
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0690DC98DC5411EEBAF12F6BC4F9AE02.roa
File: 0690DC98DC5411EEBAF12F6BC4F9AE02.roa (raw, json)
Hash identifier: TfsEk5uddsW/HwjjMAJ4SGxX9I0foMIHACTZ09O3Z1U=
Subject key identifier: 80:F1:B8:18:AD:3D:D7:AC:F2:63:E2:C7:BA:2A:CC:C5:22:3A:36:DC
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2ED8
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0690DC98DC5411EEBAF12F6BC4F9AE02.roa
Signing time: Sun 31 May 2026 16:21:14 +0000
ROA not before: Sun 31 May 2026 16:21:14 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141416
IP address blocks: 157.20.174.0/24 maxlen: 24
157.20.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11992 (0x2ed8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:21:14 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5ffa-4628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:a0:e3:8e:a2:11:cb:a7:56:a5:f1:7b:cb:
5f:a8:21:89:10:2b:b0:b2:21:ac:d0:c1:69:93:f1:
69:d5:3d:cf:06:51:a7:b0:b9:7f:92:20:3d:62:19:
ab:9a:f4:8c:9b:61:ed:32:56:80:7b:9f:64:4b:b4:
b5:44:36:67:bb:65:13:9e:4a:a0:76:5a:74:93:32:
01:3f:fc:a6:9d:d7:72:54:1c:66:15:e9:20:97:fd:
63:c1:45:19:51:09:0d:b5:9b:12:03:7b:8b:55:f2:
65:53:a6:42:91:d2:82:f6:71:1e:1a:f5:4a:8d:aa:
19:0a:3d:ba:aa:3c:7a:95:83:4a:c5:1a:07:0d:56:
24:8d:ca:7f:fe:dc:28:12:f0:ed:ac:5b:8b:7e:e8:
ae:87:6c:f2:88:6c:86:c4:ed:b1:87:2c:b8:99:34:
a5:f2:d2:3d:c0:ef:2b:d4:4e:5c:15:e9:fe:81:62:
fb:7c:5f:f7:4d:b7:51:35:39:bd:4c:6c:27:8b:32:
c7:2e:ed:34:1e:c9:8e:27:c2:8a:86:2b:8f:6b:fa:
f5:88:fd:9b:d6:86:c0:43:a3:d3:d6:e2:59:a2:45:
72:8b:04:7f:5f:f6:a9:22:50:e8:46:c5:ef:8a:3f:
82:20:1d:27:f7:23:f3:98:ab:c6:4b:dd:91:04:16:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F1:B8:18:AD:3D:D7:AC:F2:63:E2:C7:BA:2A:CC:C5:22:3A:36:DC
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0690DC98DC5411EEBAF12F6BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.174.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:6a:54:e1:07:42:ee:a9:6a:33:7a:46:ac:7d:7a:cc:50:91:
7a:ca:41:7a:1d:fa:40:a3:1d:ce:b0:f6:44:da:16:bc:2d:5d:
0a:69:2b:1c:69:8f:47:3a:b1:78:98:40:0a:37:8b:6f:7d:c1:
2d:b0:a9:16:04:9d:cb:89:ee:51:6c:92:38:48:4d:55:ab:55:
b9:be:d3:f5:3b:6e:02:d2:62:cd:01:b9:ca:a7:cf:d5:7f:38:
6b:2e:38:d7:a3:78:99:d1:81:70:54:ae:d3:32:64:01:41:6b:
3d:43:49:df:16:4e:c5:b4:bf:8c:17:da:53:ef:4d:4a:6b:2c:
e8:c1:51:23:aa:f1:5c:de:23:be:04:67:ea:b1:e1:2f:9c:56:
1b:de:8d:ba:5b:e1:6c:f4:22:a6:f8:d2:b9:23:b4:b7:f1:0d:
e0:f6:ec:ee:ea:34:20:72:a1:75:fe:20:65:56:4c:67:1b:f5:
26:b4:9f:be:99:84:5e:b1:aa:71:90:9c:39:46:bc:04:85:6a:
e5:f9:c7:a6:3e:9d:96:77:15:55:fd:77:1e:71:af:7e:0f:c0:
cc:a8:9a:ce:18:60:1c:0e:10:18:7c:56:0c:bd:e0:08:cc:9f:
dd:dc:7f:81:7d:47:a8:b6:62:6d:1e:a4:e6:40:39:64:db:4f:
39:4c:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:49 2026 by rpki-client