
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/3A6DC4F4829C11F1A9F8AFE869A30FBC.roa
File: 3A6DC4F4829C11F1A9F8AFE869A30FBC.roa (raw, json)
Hash identifier: WUHe+xm2s7KQRGDEn1dhB4Wm51SPdg0ugPZNxSGnrGQ=
Subject key identifier: 60:D9:5F:E4:51:9F:2A:1E:28:3D:09:6C:27:67:62:4C:9B:34:FA:90
Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial: FA
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/3A6DC4F4829C11F1A9F8AFE869A30FBC.roa
Signing time: Sat 18 Jul 2026 11:31:33 +0000
ROA not before: Sat 18 Jul 2026 11:31:33 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 136380
IP address blocks: 163.223.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Validity
Not Before: Jul 18 11:31:33 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a5b6415-4591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7d:53:90:7a:14:5e:47:b4:b9:32:41:07:a4:
4f:d4:81:5c:32:f1:d6:34:a1:73:1d:43:2e:7d:a2:
74:3c:be:ec:1d:5c:d5:f4:9d:64:9b:14:14:4a:46:
3e:f2:82:cb:9c:9b:24:6a:8c:17:24:59:5c:ce:af:
a4:f9:16:89:fa:c3:9a:bd:d9:5a:7b:0e:7a:3c:b3:
a5:50:9d:c6:97:cb:5e:b8:f1:e3:11:0a:ae:83:85:
ba:cd:db:61:3d:37:d9:ef:52:3a:41:a1:35:bf:ff:
c4:11:e4:2f:91:a0:c7:13:f1:b5:bc:22:87:28:a8:
3d:53:d0:dc:00:e2:bd:cc:de:65:8b:f6:28:d1:2d:
3e:30:ea:7d:a7:7b:73:24:a3:05:ae:88:39:41:01:
d4:01:4b:f8:18:5e:c6:53:68:55:c9:a1:af:af:31:
1d:c7:11:e8:07:1e:c9:e7:7f:c2:5c:4a:80:c0:ec:
05:7a:0c:a4:aa:86:d4:ae:b5:58:1e:82:f6:9a:29:
a8:79:6f:cc:f6:bb:e8:36:1e:ea:8c:68:43:30:f5:
9b:fb:74:74:ec:c9:9b:3e:95:04:22:0b:5e:90:f8:
0f:1a:5a:45:a1:89:d1:8f:d6:92:bb:d2:0e:77:84:
6d:cf:f7:cf:44:ca:83:a6:02:1a:b8:2b:29:07:f5:
88:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D9:5F:E4:51:9F:2A:1E:28:3D:09:6C:27:67:62:4C:9B:34:FA:90
X509v3 Authority Key Identifier:
keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/3A6DC4F4829C11F1A9F8AFE869A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.235.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:31:c3:b7:08:05:f0:12:a7:27:13:21:2a:8a:c0:13:de:1e:
0d:76:26:07:ab:fd:6e:4d:44:c6:03:54:fa:b5:56:52:15:11:
49:8e:09:71:2b:80:b1:2b:a7:5c:87:fc:eb:8a:82:cd:03:9b:
6c:8d:c2:08:bf:32:72:08:9c:51:cd:cb:6e:36:43:b0:af:27:
be:29:e1:e5:84:14:6e:94:96:1d:25:27:0d:dc:fd:d6:59:0c:
ad:89:c6:32:71:43:a9:d5:39:ab:34:fb:2d:07:bb:0e:7a:a5:
f6:71:ef:7a:50:b6:80:c3:b1:bc:2e:d1:b5:2b:19:71:64:a5:
f1:21:a8:a1:2e:ec:44:b8:41:11:ee:7b:fd:c5:50:58:f4:14:
ee:e5:e4:cc:a1:4a:93:af:c4:7e:8b:a2:1e:bd:38:1c:cc:8e:
c8:ec:b0:0d:4a:b5:7f:b1:02:25:b0:8a:8b:b3:a8:de:e0:bf:
32:7e:21:af:d5:52:95:94:68:44:eb:69:a8:d6:5c:41:54:c5:
bf:70:e1:f9:ee:76:02:c0:24:19:98:53:0f:77:d5:21:ca:cd:
c6:99:57:9c:90:bb:c0:dd:6f:7b:c1:5e:74:98:0b:36:d1:15:
26:e6:60:49:63:7a:2a:5c:f0:83:42:58:93:7c:98:8f:84:94:
d6:8b:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:15 2026 by rpki-client