
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D04405EC3E4011F1BADE7F4BBD833773.roa
File: D04405EC3E4011F1BADE7F4BBD833773.roa (raw, json)
Hash identifier: /zec4mZ37+JF6EiRQGdmQht46Q7qj5gFH9s0vuccuVo=
Subject key identifier: 22:00:80:4D:15:6C:26:15:7E:78:7A:4B:93:3C:1F:B2:62:42:44:64
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E9F5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D04405EC3E4011F1BADE7F4BBD833773.roa
Signing time: Sun 31 May 2026 17:40:15 +0000
ROA not before: Sun 31 May 2026 17:40:15 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151708
IP address blocks: 27.124.72.0/24 maxlen: 24
27.124.72.128/25 maxlen: 25
27.124.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59893 (0xe9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:40:15 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c727f-26b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:74:21:3f:03:a3:77:4d:d4:f8:8b:5a:30:
a6:57:4a:c9:9f:88:9f:32:ca:c8:fe:d6:4a:bb:bf:
ab:e7:c9:2a:9b:f0:22:a6:0b:c0:7d:ed:49:bf:d3:
de:5e:f8:47:48:2b:6f:71:54:c2:69:63:3c:fa:ee:
34:28:f8:ca:28:8e:f7:13:58:48:12:ec:ae:80:18:
a6:dc:31:da:f0:25:ef:89:7f:62:4f:fd:65:9c:ef:
b1:e3:c8:f5:37:91:5b:8a:f3:c6:9f:da:14:04:d7:
6b:2f:ed:1c:b6:bd:67:7b:a7:dd:fd:3c:2d:94:30:
c3:a2:08:78:c0:0e:71:0c:23:c8:09:d1:5e:eb:c3:
be:05:df:52:cb:24:e8:da:75:67:e1:bf:5e:1c:4b:
a0:14:f6:62:e9:cd:86:a3:68:b6:7e:37:d2:c2:ae:
c0:76:34:75:83:75:21:62:9d:ef:a3:a1:45:7b:8d:
ea:78:75:4c:13:ec:7d:95:23:8c:aa:58:15:ad:66:
12:70:78:6f:39:3f:69:fc:56:17:69:de:4c:f5:fb:
87:a4:52:f6:74:5d:87:5e:3e:21:22:b0:4f:25:3a:
80:29:e0:5c:01:37:e2:29:fd:f2:61:bb:63:e5:89:
ac:68:91:b3:ad:c5:64:90:78:42:c4:21:17:a3:95:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:00:80:4D:15:6C:26:15:7E:78:7A:4B:93:3C:1F:B2:62:42:44:64
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D04405EC3E4011F1BADE7F4BBD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
27.124.72.0/23
Signature Algorithm: sha256WithRSAEncryption
51:8d:6c:33:2f:28:e9:58:2c:3f:61:7d:85:ae:9d:95:25:ac:
07:be:38:d4:2d:d1:94:6f:94:cf:c4:49:ed:20:44:f1:f3:10:
d7:d5:24:30:a4:e7:20:6f:51:de:9a:bd:b5:b8:df:98:86:ba:
cd:24:35:7c:9c:76:2c:33:7c:db:37:5a:00:20:76:f3:bd:5c:
03:c1:60:65:e5:8d:e8:8e:8b:62:fb:0f:6c:e0:b3:d2:02:6d:
f4:5b:fa:0b:a0:51:41:f6:18:e3:72:67:59:29:3d:93:5b:14:
ad:4d:ac:dd:f7:81:02:61:69:0d:41:ff:a9:f3:e2:0e:28:03:
7c:43:af:8b:82:f7:0b:f1:10:c8:18:9b:a1:3d:51:e2:a4:32:
c9:f9:1c:2a:06:b0:67:9d:fd:96:0b:0f:e0:a3:b3:87:88:be:
71:a0:8b:dd:46:f0:1f:06:39:63:dc:44:a4:a6:c5:45:86:74:
33:45:1d:f6:d3:13:a2:32:22:38:d1:b5:e7:2f:21:0c:25:a5:
cd:06:7b:08:58:c9:e4:47:d1:f8:c5:d2:30:df:68:37:23:07:
04:76:f7:f4:27:6b:47:fb:ce:6d:76:dc:44:8e:47:de:04:85:
22:e5:7f:3a:83:54:52:0e:e6:53:7c:91:ef:67:76:b4:ca:ca:
96:89:f8:56
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOn1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3NDAxNVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcyN2YtMjZiMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKDAdCE/A6N3TdT4i1owpldKyZ+InzLKyP7WSru/q+fJKpvwIqYLwH3tSb/T
3l74R0grb3FUwmljPPruNCj4yiiO9xNYSBLsroAYptwx2vAl74l/Yk/9ZZzvsePI
9TeRW4rzxp/aFATXay/tHLa9Z3un3f08LZQww6IIeMAOcQwjyAnRXuvDvgXfUssk
6Np1Z+G/XhxLoBT2YunNhqNotn430sKuwHY0dYN1IWKd76OhRXuN6nh1TBPsfZUj
jKpYFa1mEnB4bzk/afxWF2neTPX7h6RS9nRdh14+ISKwTyU6gCngXAE34in98mG7
Y+WJrGiRs63FZJB4QsQhF6OVwUMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQiAIBN
FWwmFX54ekuTPB+yYkJEZDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0QwNDQwNUVD
M0U0MDExRjFCQURFN0Y0QkJEODMzNzczLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEARt8SDANBgkqhkiG9w0BAQsFAAOCAQEAUY1sMy8o6VgsP2F9ha6d
lSWsB7441C3RlG+Uz8RJ7SBE8fMQ19UkMKTnIG9R3pq9tbjfmIa6zSQ1fJx2LDN8
2zdaACB2871cA8FgZeWN6I6LYvsPbOCz0gJt9Fv6C6BRQfYY43JnWSk9k1sUrU2s
3feBAmFpDUH/qfPiDigDfEOvi4L3C/EQyBiboT1R4qQyyfkcKgawZ539lgsP4KOz
h4i+caCL3UbwHwY5Y9xEpKbFRYZ0M0Ud9tMTojIiONG15y8hDCWlzQZ7CFjJ5EfR
+MXSMN9oNyMHBHb39CdrR/vObXbcRI5H3gSFIuV/OoNUUg7mU3yR72d2tMrKlon4
Vg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:01:20 2026 by rpki-client