
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/03251AD631A911F18EF27FEAB5833773.roa
File: 03251AD631A911F18EF27FEAB5833773.roa (raw, json)
Hash identifier: 6LkKkJsWxqS6fu2q481aO7PM95MtG5UomUWdUlA5e0k=
Subject key identifier: 62:CE:33:1F:87:88:CD:16:DC:11:13:7E:42:53:81:0E:AE:36:BF:A1
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30C6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/03251AD631A911F18EF27FEAB5833773.roa
Signing time: Mon 06 Jul 2026 16:16:55 +0000
ROA not before: Mon 06 Jul 2026 16:16:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135817
IP address blocks: 157.66.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12486 (0x30c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd4f7-a8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:c0:36:17:52:f4:53:94:ae:95:95:45:57:
e0:97:38:21:bf:d5:e2:bf:0d:36:10:09:24:dd:10:
e4:74:41:ac:87:ff:a4:0c:73:e4:31:88:b5:8b:e8:
89:ee:3f:48:be:e2:ac:fb:c7:42:83:39:6a:51:43:
f4:ec:1a:20:20:15:c4:bd:01:8b:ad:c5:c9:37:f9:
11:29:44:22:58:35:cd:dd:66:3b:6c:f5:51:55:42:
af:8d:70:e5:17:d5:7d:90:63:31:09:15:87:6e:3c:
05:c2:78:b0:1a:d1:7a:86:9b:b8:d9:10:f8:b4:a6:
f0:ce:86:fc:11:e6:53:27:d1:fd:d0:f0:39:94:29:
1d:52:7b:2d:b7:95:92:46:21:f5:03:95:02:a3:ce:
80:8e:c0:99:3f:83:94:e9:8c:1a:16:1d:c7:be:4f:
ab:46:9e:5b:03:8f:04:ce:70:03:23:c1:29:f1:8d:
31:0e:42:de:4d:21:c6:86:38:a2:04:43:ea:4c:52:
9f:16:49:2f:17:e4:fa:40:39:d1:92:a9:4d:f1:3a:
b5:77:a0:43:13:0c:91:b1:67:6b:32:46:1b:89:57:
d2:38:c2:92:e2:14:e9:26:1c:0f:44:49:60:2f:4a:
eb:73:d8:99:3e:af:a3:b5:93:c5:54:98:36:b4:25:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CE:33:1F:87:88:CD:16:DC:11:13:7E:42:53:81:0E:AE:36:BF:A1
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/03251AD631A911F18EF27FEAB5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.32.0/24
Signature Algorithm: sha256WithRSAEncryption
60:92:d7:5c:90:29:1c:3e:a4:96:15:bd:b5:15:ee:00:d6:97:
ab:5a:3c:e0:93:3b:1a:f1:97:df:40:8e:c5:22:bb:6d:10:4c:
63:60:79:ae:53:81:9b:92:6a:c9:a7:ee:78:3a:0b:4b:bb:2e:
0a:40:39:1f:ff:fa:af:99:36:cc:05:67:95:13:41:32:61:6d:
85:37:e8:3a:02:a9:c9:21:6e:df:da:3c:12:be:8f:00:cb:3e:
ad:ab:0f:c1:52:45:80:22:9e:67:9c:cc:34:ce:ce:4f:9a:09:
60:7e:c9:3d:bb:63:ea:37:40:cd:44:16:56:17:08:b7:e6:da:
f8:e6:90:ed:4e:ca:f1:7f:b7:7f:12:28:15:f8:a2:f4:01:85:
46:dd:cb:3e:87:33:d6:12:4a:19:b5:d8:db:83:4d:7f:cb:c7:
0c:7b:03:a5:9c:ef:aa:90:69:8d:33:f8:89:9e:b0:90:cc:d0:
d7:84:c0:2d:09:a0:97:32:64:9d:d5:1f:79:4e:92:61:c6:00:
df:08:8b:d5:7d:1a:83:2e:8c:38:a2:16:e1:54:53:d9:25:05:
c2:d2:04:09:f2:14:8f:4a:51:88:05:94:77:d4:02:2a:17:fa:
d4:98:89:47:cc:1e:26:eb:69:72:ab:f1:95:c7:b2:d3:ea:e1:
d0:3e:b1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:06 2026 by rpki-client