
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E16B0EE689C611EEB959850BC4F9AE02.roa
File: E16B0EE689C611EEB959850BC4F9AE02.roa (raw, json)
Hash identifier: sJjYofZvye2hlq91YJViSWlPBUVJYgX+5LnaoAXoqvU=
Subject key identifier: 23:D3:9A:73:C6:BD:0A:B4:DF:CD:CE:88:24:34:48:26:4E:45:40:C8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E9F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E16B0EE689C611EEB959850BC4F9AE02.roa
Signing time: Sun 31 May 2026 17:40:20 +0000
ROA not before: Sun 31 May 2026 17:40:20 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151711
IP address blocks: 116.199.204.0/24 maxlen: 24
203.23.1.0/24 maxlen: 24
2001:df3:1a40::/48 maxlen: 48
2001:df6:1340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59896 (0xe9f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:40:20 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7284-9043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:f4:0c:f9:e3:e5:b4:02:e1:dd:1e:f5:93:
ae:b9:65:d9:fe:ab:3c:8e:ad:62:0b:3b:1d:5f:6f:
65:af:a3:2a:68:ed:07:8f:fa:9e:07:ed:0a:55:42:
0e:8c:8a:1d:66:16:9a:6d:3e:39:c6:1c:72:fb:cf:
af:78:f9:5a:42:31:7e:36:53:b7:5d:ef:d4:fd:78:
f1:39:7a:34:5d:78:85:ca:bb:ff:5c:96:96:49:b1:
34:6e:0c:69:3c:a2:8b:75:6b:3b:59:a4:e8:7c:1a:
94:a7:3d:69:97:15:57:70:8c:ac:7b:f3:d7:fb:09:
65:21:b7:17:0e:e0:76:1a:98:3f:d6:f6:2b:ca:fc:
57:d3:3b:e9:1b:21:16:c6:f3:88:6b:36:87:a1:6a:
2f:3b:c3:80:d6:a9:23:f9:06:2d:01:5d:b2:8a:87:
a5:7d:a3:0d:51:58:ee:17:6a:7d:e3:f3:b9:51:44:
c3:af:d6:93:af:6b:83:c4:cf:cf:01:ad:f1:65:99:
d1:54:24:03:ee:28:f9:7d:2f:0c:a5:28:ff:65:98:
5d:d8:6a:ff:57:2b:2a:19:71:5e:f7:1e:b2:0a:e8:
03:cf:21:55:23:6e:d2:48:e2:55:13:a6:9e:a1:36:
48:b7:98:0e:fe:46:5b:bd:59:b6:a9:a0:fe:43:41:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D3:9A:73:C6:BD:0A:B4:DF:CD:CE:88:24:34:48:26:4E:45:40:C8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E16B0EE689C611EEB959850BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.199.204.0/24
203.23.1.0/24
IPv6:
2001:df3:1a40::/48
2001:df6:1340::/48
Signature Algorithm: sha256WithRSAEncryption
12:98:99:6b:25:c4:90:a7:b8:02:eb:4f:75:17:ca:c7:cf:ee:
fb:84:4e:85:67:04:a6:40:ae:18:d1:5a:eb:ac:87:66:c1:dc:
59:20:42:41:91:c2:3d:9d:e1:e4:16:7e:bb:e4:59:63:c0:c2:
24:32:fa:2b:fe:91:42:93:6f:84:d2:bd:6f:4c:80:a5:73:bf:
72:fb:49:ee:a9:a6:6c:36:10:da:c0:3f:6e:4f:4f:5d:20:ed:
5f:27:0c:d8:b0:fd:66:e9:38:44:70:f1:b3:16:17:ec:43:6f:
70:98:8e:d4:eb:c9:af:a3:6c:d0:fa:9f:80:26:50:95:85:f3:
43:e1:3f:2f:60:66:d7:72:1a:c5:b0:84:1a:c0:40:1f:02:b9:
48:be:fd:62:a7:f7:ba:f2:de:b4:f8:c4:d8:63:e6:31:63:64:
48:20:74:c9:69:5d:1c:8b:7e:27:9b:e9:40:cb:ce:bc:b0:e3:
74:22:be:a3:93:e4:eb:f9:db:85:8e:f6:f5:98:15:18:4d:72:
dd:39:2e:7f:57:3b:0b:ad:1a:a6:92:98:ff:5e:af:fc:a0:33:
05:7f:52:3c:c5:78:17:94:58:f3:d3:9e:e4:0f:c6:a6:23:25:
bf:37:59:61:a9:78:73:b4:11:82:e3:67:5f:7a:70:6e:b6:57:
71:d7:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:36 2026 by rpki-client