
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/13E46FE8283511F19DB4198DC9833773.roa
File: 13E46FE8283511F19DB4198DC9833773.roa (raw, json)
Hash identifier: lwThjBesUBmfR0+Wf6xGGif2VRiW0mHCYaAi4qCtwXk=
Subject key identifier: 64:26:D9:15:86:3D:9A:EB:32:7D:C0:7E:A5:74:83:16:7A:71:98:44
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F38
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/13E46FE8283511F19DB4198DC9833773.roa
Signing time: Sun 31 May 2026 16:24:18 +0000
ROA not before: Sun 31 May 2026 16:24:18 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 152491
IP address blocks: 157.20.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12088 (0x2f38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:24:18 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c60b2-6ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:36:cc:18:92:54:ab:7a:0f:8c:a6:b7:2f:4c:
6d:c8:5a:5f:45:85:a6:7c:ba:0b:df:76:c9:af:62:
b7:bd:e1:b5:8e:e3:c7:9c:ba:41:b8:1c:30:ca:ab:
52:dc:80:f6:6c:04:46:f4:59:95:6c:98:12:22:c4:
61:67:61:f9:7a:71:70:b6:c5:2e:f0:29:bc:e8:11:
2a:93:02:52:ec:3b:c3:b1:98:63:d5:65:3c:34:29:
ca:86:e1:90:24:17:6f:85:fe:5a:08:02:fb:ee:29:
44:a9:ea:91:48:41:60:11:7f:45:69:5f:a9:3a:6f:
7a:88:c5:bd:f1:65:c6:f4:1f:f5:83:5c:45:15:2e:
32:c2:91:55:e3:af:d6:eb:2c:fd:c4:66:51:8b:24:
ed:c6:51:d0:e1:e3:46:3b:0e:03:f8:57:d5:eb:b1:
5e:11:f2:40:a6:74:3b:f3:04:21:6a:e9:45:47:14:
d0:89:dd:18:2f:60:66:7e:92:46:7e:46:39:3e:00:
5b:d3:59:b9:fa:d2:7f:a4:04:7c:70:02:68:5c:ee:
67:95:38:ad:aa:b1:a6:f9:96:19:57:9d:92:1b:93:
16:5c:b6:81:d6:e8:83:a1:c9:1a:ec:e0:82:69:ba:
d1:91:b6:7f:ee:c7:b8:2f:56:4e:dc:b0:54:80:9e:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:26:D9:15:86:3D:9A:EB:32:7D:C0:7E:A5:74:83:16:7A:71:98:44
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/13E46FE8283511F19DB4198DC9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.191.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:8b:e3:53:eb:4a:eb:b1:1f:10:8d:b3:81:35:b4:9f:f1:0e:
d7:c1:87:5b:d6:4f:db:78:17:d6:f7:d8:31:b9:a9:9e:0a:92:
0f:92:7f:73:a4:dc:61:f0:8c:f0:e3:d6:aa:ff:c4:48:61:73:
a6:ec:97:48:74:13:5f:92:27:25:e3:0f:87:d2:e3:ae:5d:45:
97:a2:63:43:b6:30:84:53:91:e1:20:83:ed:5a:a3:8c:61:b7:
d9:cb:ba:85:13:5e:c8:48:34:31:28:46:84:37:88:ec:a7:5a:
a8:b9:57:c5:1c:2d:da:d2:e4:d2:13:33:29:47:91:30:76:1f:
da:8d:bb:64:ac:a8:95:7d:e8:fb:bc:cb:aa:8a:f6:71:46:ca:
a5:4d:9f:a7:60:a3:24:4a:d4:c2:8e:5a:1a:56:ec:a3:7f:ac:
62:a9:c6:38:07:66:04:85:8b:fd:44:d4:69:71:aa:0a:ce:df:
55:cf:1e:5d:b7:d7:aa:1d:34:cd:3f:5e:a6:9d:65:a8:fa:d9:
cc:6a:19:a0:e3:00:e8:fc:bf:0a:77:be:66:b4:d4:6e:9d:e9:
13:44:26:fa:e6:64:8d:6f:8f:39:bc:8e:fc:b6:39:43:2a:55:
ce:3b:5f:0b:b3:11:7a:a5:a4:e6:57:30:9d:f7:0e:50:1f:e2:
5c:28:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:48 2026 by rpki-client