C4:C2:6D:6B:75:96:07:59:0B:1B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A74DF3303D4411F08E0BFE85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.210.0/23
IPv6:
2402:6a0::/32
Signature Algorithm: sha256WithRSAEncryption
89:c7:0a:4a:38:4e:f0:31:64:d5:76:fa:b3:e8:78:4b:d2:26:
94:77:96:8a:bf:e4:42:a0:c6:07:16:23:76:15:81:ee:ba:04:
b8:69:50:0d:fe:78:f2:02:77:90:f2:00:21:00:31:f4:89:ce:
77:00:fb:89:3c:82:00:16:95:e6:a8:24:83:86:67:2c:36:1a:
11:81:24:08:97:79:46:c5:91:94:f8:c5:d4:8d:d8:a3:fc:97:
06:7b:48:35:f6:9c:50:3e:0c:4b:49:73:9c:00:0a:a9:38:fc:
b3:0f:f4:cb:d3:98:0c:95:82:84:ea:f1:0e:a3:2d:66:7d:8a:
6f:ca:ec:4a:69:6e:f4:c5:21:da:52:26:62:6a:88:28:03:24:
be:6c:99:59:42:e4:87:ff:b4:18:7b:31:47:52:6b:d0:cd:b1:
b9:c2:4a:f7:fa:c1:53:2b:16:cb:cc:06:c5:e3:2f:03:9a:54:
df:b1:6b:6e:6d:b6:6b:46:c4:0e:7d:92:a4:ac:8c:76:4d:93:
cc:b2:ea:53:44:24:e9:a5:ac:fe:07:d7:dc:1a:f4:e0:1b:cc:
e5:16:f6:4d:16:d3:96:95:73:46:2e:c2:e0:ef:b1:2d:d0:f6:
81:6a:ef:df:3a:6a:91:ba:6e:c3:79:5d:b1:c8:a6:53:b6:3b:
38:6a:b7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:20 2026 by rpki-client