
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9CEC99834CD11F1B434550FC9833773.roa
File: D9CEC99834CD11F1B434550FC9833773.roa (raw, json)
Hash identifier: ugFtFX27LRWPwocED2gWGXOjajrngqE2vMdR+0ucwAw=
Subject key identifier: DC:8E:45:0C:9B:5E:11:C5:93:F2:98:5F:2F:52:55:C7:98:4A:CF:87
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F717
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9CEC99834CD11F1B434550FC9833773.roa
Signing time: Mon 06 Jul 2026 17:47:44 +0000
ROA not before: Mon 06 Jul 2026 17:47:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154592
IP address blocks: 163.128.166.0/23 maxlen: 24
2402:54e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63255 (0xf717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:47:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bea40-1fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:49:3b:22:5e:49:3d:45:79:38:3e:c1:42:
34:89:30:bd:35:30:6f:ab:1b:72:bc:f9:f4:0f:09:
dd:78:7b:55:55:e8:cb:6d:52:a4:44:16:cb:92:58:
86:05:09:da:3a:11:7a:2d:50:5e:cc:80:ba:b9:6b:
6b:01:6c:3b:24:f1:07:74:27:d6:39:e3:4d:c2:99:
a2:42:83:11:8e:68:36:2b:b9:d8:88:ed:42:47:de:
e2:78:01:e4:0c:4c:c1:e6:dd:72:7e:5e:2c:91:7c:
8b:22:3e:83:f8:7a:76:c2:77:ba:7c:0d:6e:95:5b:
ee:da:54:e1:65:70:5d:bf:5f:8d:dc:28:64:b8:f8:
70:85:9d:6a:a7:7c:b9:ac:5d:99:36:7c:a6:48:17:
ea:36:a8:5e:2b:f8:da:d1:5c:a6:0c:bd:5a:b5:10:
00:04:02:31:31:e6:9f:92:d3:5f:a7:b3:1d:b8:db:
2b:7b:d7:71:9f:3d:7c:fb:00:22:4f:a3:92:fe:80:
81:aa:2b:0a:d9:b3:54:2d:7c:aa:f2:d8:7f:2e:41:
ab:39:cf:c3:8f:2c:be:f7:53:d7:7a:ff:6d:30:d2:
67:56:65:65:2e:f1:cc:4c:d0:e8:f2:ab:01:90:9a:
36:a9:d7:14:8a:d8:b4:34:e1:a5:25:74:7e:86:40:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:45:0C:9B:5E:11:C5:93:F2:98:5F:2F:52:55:C7:98:4A:CF:87
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9CEC99834CD11F1B434550FC9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.166.0/23
IPv6:
2402:54e0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:06:7b:f6:25:5c:4b:b6:02:f8:8e:74:49:33:ab:f2:c0:45:
d5:54:71:4a:a7:89:dc:16:1e:f6:52:61:92:ae:e7:11:9d:96:
ec:13:83:d6:a1:01:4f:39:61:bd:e7:f8:b6:22:3f:c6:db:fe:
67:04:28:50:7b:a5:5b:81:a0:32:5a:55:d3:31:33:ab:b6:a1:
df:a1:bc:61:15:b6:6d:65:19:b1:ed:99:cb:14:27:d8:62:24:
c2:69:73:f1:96:2a:bb:16:d8:f6:a0:48:ae:b5:e4:b4:d6:ef:
10:4b:3e:f2:6d:4a:c2:85:44:cf:66:16:5b:7b:c9:5e:38:70:
48:5b:3b:18:c7:4e:1b:f1:3a:e1:81:76:de:6a:97:32:da:77:
de:16:ff:c9:f4:cc:49:6c:70:7f:f2:2d:fd:bd:77:23:23:27:
30:61:d7:f5:38:9a:66:1d:38:fe:8a:7b:da:01:ad:64:9b:c8:
95:2d:5a:1d:bb:b0:92:f2:5d:0e:61:d1:bf:bb:84:12:61:d6:
a6:1c:a4:53:e1:a4:52:d4:10:f6:1a:bb:77:50:23:8e:39:b5:
3e:71:f6:df:da:d8:c4:4b:14:ac:65:af:d8:0f:a4:6e:40:c0:
c4:c5:3c:b8:11:d9:dc:02:f3:1f:45:69:83:c5:7f:ab:f0:bf:
6b:bf:d6:ab
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAPcXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NDc0NFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmVhNDAtMWZhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN5OSTsiXkk9RXk4PsFCNIkwvTUwb6sbcrz59A8J3Xh7VVXoy21SpEQWy5JY
hgUJ2joRei1QXsyAurlrawFsOyTxB3Qn1jnjTcKZokKDEY5oNiu52IjtQkfe4ngB
5AxMwebdcn5eLJF8iyI+g/h6dsJ3unwNbpVb7tpU4WVwXb9fjdwoZLj4cIWdaqd8
uaxdmTZ8pkgX6jaoXiv42tFcpgy9WrUQAAQCMTHmn5LTX6ezHbjbK3vXcZ89fPsA
Ik+jkv6AgaorCtmzVC18qvLYfy5BqznPw48svvdT13r/bTDSZ1ZlZS7xzEzQ6PKr
AZCaNqnXFIrYtDThpSV0foZAbx0CAwEAAaOCAm8wggJrMB0GA1UdDgQWBBTcjkUM
m14RxZPymF8vUlXHmErPhzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q5Q0VDOTk4
MzRDRDExRjFCNDM0NTUwRkM5ODMzNzczLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAaOApjANBAIAAjAHAwUAJAJU4DANBgkqhkiG9w0BAQsFAAOCAQEA
PAZ79iVcS7YC+I50STOr8sBF1VRxSqeJ3BYe9lJhkq7nEZ2W7BOD1qEBTzlhvef4
tiI/xtv+ZwQoUHulW4GgMlpV0zEzq7ah36G8YRW2bWUZse2ZyxQn2GIkwmlz8ZYq
uxbY9qBIrrXktNbvEEs+8m1KwoVEz2YWW3vJXjhwSFs7GMdOG/E64YF23mqXMtp3
3hb/yfTMSWxwf/It/b13IyMnMGHX9TiaZh04/op72gGtZJvIlS1aHbuwkvJdDmHR
v7uEEmHWphykU+GkUtQQ9hq7d1Ajjjm1PnH239rYxEsUrGWv2A+kbkDAxMU8uBHZ
3ALzH0Vpg8V/q/C/a7/Wqw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:29 2026 by rpki-client