
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/A8DB81885E3911F1AE025C80017AAC22.roa
File: A8DB81885E3911F1AE025C80017AAC22.roa (raw, json)
Hash identifier: iqMAWetYjvjnn5VbOnaERsf5lh+EVkjU6KxJWxQvoqc=
Subject key identifier: F4:A5:38:65:3D:79:1B:90:05:CA:62:91:2B:E6:03:FD:A2:BA:E2:D9
Certificate issuer: /CN=A918FE64/serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Certificate serial: 02
Authority key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/A8DB81885E3911F1AE025C80017AAC22.roa
Signing time: Tue 02 Jun 2026 04:15:16 +0000
ROA not before: Tue 02 Jun 2026 04:15:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149835
IP address blocks: 162.4.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 04:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Validity
Not Before: Jun 2 04:15:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1e58d4-9fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:fd:af:44:c7:d1:3b:f9:6e:95:e5:31:0e:
5a:91:a5:8b:f7:c4:83:cb:74:75:5c:af:5d:4e:e8:
aa:03:dc:b3:62:4e:0c:c6:47:d1:80:59:08:20:b4:
22:bf:d7:a8:f9:c0:37:70:45:5b:26:3b:84:1f:b1:
1a:86:4e:69:39:d7:2c:c0:3e:c3:f7:44:1e:48:71:
3a:59:5d:65:6c:27:da:77:5b:0d:b5:2b:f8:62:14:
0d:99:77:6f:cc:b7:fa:cc:60:60:59:61:3f:31:8d:
73:ed:07:3e:84:80:59:2a:bf:0a:aa:a3:1c:4a:3e:
3b:62:5d:56:b4:ff:79:c3:65:f6:16:b1:a4:36:47:
90:be:f0:67:1e:cc:d3:24:6d:51:f0:75:41:4d:5b:
22:19:21:54:42:d6:04:b9:77:58:90:19:a1:af:ef:
c5:06:94:48:19:b6:7f:41:87:e3:13:6e:2c:2f:1a:
94:ab:82:74:11:6c:1b:66:a2:ab:a1:68:43:4c:7e:
f4:b2:d2:bc:de:dd:45:2e:f5:95:83:28:29:3e:8d:
b7:52:74:f4:a2:e9:9f:35:d7:50:fb:41:33:01:23:
25:24:a6:7d:0e:58:aa:15:ce:3f:9c:93:9d:31:90:
b1:4e:f5:7a:67:3a:00:b5:1b:b3:53:65:90:3b:38:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A5:38:65:3D:79:1B:90:05:CA:62:91:2B:E6:03:FD:A2:BA:E2:D9
X509v3 Authority Key Identifier:
keyid:10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/A8DB81885E3911F1AE025C80017AAC22.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.58.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8f:dc:20:9f:55:eb:57:9c:a7:10:1a:5f:6f:eb:7d:38:a8:
bc:f9:22:70:7c:0f:f1:16:12:ae:67:40:aa:9a:20:70:11:7d:
12:5b:bd:fc:23:0f:c2:77:c9:76:89:9f:01:46:32:46:27:c2:
06:3c:d0:cd:3e:26:f9:dc:17:9a:d9:62:fe:5b:43:b2:19:2f:
56:c3:f5:a0:fb:28:8d:d7:00:f8:fe:7b:9a:1a:bb:c7:07:d6:
15:77:d0:23:c1:b8:e7:a9:54:ad:ad:75:4f:ad:8f:30:c5:bf:
d4:ee:ef:ee:c3:7d:da:66:90:1f:ec:04:65:44:a0:5a:d7:ee:
c0:69:0e:a9:f6:07:83:18:5e:97:d3:eb:55:9f:00:c1:2c:31:
b3:c5:fb:5d:77:ae:04:ee:0e:21:10:3e:00:24:49:c7:dc:10:
4c:8c:12:7b:bd:2d:b6:b4:be:85:cb:18:d3:b0:0c:59:e3:cf:
27:3f:3d:0a:a6:33:e8:5a:7c:de:00:bf:38:4c:61:57:ec:40:
f5:33:22:f6:4b:06:a7:3d:1a:81:c6:b0:0e:17:05:d2:12:63:
e4:6e:52:e0:f5:16:bd:d7:9a:7d:71:76:b9:40:10:fb:b4:0a:
b2:82:f1:5e:d9:a7:60:5c:ea:fa:a7:18:d3:71:f8:41:8b:79:
60:c1:55:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:06 2026 by rpki-client