
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/09747D7AF68811F08C8C7DE4376F56BC.roa
File: 09747D7AF68811F08C8C7DE4376F56BC.roa (raw, json)
Hash identifier: eLBtNMqp6PtVJLbO7F02P4VqpsV4Jh55M9EVwPrHa2E=
Subject key identifier: B6:8C:DD:37:9E:90:C2:97:81:99:63:5C:34:6E:2C:A7:B8:5B:59:6F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2ED9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/09747D7AF68811F08C8C7DE4376F56BC.roa
Signing time: Sun 31 May 2026 16:21:16 +0000
ROA not before: Sun 31 May 2026 16:21:16 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141549
IP address blocks: 144.16.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11993 (0x2ed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:21:16 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5ffb-09f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:bc:56:e7:aa:9f:de:98:d6:87:5d:54:17:
8a:d1:8d:08:e0:c2:50:8d:0a:a0:51:46:8b:1d:2a:
90:cd:27:5c:b8:c2:dd:ef:b2:50:09:68:ed:ea:5e:
a9:ca:b3:18:4b:08:b3:40:fa:fe:3e:f1:f5:ec:6b:
54:cf:30:bd:5f:a3:7d:e9:51:91:5a:56:38:9c:36:
b1:76:74:7e:68:87:18:3e:13:86:aa:37:c2:57:9c:
d3:a9:97:4c:90:79:71:fb:1b:80:26:5b:56:97:d9:
68:6d:0c:34:1d:10:79:11:58:0e:36:61:03:6d:3f:
03:22:76:37:04:e0:08:1b:e7:be:84:3b:a8:20:6b:
97:b0:f6:de:e8:8e:90:d9:99:28:44:e6:8c:fe:98:
16:7c:dc:cf:6c:67:51:c3:2c:aa:84:8b:68:ef:71:
c8:d3:58:9d:fa:50:35:c4:96:ba:35:6b:7d:bd:85:
e7:25:16:ba:3c:6f:c6:63:83:36:01:4a:48:8e:ff:
c4:e6:09:f5:c8:78:ac:a7:c9:2d:eb:9f:0b:ab:17:
e6:68:41:2f:a6:d0:bd:74:73:9d:ab:98:ff:f7:58:
5d:b0:67:9c:c8:cf:b7:f0:e1:6b:6a:2f:7e:9d:73:
9d:c1:85:6f:0b:bc:43:07:ec:b8:e8:79:39:5c:fa:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:DD:37:9E:90:C2:97:81:99:63:5C:34:6E:2C:A7:B8:5B:59:6F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/09747D7AF68811F08C8C7DE4376F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.16.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:60:a1:19:5a:6f:bb:ab:70:2c:75:09:8b:f4:61:42:24:09:
65:ad:df:da:94:2e:5e:4e:5e:f5:69:b8:32:99:4b:8f:c1:9d:
03:26:15:f3:93:d7:62:6d:b4:81:aa:e6:39:58:78:40:b0:b7:
79:84:00:0a:ed:87:cf:fd:a8:4b:bf:11:73:04:d0:1e:05:7b:
9e:b6:3a:37:8a:b8:c5:e9:e7:74:b2:88:0c:60:63:7e:f7:b3:
4c:f8:39:8e:b9:c1:32:d6:71:73:89:21:8b:ab:25:f2:b7:8d:
4a:7c:f2:84:f9:a7:ba:45:5c:b2:cc:c4:3f:c4:e8:17:11:ef:
da:ec:17:bd:3b:60:22:c3:d9:d1:5e:70:0b:bf:99:39:f5:aa:
b1:a1:17:90:bd:21:5b:6e:e0:71:5f:bb:44:c6:93:e7:8b:95:
08:75:6b:a6:5c:68:73:1a:ee:c0:9b:4b:4c:1a:6f:12:1c:9b:
bc:b6:75:58:b1:00:0c:a1:44:4d:6d:93:34:e8:65:3e:fe:09:
79:75:bf:07:97:f3:f1:7d:76:10:7d:ea:cc:eb:28:9b:56:21:
a0:40:c8:8e:1c:1a:4c:66:23:05:2a:3b:61:16:94:e3:a4:de:
8a:3f:32:51:be:16:d0:55:80:f3:0c:3b:48:52:32:ff:5d:03:
5c:6f:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:10:44 2026 by rpki-client