
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC56AAE095FA11ECB7EB9262C4F9AE02.roa
File: CC56AAE095FA11ECB7EB9262C4F9AE02.roa (raw, json)
Hash identifier: k0peoHbanI3tC5IN/G7rgPlrhqh5Php4J0I5EmSX8Yo=
Subject key identifier: EC:32:35:CC:B3:06:FC:8B:05:7E:C2:B4:AF:6F:A1:BA:8B:03:47:17
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FE13
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC56AAE095FA11ECB7EB9262C4F9AE02.roa
Signing time: Mon 12 Oct 2026 10:23:27 +0000
ROA not before: Mon 12 Oct 2026 10:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7633
IP address blocks: 203.129.222.0/24 maxlen: 24
203.193.161.0/24 maxlen: 24
2402:ef1c::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65043 (0xfe13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 12 10:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6accb51f-8b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:35:c4:3e:eb:f4:6b:c6:46:10:f3:39:86:
ef:6a:7f:65:30:da:ee:3c:6a:0a:5c:a8:39:dd:25:
a0:eb:b5:ff:3f:0e:7b:98:28:c1:03:e7:8b:b9:27:
68:e8:4d:b8:5c:a4:27:d2:b1:aa:2c:4d:fe:8a:5b:
74:5a:c6:79:99:b2:2d:2d:a9:6c:d8:a0:e1:37:2d:
87:7d:1e:4c:5e:5c:d0:5d:85:f7:06:5d:0b:ea:c9:
12:ec:c7:0e:18:bc:da:f2:36:ba:e2:12:c4:66:fc:
e1:9d:1a:1e:62:3f:14:fd:23:01:c7:4a:52:8c:86:
f2:59:f7:88:5f:e2:69:b7:2e:f4:8c:01:8d:8e:87:
a3:19:00:0c:c3:14:cf:82:ba:66:0c:30:c6:1a:82:
70:b0:d8:8e:77:c9:86:75:04:99:82:4b:67:a5:33:
cd:e4:36:07:08:14:b0:86:b6:ed:4c:c9:69:2c:6b:
89:4f:9a:9e:79:30:35:49:2e:09:f4:15:9e:05:c3:
16:2b:fc:e7:b2:75:18:ec:b2:ca:76:53:b6:ce:f0:
91:35:3b:85:98:b6:4b:46:7d:81:bf:29:83:e9:9b:
a4:83:66:a7:28:8c:22:1a:b0:3b:cc:fa:dc:3a:1d:
0f:43:7e:71:de:b9:02:86:e9:a1:46:21:84:98:81:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:35:CC:B3:06:FC:8B:05:7E:C2:B4:AF:6F:A1:BA:8B:03:47:17
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC56AAE095FA11ECB7EB9262C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.129.222.0/24
203.193.161.0/24
IPv6:
2402:ef1c::/32
Signature Algorithm: sha256WithRSAEncryption
6b:8c:13:3d:24:f1:dc:29:61:03:5f:d1:61:b4:64:93:7a:b7:
8a:87:bf:b8:ec:bd:d9:4e:91:15:3a:4d:ba:26:40:29:a9:14:
e4:2c:87:e2:38:5f:65:d0:32:d8:dd:87:fc:92:e8:6b:34:60:
62:9d:0d:11:40:6a:2f:da:c6:22:a1:c0:58:0b:51:1b:cc:10:
ef:67:91:e0:38:35:b2:99:80:a6:1f:3d:92:17:39:d6:5c:7c:
56:05:46:91:69:e0:57:a7:d7:f6:d3:4f:6a:ed:73:ef:ef:db:
48:08:43:2d:00:10:40:a7:37:c5:47:1a:21:78:de:86:d7:10:
fc:59:b2:d4:e1:7b:c5:a4:1e:b4:e4:80:c1:30:9e:5c:3c:90:
37:d6:75:d2:13:9b:21:e9:29:f7:53:1e:4b:dc:81:ec:8d:19:
bd:1c:68:5b:07:92:c1:30:ef:43:fb:ba:5a:bf:b7:be:a9:11:
b5:3e:09:fa:7b:f2:73:a9:22:61:21:cd:26:04:1a:e6:2f:00:
5a:8f:4a:c2:a6:e0:9a:54:ae:ff:db:37:2c:0a:03:19:c6:9a:
a5:7a:be:44:59:ac:c5:21:a1:5e:7d:c0:43:22:00:ed:5a:ac:
1b:ee:ee:cb:01:7b:88:75:3a:6f:85:9d:65:ad:81:94:cf:97:
91:45:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:21:59 2026 by rpki-client