
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/17F95140C0C011EE9FFF0231C4F9AE02.roa
File: 17F95140C0C011EE9FFF0231C4F9AE02.roa (raw, json)
Hash identifier: lQp5b5hktIC/Rd+UivTnL5npDazSMiJ/MUsP305Ejbo=
Subject key identifier: E1:6E:F0:9A:30:59:8A:72:5D:22:AD:CA:7B:7B:19:66:0F:BC:90:CA
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2E66
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/17F95140C0C011EE9FFF0231C4F9AE02.roa
Signing time: Sun 31 May 2026 16:17:34 +0000
ROA not before: Sun 31 May 2026 16:17:33 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132338
IP address blocks: 157.15.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11878 (0x2e66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:17:33 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5f1d-0a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:5a:d4:d8:71:dc:c3:fa:34:54:10:c3:cf:
8f:f9:fa:02:65:f2:46:27:be:b5:de:31:a7:38:e1:
87:c4:bf:7b:98:77:94:91:3f:6c:1c:66:a8:ce:e8:
4a:8f:46:78:b9:61:67:9e:42:8a:86:9a:c0:a7:78:
d6:f5:85:a5:79:16:e6:f6:0e:12:a8:ad:04:d8:90:
ed:43:f3:d9:f0:cb:da:1c:b7:e9:be:7d:f7:c4:82:
3e:ae:12:43:14:c6:e7:ac:c3:2d:b8:cd:07:5d:08:
b4:02:b4:8a:54:ba:3e:f5:aa:fa:b3:09:6d:e9:b5:
f1:c5:1c:05:b8:78:98:e5:69:ba:f5:41:68:92:96:
38:81:d6:11:e4:3f:5c:5b:53:e6:b1:3a:46:51:dc:
56:66:f5:8a:5b:e4:e8:71:4b:dc:71:70:62:7e:51:
17:d3:43:35:0b:86:bb:c0:08:32:67:8f:75:a7:1c:
16:42:24:7c:46:af:ba:77:ec:bb:35:0b:79:17:f0:
79:3a:e5:10:18:5d:18:ea:4a:96:0f:bc:b9:ec:b5:
1d:c2:fd:be:07:15:09:05:3b:ab:6a:7f:7f:5a:e3:
60:b9:e1:ad:04:8a:3d:d8:09:74:6a:a4:cd:dc:4f:
bb:7e:2e:3b:4e:8e:35:a7:a3:e5:1c:52:9e:04:86:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:F0:9A:30:59:8A:72:5D:22:AD:CA:7B:7B:19:66:0F:BC:90:CA
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/17F95140C0C011EE9FFF0231C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.81.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:6e:91:62:01:2d:0b:db:ec:a8:c1:d3:a8:16:0d:89:db:61:
11:f5:9c:0a:a7:94:82:c9:a9:d8:67:af:ed:b7:39:03:c6:75:
77:66:ec:1b:de:d2:e3:d2:d7:36:0f:57:51:2f:0f:82:9f:35:
ac:2a:40:1e:35:cf:60:c4:44:63:46:9a:5a:3a:88:79:d7:7c:
06:7c:28:b5:6d:4d:05:e7:72:5f:2d:96:82:db:03:e5:89:24:
b6:e8:8f:ab:c8:bc:f1:be:31:93:7c:29:61:0c:30:c7:00:7f:
92:c0:42:4f:3b:59:34:47:f0:a3:d9:25:5b:7d:3c:da:10:24:
50:8c:ae:8a:a5:5d:ce:13:3f:5f:09:c7:60:63:21:8c:0d:41:
ae:23:c6:a3:10:44:4a:8f:86:8d:5c:91:75:d2:72:a0:74:92:
55:ab:73:f0:76:5f:b4:f6:20:c4:bc:03:b5:0a:45:67:34:ae:
45:82:45:e9:12:14:cf:ea:bf:72:a6:cd:fe:1a:af:60:cd:53:
81:16:fc:af:ec:92:cd:86:52:d8:08:57:d9:56:bd:80:ca:2e:
09:26:dc:84:22:ed:00:f6:6f:7c:bb:68:02:59:02:85:66:dc:
af:89:06:d4:5e:cc:e0:41:c0:65:ea:e2:26:86:4a:ec:41:ef:
7e:50:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:07 2026 by rpki-client