
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83BF2C6AB5A011F1A5230F2B3411F970.roa
File: 83BF2C6AB5A011F1A5230F2B3411F970.roa (raw, json)
Hash identifier: 8OogqzksmYs9Jp160iWecCphmsvA4XDXDp9p6I7tL90=
Subject key identifier: 5D:7B:80:48:90:6B:7C:54:B5:6E:CC:77:A0:94:83:FB:B6:C7:1E:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FD15
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83BF2C6AB5A011F1A5230F2B3411F970.roa
Signing time: Tue 22 Sep 2026 07:20:23 +0000
ROA not before: Tue 22 Sep 2026 07:20:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154935
IP address blocks: 163.52.208.0/23 maxlen: 24
2001:df7:8b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 05:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64789 (0xfd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 22 07:20:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ab22c37-0f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:dd:a6:03:a0:a3:64:bf:73:55:92:e0:c7:
dd:7f:e8:e7:5e:84:46:96:ec:cc:94:16:04:4a:c8:
09:d1:db:f8:0f:e2:a2:97:d1:28:07:c7:d8:05:93:
ea:ba:2f:3c:0c:2a:46:33:24:be:88:f7:db:3e:41:
b5:9e:b2:12:05:2e:43:05:21:f5:bf:59:e4:70:bf:
ec:eb:68:aa:6a:87:6e:d6:85:c1:82:ea:9a:81:4e:
b8:5c:d3:4e:02:6a:e9:85:81:9f:04:4d:b5:7d:7c:
9c:e8:64:13:80:1d:97:e6:60:f5:cc:5b:93:04:d0:
7d:72:1f:32:de:06:72:26:87:e0:87:ee:f2:c3:31:
31:4d:00:03:8d:97:24:03:d2:e7:63:e7:94:e9:41:
4c:16:72:13:5a:28:ab:68:73:ef:ab:35:49:11:db:
b6:5a:39:d4:b4:ad:8f:36:6b:5c:29:ae:66:ce:b4:
e3:39:b4:5d:97:6b:d8:ed:8b:66:bd:77:d8:1b:6b:
7d:10:dd:07:6d:1b:d7:3b:f2:1b:db:0b:94:bd:2e:
9f:dc:64:46:22:1a:57:e7:ef:5a:6e:21:8d:75:b9:
34:89:27:92:5a:33:10:96:b7:88:1e:78:80:f8:75:
ff:73:a3:21:cd:ee:27:7c:b9:87:15:34:97:81:2e:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7B:80:48:90:6B:7C:54:B5:6E:CC:77:A0:94:83:FB:B6:C7:1E:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83BF2C6AB5A011F1A5230F2B3411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.208.0/23
IPv6:
2001:df7:8b40::/48
Signature Algorithm: sha256WithRSAEncryption
6d:e3:bb:78:78:5b:e5:3f:65:85:f2:d1:fc:3b:32:1b:63:88:
d5:23:73:5e:0c:d1:94:1f:f9:f2:a4:8f:68:58:a4:5a:c4:8b:
44:65:0f:95:28:c7:c9:ee:4c:df:2d:a6:d6:be:7f:07:ab:ef:
20:fd:12:db:a4:2f:81:9c:4d:87:e0:dc:6b:5d:18:33:85:00:
6f:94:64:d3:17:a8:ef:2a:c0:47:1a:f0:64:7d:ff:9d:b5:1d:
25:b8:9b:53:55:54:27:66:5f:1d:0c:eb:63:30:83:1d:66:0c:
19:fa:7c:f7:17:49:9b:05:19:ea:af:3d:c2:c8:84:34:fd:00:
3e:a7:ac:5c:56:29:dd:78:19:58:46:64:be:27:7b:cc:15:59:
7a:14:7e:9f:47:82:2c:ee:6a:d3:39:23:ce:11:00:88:5d:44:
44:d3:9c:17:98:30:ca:ca:e8:f5:4c:0f:6f:a8:36:f8:4d:e1:
2c:d7:1f:4a:6b:5d:59:80:3a:e9:64:0d:4c:a1:66:3e:11:dc:
76:8e:5e:27:00:6d:03:6f:34:0b:d6:62:37:d6:0f:8e:3e:9e:
61:47:d5:14:6b:17:3b:56:22:32:99:29:cd:b6:54:ab:f8:f7:
49:90:b8:35:52:34:eb:1e:ab:c0:0d:2e:6c:91:f6:12:d8:7f:
9f:4b:9c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:10:51 2026 by rpki-client