
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0AC03CAC007411EFA54F0579C4F9AE02.roa
File: 0AC03CAC007411EFA54F0579C4F9AE02.roa (raw, json)
Hash identifier: e0epqSQGJnVfvG5uBdLCtMy5gTAvSa0gGZqmZTMEDJ8=
Subject key identifier: F6:F1:5E:AE:18:5F:4B:79:32:14:3A:AD:D6:6E:09:D5:BF:A1:BB:04
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 315C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0AC03CAC007411EFA54F0579C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:21:52 +0000
ROA not before: Mon 06 Jul 2026 16:21:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152483
IP address blocks: 157.20.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12636 (0x315c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:21:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd61f-94db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:01:d7:25:41:4f:f2:0f:9f:83:60:b8:e9:
df:b4:1e:48:56:f4:86:2b:53:9c:f8:e1:3b:dc:06:
9e:79:88:dc:e3:67:26:bc:ac:eb:c6:aa:4f:38:b9:
1b:a9:6f:e9:6e:c4:24:86:b8:29:d1:bd:db:c5:85:
e4:eb:37:c3:49:9e:04:e2:eb:84:4a:04:e1:55:30:
74:d9:16:c6:72:f4:33:db:f9:cb:81:2f:99:7e:f8:
c2:d9:f8:98:95:62:07:46:7d:b5:a2:49:57:f4:db:
5e:a3:4e:ee:ff:2c:ff:31:b4:08:5d:60:6a:fa:17:
0b:1b:66:eb:81:2d:a1:d6:e3:fc:57:e6:d2:1d:9c:
14:19:45:a0:72:16:0b:95:24:42:d9:f4:4d:01:b0:
65:c7:76:8a:6e:a1:9c:ac:59:e4:30:90:32:6a:93:
24:84:22:7f:cd:f7:db:e7:92:6c:bd:4a:54:ee:9d:
9b:cf:87:3e:65:46:20:cc:b8:01:79:53:47:2a:92:
20:97:30:37:e2:5c:b9:27:ba:3d:4f:8f:f2:0d:01:
3d:6a:e2:74:73:34:02:cd:96:db:77:87:4d:e5:57:
7c:e1:20:57:34:c7:ea:79:e2:e3:80:dd:b1:65:7f:
85:4d:a0:49:9e:ef:27:19:1d:52:39:a7:79:8c:01:
a0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F1:5E:AE:18:5F:4B:79:32:14:3A:AD:D6:6E:09:D5:BF:A1:BB:04
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0AC03CAC007411EFA54F0579C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:81:09:82:82:f0:80:e9:7e:36:83:0c:cd:eb:95:e4:8e:49:
84:9e:21:27:98:37:4e:91:d1:f9:9c:18:ea:82:8d:52:df:48:
c2:e2:19:9d:ea:d4:3b:e2:a2:5a:d8:da:8c:14:92:cc:f7:05:
c5:9a:15:f5:51:be:cc:36:48:cd:cb:67:9a:de:c3:b6:1e:f7:
ca:d3:f9:1b:73:8b:ce:0f:24:3f:f5:b7:f3:b9:7e:ce:07:40:
b7:0b:67:1c:1b:fa:ab:bf:79:dd:d0:b6:e4:a0:53:e2:67:c4:
24:0e:f1:76:20:07:3f:5a:ac:da:87:fe:ad:8f:07:48:b8:fc:
e0:7f:41:5f:01:5a:4d:64:65:82:d7:cc:9d:27:84:56:be:54:
5c:94:87:97:52:28:01:81:26:1c:74:43:e2:4d:62:8b:24:49:
4a:eb:77:da:8d:3b:5b:84:db:26:fa:41:43:90:e9:56:73:a9:
37:e5:7b:92:f6:a7:0a:6b:be:e8:68:87:2f:73:53:ee:27:fc:
f9:4c:a3:13:08:92:e1:ec:1f:5a:fe:2f:7b:25:80:fe:b3:94:
f8:6d:96:f7:07:bb:b9:5b:d6:92:df:d9:8b:78:a6:77:68:26:
94:2d:7a:43:a9:11:16:3e:96:ac:1c:d2:ed:78:e3:d0:98:f9:
68:a8:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:36 2026 by rpki-client