
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/00DE4BBC5F3011F1911C8BF27B47A888.roa
File: 00DE4BBC5F3011F1911C8BF27B47A888.roa (raw, json)
Hash identifier: i/ZgUGm79AWBWR4ARSKyrzV895YCnTj/XiZ1cHOngC8=
Subject key identifier: CF:CF:9A:E8:4A:88:7F:AA:6D:82:99:45:FE:C4:45:AC:AA:2B:61:F0
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3236
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/00DE4BBC5F3011F1911C8BF27B47A888.roa
Signing time: Mon 06 Jul 2026 16:29:07 +0000
ROA not before: Mon 06 Jul 2026 16:29:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9829
IP address blocks: 158.144.183.0/24 maxlen: 24
160.30.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12854 (0x3236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:29:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd7d3-8564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:97:0d:39:05:74:a2:47:0a:7b:11:ec:e3:6a:
f1:ab:43:0a:0b:9e:e9:14:b5:27:78:52:17:d4:6a:
83:86:d7:e1:3d:7b:f5:9d:85:c2:23:1a:10:23:30:
78:08:b4:97:2e:fd:5f:06:d0:c3:51:60:b4:fd:26:
d2:01:ca:bb:fb:f5:ee:05:0c:18:23:99:04:32:98:
2c:fa:53:08:d5:7c:d7:ff:30:89:5f:79:59:b9:b5:
d0:be:f1:f1:fd:41:5d:7c:3c:b7:d9:68:5e:cd:df:
5d:09:25:88:72:ee:ee:46:05:ec:a3:fe:f9:d4:94:
4d:4b:cb:39:bd:9d:62:85:c7:1f:32:4a:a2:5c:10:
e1:60:2e:51:52:70:26:20:cd:3a:ca:f2:50:03:50:
af:d5:f8:ac:17:6e:c0:3a:15:4e:80:f3:4c:ff:8a:
15:dd:8a:95:d2:7b:83:0b:c8:bc:73:c0:e7:80:12:
7a:2c:d3:dd:be:dd:1e:8d:e0:30:69:ff:95:7e:ab:
46:8b:d2:90:6e:8e:98:44:69:c1:2d:a1:64:6e:4f:
f5:94:69:97:0f:1b:76:01:96:16:3d:f0:80:d3:04:
ff:65:0b:c7:11:e5:4e:fd:31:b4:de:57:7c:bb:1e:
68:87:c7:3b:b9:52:e7:c9:8f:d4:a2:33:e4:66:61:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:9A:E8:4A:88:7F:AA:6D:82:99:45:FE:C4:45:AC:AA:2B:61:F0
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/00DE4BBC5F3011F1911C8BF27B47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
158.144.183.0/24
160.30.8.0/24
Signature Algorithm: sha256WithRSAEncryption
60:de:21:c7:6a:c1:13:2d:ec:11:81:79:d6:02:9a:0b:cc:95:
5a:5c:11:88:d6:41:11:89:8b:6a:cd:dd:60:c0:8a:71:9d:f4:
20:40:14:93:a6:a4:fd:bb:04:24:04:0f:0b:18:fe:30:c7:f4:
63:e1:63:77:2d:38:ae:3c:20:13:a9:7a:15:5d:6d:69:34:06:
73:13:5d:35:70:8a:44:cc:ab:e1:0c:59:6c:13:61:29:bb:e9:
4f:b2:24:cf:5e:bd:9e:db:e3:07:cc:85:fe:65:d5:d9:f5:16:
8a:f3:6a:31:ac:58:e4:b9:79:da:45:55:1f:01:8a:8a:05:13:
6f:0c:bc:e6:c2:f3:98:e3:a2:a6:04:bf:2b:9b:4b:e2:ce:33:
ab:1b:23:83:02:47:22:84:00:f4:a5:47:df:54:bc:7f:e1:fd:
af:7f:71:3c:b4:74:4c:59:7d:4a:a1:0c:b9:99:07:90:ad:dd:
62:61:fa:ba:21:85:e8:b8:53:43:12:04:62:27:1a:e0:b9:25:
85:49:9d:fc:31:fc:4f:a7:ed:be:2a:cc:e8:96:77:fc:11:ae:
17:c1:a5:37:f6:0d:d5:00:bb:cf:ad:49:b2:f7:47:aa:72:13:
62:08:7c:5e:cf:55:2f:06:75:17:2e:2a:13:58:a9:d7:69:46:
11:e9:16:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:34 2026 by rpki-client