
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/8601959679DF11F193D499DB65A30FBC.roa
File: 8601959679DF11F193D499DB65A30FBC.roa (raw, json)
Hash identifier: dJ72wAJA0nbSV+h9SeoXcj3siEq/Cclo9TYNDcphMSQ=
Subject key identifier: 06:A1:41:BC:7F:BF:0E:8A:8C:58:09:F0:0F:09:F7:21:FB:9E:2D:2D
Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial: EF
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/8601959679DF11F193D499DB65A30FBC.roa
Signing time: Tue 07 Jul 2026 08:40:36 +0000
ROA not before: Tue 07 Jul 2026 08:40:36 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135044
IP address blocks: 163.223.234.0/24 maxlen: 24
2001:df5:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Validity
Not Before: Jul 7 08:40:36 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a4cbb84-7895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:6c:21:e0:65:5b:7e:83:c2:fb:d8:47:13:
bd:b9:03:65:7b:6c:bc:3c:bd:95:0a:55:57:11:e9:
f4:21:d2:2b:8c:9b:9f:1f:75:9f:be:76:4b:82:75:
83:e3:5c:73:5c:92:82:51:d1:45:51:c6:9f:51:17:
91:c1:8d:ac:27:6a:ba:45:cb:7b:9c:5e:3a:ba:5e:
fa:91:9f:84:93:95:b8:68:ad:51:f9:fa:ec:c4:ef:
03:68:fc:94:33:42:4a:89:ed:c2:4c:7d:63:c5:d4:
b6:ce:4a:a5:09:2c:b6:59:d0:da:40:28:13:f3:11:
21:2c:2f:06:0d:bd:68:d9:98:43:1d:39:93:6c:d1:
d6:90:16:64:bf:77:4f:45:cc:89:8a:90:de:1a:55:
66:8e:cb:9e:05:b1:07:fa:b3:cf:49:e4:10:18:ef:
7e:53:e1:05:d5:24:52:fc:6a:66:99:cf:8a:26:48:
16:af:3f:a9:d3:fa:92:fe:f8:9d:5b:fb:49:29:46:
a9:13:20:4b:d9:63:44:b2:93:70:d9:19:b9:ab:f6:
3f:2d:39:70:40:4d:83:cb:f1:f9:69:27:18:9e:00:
28:b5:81:41:98:35:c5:07:db:84:1f:29:42:90:99:
1d:91:7e:9f:00:91:9f:bd:82:dd:ef:f0:66:91:6c:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A1:41:BC:7F:BF:0E:8A:8C:58:09:F0:0F:09:F7:21:FB:9E:2D:2D
X509v3 Authority Key Identifier:
keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/8601959679DF11F193D499DB65A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.234.0/24
IPv6:
2001:df5:5040::/48
Signature Algorithm: sha256WithRSAEncryption
43:66:4f:ce:2f:a2:b0:1a:e3:60:3e:3c:24:cd:bd:bf:e9:38:
61:fc:41:43:55:df:17:6b:c1:fe:02:2b:ed:f0:3e:a9:f9:b2:
b2:9b:31:ba:4e:8a:d2:14:d9:87:18:c8:07:ca:a3:88:c7:61:
7c:3b:c9:70:5c:19:9a:37:07:03:a1:28:9f:05:3f:24:3b:dd:
c2:62:2a:91:74:fb:9e:4e:8c:da:fc:35:54:e9:a7:c1:54:64:
55:82:81:d8:4f:e5:ef:54:24:05:b3:ac:7b:4b:09:4b:36:69:
bd:58:b6:bf:47:ef:59:6d:48:ec:7f:a1:85:cb:07:12:1b:f2:
65:fa:4f:1c:21:7e:35:21:25:99:f2:ba:0a:26:b2:31:85:f5:
8b:3e:2f:bf:51:a9:53:e4:85:7a:36:4f:b4:10:c4:55:b8:a1:
40:2e:b2:0c:42:df:ed:97:d4:2f:e7:c3:e1:d2:27:38:4a:3e:
30:71:ae:bc:89:1d:6f:59:bd:a8:ef:41:3e:bb:57:fa:7f:7b:
77:af:80:50:ee:4e:a5:0c:d8:75:be:1a:06:62:d1:35:83:92:
38:03:86:d0:c0:06:d7:77:62:9e:bb:f9:3f:16:fb:90:3a:d1:
61:81:67:d0:04:47:6a:21:e1:37:56:8d:30:05:e9:ae:6f:3c:
47:04:80:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:10 2026 by rpki-client