
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/13E46FE8283511F19DB4198DC9833773.roa
File: 13E46FE8283511F19DB4198DC9833773.roa (raw, json)
Hash identifier: wnUW32Hin2Z0FRG2NZGayE9vKb7qJQVmc/Bo7qEApBo=
Subject key identifier: FC:1C:3A:18:C3:DA:FA:DC:FD:2E:FC:5E:25:BD:8E:CA:3C:A2:51:1B
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3264
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/13E46FE8283511F19DB4198DC9833773.roa
Signing time: Wed 29 Jul 2026 12:38:45 +0000
ROA not before: Wed 29 Jul 2026 12:38:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152491
IP address blocks: 157.20.190.0/24 maxlen: 24
157.20.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12900 (0x3264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 29 12:38:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a69f454-28f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:16:0b:5f:af:38:04:b1:68:0e:f9:19:01:
c7:3c:b2:b8:26:9a:6a:8e:4b:33:f3:69:c3:54:de:
45:cc:ac:a9:6f:67:84:dc:bd:9a:55:83:6e:68:97:
2a:99:b7:7d:c6:e3:33:bc:78:36:8b:fc:70:fb:33:
95:a9:6a:11:30:7a:a4:57:da:5d:5a:8e:6d:fc:53:
fe:4c:df:4f:5d:fd:b6:e3:00:da:6a:83:d9:45:6d:
c2:60:f8:c9:c3:8c:e7:a5:59:ff:cd:b7:84:8e:78:
4d:0c:55:ef:50:3d:f3:c2:8d:32:3f:77:71:ec:54:
d4:b5:fa:34:19:81:d3:2c:76:80:db:2d:e2:e4:ae:
88:ad:74:16:61:9f:36:47:c9:88:7e:f8:13:12:3a:
55:ae:b6:5d:6c:b8:bc:22:93:12:c1:e5:4e:5c:23:
8e:82:b7:76:c7:58:1a:d8:e9:5a:85:98:52:60:72:
b0:46:f0:57:91:7a:b6:a8:f4:29:7d:bb:d7:f4:b2:
02:fe:97:32:e7:41:d1:de:07:77:eb:9f:54:2e:95:
2c:fe:39:03:1e:90:18:de:1b:bc:7b:1e:87:54:71:
d0:7b:f4:b2:90:18:6f:b3:de:a6:7e:17:7b:be:f8:
ea:c4:1c:fd:1c:3d:2d:0f:4b:d2:70:c7:1d:07:79:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1C:3A:18:C3:DA:FA:DC:FD:2E:FC:5E:25:BD:8E:CA:3C:A2:51:1B
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/13E46FE8283511F19DB4198DC9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.190.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:16:a6:c0:9a:a4:3e:22:00:d4:ff:1c:8d:2e:c8:86:68:05:
5f:2d:fa:83:6e:7b:a1:d0:73:40:f8:c5:c1:05:88:ca:1f:e4:
85:c4:02:0f:dd:41:d8:ad:3a:e3:00:60:7d:b9:d2:b0:f7:89:
98:57:4b:b7:0b:54:62:79:21:bf:03:20:43:44:f8:f6:52:ed:
7f:ec:c1:0c:47:2e:fe:59:bf:29:c0:30:63:fa:92:8d:ec:e1:
9a:dd:4f:0e:7c:96:2b:48:26:3a:91:c5:12:b3:7d:5c:eb:2a:
b4:8d:c6:76:b6:9b:37:c0:e9:c4:5d:cd:cd:02:db:9a:a1:b9:
27:73:d9:45:d0:91:a0:48:7b:58:25:05:bd:87:cf:d8:84:84:
c0:3f:6d:79:58:e5:06:24:7b:99:f5:d5:43:b4:8b:db:9b:8e:
3b:3d:2c:96:8e:4d:64:09:ab:d8:6b:f7:fa:b1:2b:61:3c:be:
82:c4:75:7f:98:cc:f8:4b:90:1f:2f:d2:64:cf:49:d3:b7:ea:
a4:9b:5b:6e:e4:ee:df:e7:8e:c7:e1:18:91:d4:c3:1b:fc:71:
37:96:4d:de:99:50:35:83:af:8b:28:79:30:a1:cc:75:ee:e9:
1a:99:09:e9:13:f0:91:ec:fa:82:7f:a0:d9:c2:19:93:d1:36:
f9:aa:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:57:32 2026 by rpki-client