
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B85FF69855BA11F18E6525ADA1833773.roa
File: B85FF69855BA11F18E6525ADA1833773.roa (raw, json)
Hash identifier: 4rJ8aZx044SBeVEgIeTJJSISfrx+xofNgo6mpJFiZO0=
Subject key identifier: 40:B1:FF:B8:B7:91:6F:89:DE:6C:C6:EA:A1:74:BF:AC:E0:2F:23:2F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EAFB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B85FF69855BA11F18E6525ADA1833773.roa
Signing time: Sun 31 May 2026 17:48:28 +0000
ROA not before: Sun 31 May 2026 17:48:28 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 154619
IP address blocks: 163.128.226.0/24 maxlen: 24
163.128.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60155 (0xeafb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:48:28 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c746c-c353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:c4:09:63:32:97:61:94:52:17:24:7a:70:
7a:14:93:cf:98:41:af:f5:c4:b5:32:5b:65:f8:99:
e5:e5:8e:b4:e5:46:70:cd:13:b6:3d:f5:54:19:da:
43:83:d4:72:b2:27:f5:aa:72:37:6f:0a:d2:72:ac:
7f:e9:ac:77:3d:ed:5a:19:1c:a7:c8:b3:6b:c2:a2:
f2:a3:af:b4:16:99:e1:1c:59:e8:de:d5:83:f9:1e:
c9:cf:b5:40:53:82:80:17:97:c1:3d:1e:55:f6:bc:
67:6b:a8:43:a9:a7:6a:d1:0f:ad:fc:62:12:21:b2:
88:87:a7:91:7b:09:cd:ee:92:4a:60:e5:9c:c6:52:
04:33:43:2b:d1:ce:68:bd:c2:92:ca:cb:3d:91:91:
4b:1b:95:af:88:2d:cf:07:c1:21:68:6b:4f:31:04:
bf:3f:76:15:c2:79:af:10:f9:67:ff:72:fc:1e:fd:
55:a4:28:07:9b:e4:c3:04:6c:10:80:ac:5d:6a:be:
e2:bf:a6:b7:03:26:9a:29:95:ca:c2:42:5d:a3:99:
88:1e:46:b3:da:4b:5b:c0:76:2a:56:eb:f3:f2:2e:
24:71:c0:43:90:2d:11:34:dd:29:5c:93:bd:02:f6:
cf:ed:02:35:f1:30:2b:15:65:3b:d6:af:d0:dc:01:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B1:FF:B8:B7:91:6F:89:DE:6C:C6:EA:A1:74:BF:AC:E0:2F:23:2F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B85FF69855BA11F18E6525ADA1833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.226.0/23
Signature Algorithm: sha256WithRSAEncryption
83:09:47:39:c6:88:27:3f:e9:ea:c0:d9:72:77:34:4a:d5:19:
22:ea:ea:8d:36:c7:8d:c7:70:6c:3b:c1:95:a0:24:ff:fb:ca:
7d:3f:21:85:d3:d0:1d:56:6a:a2:36:36:d5:da:c7:c1:52:2d:
a4:b5:c2:29:9d:97:a0:1c:13:44:bc:7d:4f:b9:da:96:1e:49:
5b:d1:b5:a9:48:0a:86:da:7b:e9:9f:ed:47:61:10:4d:33:2f:
7c:c9:68:c7:16:f5:3f:06:b8:06:b7:3b:be:9c:bf:85:52:8d:
6f:68:a0:a5:a8:73:7a:f2:e5:a6:b0:f6:32:4e:74:be:70:53:
85:cf:c1:0f:d6:c8:d7:ff:60:43:a6:61:e5:af:32:79:aa:9c:
f2:ed:c3:15:fa:4f:63:2d:be:10:c5:30:f5:16:84:a1:f3:57:
b4:a2:16:9e:63:42:7d:d6:7a:40:54:c3:11:db:c3:a8:73:96:
80:70:e9:fb:7f:a4:17:96:0d:23:3e:49:99:51:71:d0:32:b4:
c5:28:bb:2f:e2:5c:6e:0a:5f:4d:4c:26:ef:71:c3:73:f0:02:
69:26:7f:e7:0f:5c:55:17:d0:ab:db:b9:bf:85:c7:50:90:66:
71:5a:65:6e:85:f7:82:ec:63:d7:b1:89:e5:db:9e:0a:24:d1:
f2:2e:6d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:03 2026 by rpki-client