
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E1E08524AAD11F1BC41B1FFB6833773.roa
File: 2E1E08524AAD11F1BC41B1FFB6833773.roa (raw, json)
Hash identifier: y1C406ewL9KPl9IFqam9vG2FP4zsYGKEWp0yW+FtDJQ=
Subject key identifier: 6A:E3:A4:67:6D:3A:A9:BC:AD:4C:CB:A0:4E:37:1F:A0:94:A2:54:6A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E03C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E1E08524AAD11F1BC41B1FFB6833773.roa
Signing time: Fri 08 May 2026 07:11:49 +0000
ROA not before: Fri 08 May 2026 07:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154606
IP address blocks: 163.128.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57404 (0xe03c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 07:11:49 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69fd8cb5-2e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:0e:70:00:9d:23:0e:82:41:2e:f6:09:2a:
47:10:ea:2c:79:fa:16:14:43:2f:81:8c:4f:4b:2a:
16:48:89:29:0c:55:a0:54:6b:3c:57:66:64:ab:38:
94:e5:08:2d:81:af:f8:f6:1c:06:97:9e:94:4f:75:
d1:82:0d:52:3c:ca:a2:e3:34:8e:31:e2:65:c9:d1:
f6:87:91:1a:3e:27:26:53:42:9a:31:e9:1a:0e:4d:
f2:a0:da:d9:83:73:72:64:ae:cd:60:69:39:ab:ef:
f5:29:88:73:6f:84:01:8d:71:fe:e1:29:e3:63:f8:
3b:9d:46:24:f2:18:1c:f8:33:71:67:6b:bf:d7:67:
33:7e:be:22:70:51:c5:f5:48:77:99:a5:22:63:1c:
bc:b0:1e:7c:51:c5:78:71:00:a2:ab:45:1b:d1:3e:
1b:b6:5e:7a:d9:c9:47:13:d2:40:b7:6e:7a:12:51:
03:eb:bd:d2:b6:35:a7:e6:99:c1:33:88:c3:3c:99:
68:52:5d:8c:17:70:13:77:58:b3:88:6c:fb:d6:f2:
bf:82:a6:e6:ba:ef:47:41:2b:71:f5:19:11:b4:1f:
96:16:35:14:1c:18:47:55:d7:b2:f1:8d:3c:4c:67:
48:0e:d7:43:b4:31:16:7d:aa:8b:76:1b:dd:45:ab:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E3:A4:67:6D:3A:A9:BC:AD:4C:CB:A0:4E:37:1F:A0:94:A2:54:6A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E1E08524AAD11F1BC41B1FFB6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.200.0/23
Signature Algorithm: sha256WithRSAEncryption
40:3e:55:1e:cc:1e:48:7a:49:b6:ed:f9:77:25:15:59:f6:50:
27:c7:09:1a:13:80:fd:5b:79:f2:9f:40:3f:69:0d:12:1f:03:
88:3a:80:3c:68:65:44:e9:47:75:9f:75:f0:c6:1f:16:2f:78:
71:f9:0d:0c:fa:27:2f:89:e0:86:34:07:45:2d:ae:b8:27:96:
98:11:17:99:78:dd:87:35:e7:cd:83:ef:8e:89:12:b1:d4:ee:
99:ca:fb:b2:2b:d4:d2:a4:34:da:41:05:b6:06:64:ff:b2:f9:
a5:5b:c8:a3:a6:e3:de:5b:c0:81:48:82:cf:08:8b:00:de:4a:
74:fb:28:2d:4c:58:2e:a4:28:48:9a:20:bb:9a:b4:4c:9b:dc:
60:0d:de:dc:d8:61:27:1b:32:38:86:f8:1e:e7:90:0d:f4:c6:
e1:9e:04:c6:3b:6e:34:2b:66:00:23:8a:9a:9f:a5:56:dc:45:
5e:77:6c:f9:4b:ec:79:ce:c8:44:53:39:1c:74:fd:87:9b:15:
26:a3:84:7a:01:bc:6b:cc:ae:c8:48:54:9b:63:3f:b7:93:32:
3e:5f:27:96:cb:52:38:9a:a2:e1:a5:6b:a7:e7:73:1e:9d:0b:
86:2c:2f:4f:20:3b:c2:2c:b0:95:15:1a:37:9f:0c:dc:f0:2b:
b7:2b:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:24 2026 by rpki-client