
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A97B942EE2B711EFA9899337C4F9AE02.roa
File: A97B942EE2B711EFA9899337C4F9AE02.roa (raw, json)
Hash identifier: oDJs3mO2dWISljvboxEonSsQHdEKl0ky0fnpTDpBO58=
Subject key identifier: 67:1E:79:56:B9:16:9F:33:18:F4:1A:BA:1E:51:A8:3F:53:19:E2:1B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F69D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A97B942EE2B711EFA9899337C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:43:30 +0000
ROA not before: Mon 06 Jul 2026 17:43:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153277
IP address blocks: 163.61.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63133 (0xf69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:43:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be942-a9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:d9:bd:ff:75:59:c1:8d:41:1d:75:4a:b3:
c7:1d:55:a7:0f:e5:b9:f0:ec:dd:98:21:58:24:a7:
df:54:79:df:a1:4f:c0:8c:ca:92:f0:cd:fb:ea:ae:
f9:4e:cc:44:12:d5:c9:79:62:2d:16:f4:e5:b9:6a:
87:44:28:39:af:21:1f:82:bc:3b:82:be:76:63:63:
ef:b4:ea:42:9d:5d:8c:4c:08:08:b6:fa:d2:a3:4b:
df:f9:32:6f:ba:0b:e4:e1:c4:88:75:d9:57:41:ac:
15:cf:67:9e:1a:ff:0d:56:0d:13:53:10:7a:1f:a0:
0b:32:7d:de:3e:b3:e6:6a:64:f2:f8:f9:df:89:94:
ef:a8:ea:38:64:aa:70:5d:be:f3:5c:bb:87:a4:01:
7f:8b:16:62:bc:26:6d:83:1c:78:2c:a9:44:b6:83:
f1:a6:44:1d:eb:1e:6a:77:9f:ce:c6:3d:c7:b0:b8:
3e:a0:6d:93:6e:e1:fd:ef:38:1f:f8:ae:e8:b2:94:
3f:d5:0b:e5:b8:3a:43:72:7e:41:be:4c:c8:b8:6a:
c9:8c:cf:08:29:38:8d:d1:1b:21:c8:fb:c1:ca:1f:
64:37:fe:f1:f2:9d:76:4a:6b:8b:4c:71:5c:20:54:
86:1b:21:21:f8:58:1c:28:ae:de:c5:09:dd:c5:c9:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1E:79:56:B9:16:9F:33:18:F4:1A:BA:1E:51:A8:3F:53:19:E2:1B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A97B942EE2B711EFA9899337C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.28.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:21:55:5e:e5:ae:cc:42:21:43:11:44:d7:a0:29:5f:d2:be:
89:f6:48:fa:6d:36:cf:85:e6:c3:45:a2:cf:14:d1:9b:7d:73:
41:25:b9:b3:5d:07:2a:6b:ae:e5:44:78:f6:a8:f2:26:48:c1:
2e:50:7c:46:ef:6e:67:29:dd:19:2d:4d:ee:ce:0d:03:f2:41:
3d:05:43:b5:59:08:56:f6:69:2f:b0:ba:d1:bb:af:44:c0:11:
6b:63:86:48:a9:f8:28:d9:f8:08:22:52:a2:80:05:eb:cd:67:
96:3e:c8:9a:ee:4f:9b:10:34:50:7b:02:d5:93:1e:e3:45:35:
57:ae:a7:dd:63:bb:7a:d4:be:3b:88:72:d2:2c:e1:84:d8:9b:
01:8e:8e:15:0b:81:2c:ff:db:e1:f9:5e:e2:a1:f4:c2:cb:a8:
c5:f9:16:36:ce:5e:fe:6c:f3:4f:38:d2:64:bf:74:96:13:9c:
9c:aa:ec:31:24:4a:7c:9f:fe:fc:32:7e:e0:7e:4e:6b:42:a0:
2b:d6:33:10:ef:e4:35:06:99:7b:18:31:6a:3f:4f:7d:cc:e9:
59:34:fb:cb:e1:37:89:73:23:12:96:94:d9:da:cc:26:65:a4:
3b:e6:95:1e:cc:2f:47:47:cb:fd:c6:8c:8f:9d:e7:1a:df:97:
9e:21:b7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:46:51 2026 by rpki-client