
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD8BC0141EA411F08C2EE935C4F9AE02.roa
File: BD8BC0141EA411F08C2EE935C4F9AE02.roa (raw, json)
Hash identifier: /5401MHVSIGzxnAYFHjuw3583xMH4qPgCAq9u5qtYsc=
Subject key identifier: 6E:29:3D:59:BC:BB:A2:CF:4B:05:1E:AA:3E:DC:32:08:53:8A:25:56
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F6C5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD8BC0141EA411F08C2EE935C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:44:50 +0000
ROA not before: Mon 06 Jul 2026 17:44:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153799
IP address blocks: 163.227.106.0/23 maxlen: 24
2001:df5:62c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63173 (0xf6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:44:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be992-d318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:5c:55:e6:38:3d:d7:95:c5:63:e7:21:d3:
40:55:c5:21:e9:f7:fd:f3:d4:bf:e3:0d:99:27:33:
c1:5b:7d:ab:3a:21:93:10:21:e3:98:f0:3b:a4:21:
84:06:e8:ca:0b:fa:f3:e5:70:f9:ba:3a:8a:5e:dd:
21:a6:e4:50:dd:a9:63:2d:e3:38:af:c1:3b:1a:6e:
34:ee:f8:54:a8:11:21:79:a3:1c:c4:93:5a:3a:5c:
6c:be:b7:bd:d9:21:ce:1e:76:7f:c7:58:a8:55:b7:
72:f7:39:09:3c:10:c6:b1:7e:59:b1:b1:ee:02:37:
a3:66:b4:ed:4b:af:87:33:ab:60:ab:82:b8:32:70:
5c:05:cc:db:ef:7c:6d:16:ab:52:0e:57:21:0e:a9:
38:37:8e:91:0c:22:dd:e8:1c:5f:73:85:db:b5:d3:
05:f7:85:97:b9:ff:00:2e:a7:54:f6:ec:05:60:3c:
2f:fd:3a:72:fb:66:ae:6e:a9:a6:f9:00:7c:fc:83:
91:dc:4f:42:d1:2c:06:ae:da:7b:28:1f:83:ce:15:
da:79:78:8d:4b:31:ad:a4:93:4c:81:26:d1:da:1f:
5f:01:f2:c6:7d:12:d2:7b:14:86:2f:13:67:0a:58:
d6:06:12:0c:cc:62:3a:be:c4:83:0c:5c:54:a5:5b:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:29:3D:59:BC:BB:A2:CF:4B:05:1E:AA:3E:DC:32:08:53:8A:25:56
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD8BC0141EA411F08C2EE935C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.106.0/23
IPv6:
2001:df5:62c0::/48
Signature Algorithm: sha256WithRSAEncryption
2c:76:ca:05:66:18:52:7a:22:e7:ef:d8:cf:aa:33:48:d9:be:
d9:f5:cb:d0:55:0c:19:6c:cd:8f:27:12:74:8e:d7:3c:5a:10:
60:a2:90:ec:d7:a1:c8:f8:95:d9:4f:c4:34:f4:01:6c:d4:63:
6d:7e:24:b0:64:d6:0c:6e:2e:b7:82:a9:7e:d3:73:39:f5:39:
c5:6e:a8:72:09:db:c3:96:94:96:9c:55:d4:0b:67:19:68:82:
10:83:54:67:ca:7c:8c:fa:7d:a1:d6:70:30:8b:23:ac:8d:8f:
d0:d5:71:f3:85:9f:95:1b:0a:ac:5c:a1:41:4a:61:3d:74:3d:
39:44:58:cc:a9:50:89:4b:64:81:ea:59:45:06:5f:c7:ad:5f:
d9:99:f6:13:34:24:bd:bf:03:1c:3f:cb:20:77:27:a0:ee:7d:
9f:ce:85:38:ea:9b:7d:73:8c:e2:9b:de:bc:3d:87:82:23:6a:
44:d5:2c:c9:8c:b6:19:7e:f4:79:82:a0:23:bd:66:80:85:9b:
f3:b7:bd:7b:84:0a:be:e5:83:b7:4e:62:92:77:f1:85:a7:f4:
9d:52:b7:39:55:27:96:8b:fa:a8:5d:a3:fa:1f:ad:ec:df:2a:
42:ea:2a:2f:92:e5:8a:f2:e6:dc:a4:de:e1:ce:4e:f5:b2:1b:
87:d9:d7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:23 2026 by rpki-client