
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/7E8442B68FE511EC94D98C7BC4F9AE02.roa
File: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (raw, json)
Hash identifier: zSMfmkgKLmaOH/Z5+adjQakDvYWDWTMPU8hfhZvkbj0=
Subject key identifier: 75:B2:F5:76:50:42:A2:CC:36:5D:1D:76:21:7B:A5:46:DB:D9:01:89
Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4
Certificate serial: 044E
Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/7E8442B68FE511EC94D98C7BC4F9AE02.roa
Signing time: Thu 29 Jan 2026 00:20:04 +0000
ROA not before: Thu 29 Jan 2026 00:20:04 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 55520
IP address blocks: 182.255.20.0/24 maxlen: 24
182.255.21.0/24 maxlen: 24
182.255.22.0/24 maxlen: 24
182.255.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl
rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102 (0x44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4
Validity
Not Before: Jan 29 00:20:04 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=697aa7b4-b14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:47:1e:be:9b:03:0c:f3:b9:c2:e4:cc:fa:
b4:e0:51:4d:60:73:a2:d5:19:c9:67:10:04:2a:23:
a3:26:63:b9:8f:0d:df:22:bc:81:61:d0:4b:1a:db:
e3:3c:3b:fd:4f:a7:e7:0b:97:53:f9:57:12:4c:e7:
f9:c8:09:e4:4b:77:b2:f4:2f:e9:b5:61:2c:36:31:
da:b0:a4:4e:e5:7c:7b:76:bf:66:55:78:db:6e:cc:
99:d7:e6:39:e4:87:84:00:08:d0:90:c7:3f:6f:41:
11:dd:e9:b5:17:68:b0:53:f8:24:b4:8c:32:54:67:
65:71:d6:32:11:66:4e:72:c3:b7:e8:23:c5:64:b0:
98:12:b6:4b:ee:08:26:fb:f3:b5:a7:1a:07:9d:51:
d5:7b:24:19:32:95:2b:e9:ae:d7:2a:ca:95:4b:50:
05:54:38:c0:29:bf:11:44:bf:0f:77:c7:7f:71:dd:
c9:c9:64:fe:38:90:0e:4c:f8:fc:ea:ca:c4:7e:b0:
27:b6:d0:e9:d3:65:79:f5:84:09:fb:b8:ab:24:24:
c3:34:b1:33:f4:22:21:78:1d:7b:80:8b:63:14:1e:
7e:b9:ab:92:2f:a7:45:30:95:c0:b8:4c:4b:91:15:
31:4d:68:86:cb:0f:ff:d9:ea:52:f9:94:85:54:b5:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B2:F5:76:50:42:A2:CC:36:5D:1D:76:21:7B:A5:46:DB:D9:01:89
X509v3 Authority Key Identifier:
keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/7E8442B68FE511EC94D98C7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.255.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:47:0c:46:b0:a8:3d:85:1f:6a:08:dc:a3:a0:72:25:e7:15:
47:a2:93:38:53:68:8f:a3:0f:cf:e6:10:ce:ed:74:81:e0:a2:
58:54:02:b7:3c:e2:0c:9e:8c:89:dd:09:a6:86:d3:a9:a8:1d:
f0:e9:54:8c:f5:27:72:14:3c:d8:3f:99:99:6e:2f:d8:d4:0d:
78:37:e1:85:6e:59:02:17:fb:30:ee:8e:21:36:62:2b:d2:b9:
6d:82:f6:07:3f:7e:b6:ce:cb:5a:02:8c:72:3a:c2:14:2b:7b:
7c:04:37:55:27:e7:80:75:84:48:64:65:44:d7:36:4c:33:59:
51:b7:46:8d:88:5b:4e:3e:55:89:ec:42:8f:2c:cf:54:96:a4:
83:18:2b:b0:a6:a3:ba:1b:2c:1c:a9:a4:c7:83:74:83:42:fd:
cf:7e:68:02:86:c7:bf:fa:76:25:b4:42:99:d4:7b:cf:55:0a:
ac:1b:1a:19:99:1e:82:f0:ee:42:92:ed:bb:e6:69:a9:51:1f:
ab:5d:bd:08:df:6e:d2:9e:31:c7:6e:88:6d:2f:ae:0b:a9:53:
ac:6f:92:67:47:d4:5e:97:4a:68:0c:c1:99:6d:9c:92:5e:c5:
dc:41:5e:54:cc:d3:46:af:70:56:22:f5:e8:23:75:81:b2:a1:
1c:9c:19:8d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1
MUZGRkExQTQwHhcNMjYwMTI5MDAyMDA0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdhYTdiNC1iMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAniJHHr6bAwzzucLkzPq04FFNYHOi1RnJZxAEKiOjJmO5jw3fIryBYdBLGtvj
PDv9T6fnC5dT+VcSTOf5yAnkS3ey9C/ptWEsNjHasKRO5Xx7dr9mVXjbbsyZ1+Y5
5IeEAAjQkMc/b0ER3em1F2iwU/gktIwyVGdlcdYyEWZOcsO36CPFZLCYErZL7ggm
+/O1pxoHnVHVeyQZMpUr6a7XKsqVS1AFVDjAKb8RRL8Pd8d/cd3JyWT+OJAOTPj8
6srEfrAnttDp02V59YQJ+7irJCTDNLEz9CIheB17gItjFB5+uauSL6dFMJXAuExL
kRUxTWiGyw//2epS+ZSFVLVvLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHWy9XZQ
QqLMNl0ddiF7pUbb2QGJMB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG
RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQxNEIvOTRDODk4Q0M4RkUyMTFFQ0E4QUZFRTc4QzRGOUFFMDIvN0U4NDQyQjY4
RkU1MTFFQzk0RDk4QzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAK2/xQwDQYJKoZIhvcNAQELBQADggEBAKBHDEawqD2FH2oI
3KOgciXnFUeikzhTaI+jD8/mEM7tdIHgolhUArc84gyejIndCaaG06moHfDpVIz1
J3IUPNg/mZluL9jUDXg34YVuWQIX+zDujiE2YivSuW2C9gc/frbOy1oCjHI6whQr
e3wEN1Un54B1hEhkZUTXNkwzWVG3Ro2IW04+VYnsQo8sz1SWpIMYK7Cmo7obLByp
pMeDdINC/c9+aAKGx7/6diW0QpnUe89VCqwbGhmZHoLw7kKS7bvmaalRH6tdvQjf
btKeMcduiG0vrgupU6xvkmdH1F6XSmgMwZltnJJexdxBXlTM00avcFYi9egjdYGy
oRycGY0=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:30:45 2026 by rpki-client