
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9AA7950249DF11F19EB53673AE833773.roa
File: 9AA7950249DF11F19EB53673AE833773.roa (raw, json)
Hash identifier: MXOd0+px7q6CDq9o//y8e1NvceuUbaOrM8lBbyHhUFg=
Subject key identifier: 6A:B7:9F:33:E4:FB:78:17:33:2D:14:A0:B8:20:E8:3D:D1:47:29:E2
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2DEA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9AA7950249DF11F19EB53673AE833773.roa
Signing time: Thu 07 May 2026 06:40:15 +0000
ROA not before: Thu 07 May 2026 06:40:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154650
IP address blocks: 162.4.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11754 (0x2dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 7 06:40:15 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69fc33cf-ebe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:b0:96:83:8c:cb:11:22:fe:ea:4d:6f:5e:
2c:cf:11:d7:a1:a4:bd:8a:83:3d:dc:5a:a4:fc:08:
23:3e:5a:1a:a5:c4:c8:a4:07:15:35:f5:f8:87:bc:
ea:41:42:f9:e8:df:8c:04:b2:b5:ea:02:9c:61:ae:
17:20:75:e9:b9:bf:1e:55:2b:42:73:9e:bc:a2:05:
f1:45:ff:90:8f:3a:88:64:6c:16:b8:9c:07:5d:50:
6d:9f:28:f0:79:34:1a:5a:54:9b:cb:ad:9f:d3:d3:
09:a6:d3:ad:0d:8d:c8:af:16:99:a4:71:4d:87:17:
85:da:9d:47:c8:f5:0d:d0:58:ac:81:10:49:c5:b8:
42:42:1d:b3:92:62:e3:fd:38:a0:12:f9:61:2d:23:
45:52:7f:5a:4b:ce:b1:b2:18:cd:db:8e:ef:7a:fe:
f4:e5:22:5f:10:37:98:7f:8b:5b:3f:6b:10:f7:cf:
b3:c9:12:14:bf:99:9f:88:21:83:d2:6a:7e:75:90:
49:fb:0d:74:14:30:7b:94:ba:80:1c:d7:2f:d8:c8:
46:4b:6f:65:d3:49:4a:5c:0c:41:c2:c8:14:af:92:
6d:fe:51:06:11:2e:97:4a:bf:fb:6f:0a:9b:82:d1:
d1:55:ca:3b:9e:02:60:66:f9:a0:52:c6:de:52:aa:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B7:9F:33:E4:FB:78:17:33:2D:14:A0:B8:20:E8:3D:D1:47:29:E2
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9AA7950249DF11F19EB53673AE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.72.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:14:6a:09:b6:8c:2e:d2:be:bb:26:6f:c2:43:c1:c0:0b:07:
ea:cc:31:db:a9:df:88:64:d3:aa:f2:ce:f2:59:11:4b:ea:41:
76:18:e3:3e:b3:aa:55:e1:a9:50:67:b6:da:f6:3e:64:c3:9f:
c4:43:91:c4:9e:51:1d:62:ff:13:5c:2e:77:3b:72:6c:1a:9a:
82:54:0c:73:f5:12:c2:8d:8f:3f:83:59:58:21:5c:66:1d:19:
44:5c:14:1e:21:55:d6:45:01:fe:68:b1:56:f5:ce:27:08:30:
d7:d9:a5:2f:bd:b2:c1:83:38:25:95:8f:1d:d4:bf:db:e6:06:
83:36:2d:bb:28:76:fc:ab:20:b2:2e:b7:70:6e:df:b0:7f:6e:
39:8d:49:da:56:6b:cf:9b:8e:88:bc:d9:51:8c:89:09:1a:8b:
7f:81:a1:e4:d8:ab:29:5b:38:0f:2b:72:d0:4a:5d:78:e6:8d:
13:d0:5e:97:12:96:28:7b:b7:27:9e:5b:27:cd:c7:7d:a7:3f:
3d:07:80:3b:5d:69:82:87:e3:1d:dc:3e:f5:8b:0c:e3:21:74:
9c:cf:a0:4c:82:95:5a:0f:d2:7a:13:b3:32:e7:37:d3:0e:d1:
ef:1a:0d:74:4e:cb:12:eb:83:ee:81:77:26:17:6b:2e:91:57:
ef:7c:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:30 2026 by rpki-client