
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAEF64628F9C11EFBDA27B51C4F9AE02.roa
File: EAEF64628F9C11EFBDA27B51C4F9AE02.roa (raw, json)
Hash identifier: MbA9nY8jEKqY34ySF5XCZ5VAv9Bn3JM+CUjdEur7XAU=
Subject key identifier: A6:F5:0F:67:B4:20:1F:44:24:3F:14:BB:77:FF:CC:F7:4D:70:DA:54
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA73
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAEF64628F9C11EFBDA27B51C4F9AE02.roa
Signing time: Sun 31 May 2026 17:44:15 +0000
ROA not before: Sun 31 May 2026 17:44:15 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153261
IP address blocks: 160.20.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60019 (0xea73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:44:15 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c736f-35ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:04:2d:e0:2f:0c:96:42:d1:77:e2:da:51:44:
2d:3a:91:68:d3:b2:16:3e:2f:b5:d1:41:18:56:48:
0c:b9:56:bf:29:4c:08:90:0e:03:c5:ff:07:a4:19:
d2:19:73:5e:5a:ec:e2:5b:81:f4:43:27:db:43:dc:
fd:01:0a:d1:5d:3d:bd:bc:ea:4c:f6:06:9a:5e:02:
5d:72:29:37:c3:2c:cc:3d:bb:67:a0:ef:61:a4:8e:
d8:dc:50:6b:b8:26:61:1c:b7:83:af:1b:2a:20:dd:
2d:2f:f5:b2:61:7a:8a:d9:a7:8f:62:96:45:55:6d:
c9:6e:f8:77:a9:fa:af:f1:b1:ed:ed:73:91:6b:1d:
5a:76:a8:54:54:be:bb:7a:9e:9e:08:4f:c8:e3:a7:
8b:02:b2:54:ec:41:67:a9:fc:e3:e2:24:1c:94:02:
36:e9:93:fd:20:37:e9:24:e7:77:de:1c:dc:c2:89:
37:50:f5:19:d8:02:3c:69:93:35:4d:e7:d9:da:35:
00:b0:50:a2:72:99:9c:0c:c4:e4:35:a5:86:b9:5a:
d6:95:90:d5:8d:b8:f7:95:ec:f6:b0:b0:b8:a1:d3:
87:5e:0e:34:93:a1:b7:d8:8e:47:ad:8b:f8:c7:d2:
01:c7:0f:5e:b0:ff:71:1d:e5:db:cf:e7:00:ee:45:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:0F:67:B4:20:1F:44:24:3F:14:BB:77:FF:CC:F7:4D:70:DA:54
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAEF64628F9C11EFBDA27B51C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.20.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:88:41:22:43:bf:cd:0d:a7:33:97:44:85:2e:38:4f:d6:a1:
24:97:0d:f0:9b:24:56:4b:7a:9b:e3:fb:9f:da:56:16:9d:9f:
e4:b1:14:d0:6e:ee:52:1c:e9:e4:44:88:1e:42:8b:69:d4:7f:
58:ab:41:8f:cc:33:db:1e:46:55:d0:f8:78:f0:03:08:98:b6:
b8:a5:0b:b4:2d:9c:4c:16:28:79:7c:ad:ec:11:ec:91:76:c2:
dd:f3:a6:95:29:df:99:e7:c1:ce:ad:5d:91:7a:0b:08:f7:45:
58:5a:05:83:04:2e:5f:43:ed:e9:d5:a8:0f:de:c5:94:76:47:
00:bf:82:67:d5:b3:89:cf:5b:8b:3c:40:a4:bd:7c:15:e9:f2:
22:d4:f5:7d:83:de:08:ee:76:8d:10:f1:9f:88:73:a4:b2:8d:
cd:94:95:ea:8f:ab:06:9f:fb:2c:1d:70:93:97:41:88:9e:b1:
6f:32:79:e2:29:77:96:d4:94:ed:e0:4e:4e:54:85:ad:9d:fb:
3c:de:6a:f0:34:12:9e:e1:ef:ab:8a:fe:7b:4c:cd:a2:ce:ac:
93:d5:c9:0d:40:70:ea:8e:6f:a5:eb:c5:91:b1:43:e1:46:53:
3a:ac:a2:ed:25:1e:77:74:87:b3:65:b4:54:dd:23:33:42:3a:
ac:92:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:13 2026 by rpki-client