
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1E6589CEB37611EE9784BA64C4F9AE02.roa
File: 1E6589CEB37611EE9784BA64C4F9AE02.roa (raw, json)
Hash identifier: psimBqUGFWKdSKOGHf4mGO1cGF7FKNzlosB1dpdBHjc=
Subject key identifier: 3E:B1:52:97:F3:C5:FB:36:69:0C:A0:8E:64:15:8D:DF:6B:DC:26:8C
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2BEC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1E6589CEB37611EE9784BA64C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:44:31 +0000
ROA not before: Thu 08 May 2025 15:53:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151704
IP address blocks: 157.10.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11244 (0x2bec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:53:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c14e-4031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:fe:af:56:31:72:35:64:a6:a2:c9:c3:44:
3c:74:10:fe:8b:5a:07:7a:15:92:93:a6:06:e9:c3:
60:62:3d:58:94:bd:2f:ed:7e:97:80:f3:c8:4d:07:
6c:cd:8e:cc:c3:54:5c:8e:e7:bd:40:f7:9c:a9:a2:
fa:28:07:f1:49:a3:c6:62:a4:8f:4a:2e:1d:4d:b0:
dd:30:76:1a:6f:c0:4e:b5:68:85:5e:6a:0a:20:ce:
6b:2a:21:73:fc:ce:96:39:8d:eb:03:79:8b:ac:fd:
23:a7:3d:74:73:14:b9:a6:7a:87:d0:34:ac:0a:53:
26:27:64:c4:54:b8:9b:fe:4c:24:74:fd:c4:35:f1:
ef:80:db:2e:43:56:a6:13:16:a5:67:fa:78:97:9f:
ef:f1:08:27:a3:1a:c4:1a:98:2f:cd:e2:77:3c:ce:
6a:7a:d0:14:e3:c4:82:24:e9:67:0a:29:b6:95:b4:
f5:3b:08:52:d4:eb:7c:85:df:f9:70:5d:1c:73:7e:
77:37:9f:bb:07:c1:e3:3f:4d:32:c6:3b:bb:63:2c:
a5:03:36:df:f1:69:7d:98:3c:04:33:06:48:20:0a:
1d:e8:f0:4d:18:53:b0:a9:5d:da:c3:64:94:7e:5b:
50:b5:d9:05:03:67:0c:f3:6a:62:be:cb:37:fd:39:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B1:52:97:F3:C5:FB:36:69:0C:A0:8E:64:15:8D:DF:6B:DC:26:8C
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1E6589CEB37611EE9784BA64C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.98.0/23
Signature Algorithm: sha256WithRSAEncryption
96:43:f3:e4:ef:b6:35:b8:fb:b7:c9:ef:29:c0:7d:6f:5d:a4:
2e:66:99:9b:0d:ea:95:5f:7e:b3:5e:76:ce:2f:6d:b7:cc:0b:
42:3a:5e:bd:cb:93:d4:92:34:52:29:fd:0c:e2:d8:a1:57:1e:
e1:f2:bd:d6:b5:04:65:9c:d4:2d:d8:60:9a:0a:18:1c:0f:b8:
39:4d:f7:af:67:f5:71:02:5c:cc:74:5f:71:33:2c:6f:ed:2a:
1c:3e:28:83:7f:cc:83:fc:36:15:8e:fe:2b:72:f7:99:99:1f:
71:b5:84:7d:aa:8e:75:9f:de:10:10:88:34:83:74:6a:a6:78:
34:2f:a3:c1:8c:92:e6:6d:b3:66:7b:00:e8:2e:f6:5c:07:8d:
1d:0a:63:50:c3:fc:12:a0:5b:e6:3e:af:c6:74:0d:07:8e:e3:
b2:44:76:b1:83:0e:9e:dd:67:a7:95:ac:cc:d1:61:cf:c7:d5:
2b:e9:ed:c9:be:17:16:45:b5:60:5b:a9:5e:1c:b3:88:36:a5:
c6:4a:15:94:01:25:22:ff:3f:2a:c0:ff:0d:bb:08:e5:6d:b9:
74:04:2f:8e:5d:11:62:f2:06:9c:03:52:c3:2f:53:d3:52:3e:
8f:10:b7:87:fb:f3:39:c4:60:e6:1c:13:51:bd:67:03:a5:b9:
28:05:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:31:45 2026 by rpki-client