
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/96EE3F5C366311EEB376DC3AC4F9AE02.roa
File: 96EE3F5C366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier: HWDKrWR4ZSzndqYGfGz3yyZCIawFWZQQaQyTTbVr3n4=
Subject key identifier: B2:A0:8E:CC:AE:7B:EA:86:E3:74:D3:9C:6C:E9:7E:2E:B5:52:C3:2A
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 02AD
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/96EE3F5C366311EEB376DC3AC4F9AE02.roa
Signing time: Mon 22 Jun 2026 06:32:33 +0000
ROA not before: Mon 22 Jun 2026 06:32:33 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135381
IP address blocks: 83.118.16.0/24 maxlen: 24
83.118.17.0/24 maxlen: 24
83.118.28.0/24 maxlen: 24
83.118.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Jun 22 06:32:33 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a38d701-7dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:c3:26:39:5b:a0:c1:7d:36:ee:2e:13:a2:
f0:0b:3b:83:77:1a:40:82:dd:2b:cf:79:36:e5:8d:
49:5c:69:cd:b5:b7:cb:5f:31:46:9e:47:9f:98:c2:
9c:d8:01:91:c6:92:01:fb:e8:1a:8b:83:80:b6:97:
c2:c7:7a:a6:17:15:c4:74:0b:3e:8f:fa:e7:0b:aa:
2d:a6:1e:e2:28:48:87:98:f1:26:2d:17:8f:ab:29:
7b:5e:a3:b2:8f:fd:d5:8a:9d:64:60:4b:3b:e8:81:
54:6b:70:14:10:d5:08:06:87:77:7f:a6:ed:74:3c:
fd:f3:d3:d8:58:b5:68:90:fd:35:87:5a:17:02:6f:
fa:d0:eb:de:d5:68:4a:4c:ae:e9:1d:86:55:23:e1:
56:2b:e9:39:d5:73:ad:fb:e0:35:5a:68:8f:19:c2:
9b:a9:81:58:ed:17:0a:e2:a3:c7:a1:d2:46:4b:d0:
8a:42:b6:50:73:94:45:af:d2:cc:72:30:6e:dd:a1:
63:30:c5:4b:d8:bd:8e:e2:58:b1:c2:9a:9e:5a:b4:
7a:52:f6:53:ff:51:00:ad:87:11:0e:2a:59:f6:9b:
67:e2:e8:b6:42:79:62:23:bc:16:dc:85:a3:8b:ac:
d4:f4:fd:c7:08:66:3c:f9:19:a2:1e:da:a1:17:a7:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A0:8E:CC:AE:7B:EA:86:E3:74:D3:9C:6C:E9:7E:2E:B5:52:C3:2A
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/96EE3F5C366311EEB376DC3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
83.118.16.0/23
83.118.28.0/24
83.118.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2f:d8:44:ef:9c:05:20:54:ef:5f:40:30:03:90:d4:95:45:
d9:8b:0b:90:7f:4b:25:db:0a:cd:91:94:62:df:79:b9:1a:22:
59:69:6c:91:ba:f5:d2:ec:01:d0:09:02:48:fe:2c:e8:21:62:
ac:bd:ba:2b:e2:80:37:f6:00:99:ae:09:f6:98:8a:cc:73:2a:
55:92:0d:54:6b:9f:23:05:ec:3c:4a:42:12:cb:92:85:b3:60:
d6:78:9e:c3:a7:dd:60:e1:cf:0c:7b:08:b8:19:17:dc:c4:e9:
55:60:77:49:b0:6f:1e:6a:ba:ec:50:d1:a1:47:84:ce:9c:3a:
42:63:5f:f8:26:f1:31:04:24:c5:f0:43:ce:0b:2c:45:a7:95:
61:a2:c5:93:15:f7:5d:65:5e:50:90:28:8f:05:80:4c:b4:2a:
29:93:ba:cb:74:b2:e8:e4:1c:53:c6:76:45:e0:e9:50:f3:d9:
7d:09:89:96:ec:05:3b:f7:3e:89:3c:a0:8f:f6:9f:06:e0:31:
86:28:e3:24:cf:d8:e4:32:65:1a:10:1a:0a:d4:23:93:c6:31:
d1:bb:20:9a:4d:bf:dd:5e:65:c3:d2:5d:9c:d4:bf:45:1b:16:
b2:9c:53:e1:48:0a:3a:31:84:da:ef:b4:d0:24:6a:66:29:70:
3d:d9:90:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:50 2026 by rpki-client