
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2940424A03EC11F08B00B20AC4F9AE02.roa
File: 2940424A03EC11F08B00B20AC4F9AE02.roa (raw, json)
Hash identifier: 3alRlb1I5Vo5Bbe/E5vthfRl8K33Xz1FdC3uGQM9D4I=
Subject key identifier: DB:D1:67:67:A6:07:F0:08:81:67:66:8B:26:F9:F6:C1:B1:E1:8C:4A
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2ED4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2940424A03EC11F08B00B20AC4F9AE02.roa
Signing time: Sun 31 May 2026 16:21:06 +0000
ROA not before: Sun 31 May 2026 16:21:06 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141309
IP address blocks: 157.15.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11988 (0x2ed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:21:06 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5ff2-00a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:a3:46:46:19:5f:46:7e:29:23:fc:f9:4a:
7b:78:39:c1:cf:81:6d:8c:97:33:80:70:17:be:28:
90:db:85:36:d0:46:f1:70:03:b9:3e:71:6a:57:25:
68:eb:04:b7:8b:43:0a:28:ce:72:8b:d6:da:22:23:
cf:9a:06:e3:14:3a:c3:93:42:ff:bb:b8:bd:f3:1f:
91:38:b3:5b:82:da:49:3e:e1:e4:e6:a6:d3:40:76:
6e:e4:22:3c:e0:1b:93:3e:e1:ef:36:b3:99:9c:c2:
21:c5:28:88:66:9d:c6:5b:43:cf:ac:84:51:7e:df:
c2:08:60:a1:5e:82:39:a7:af:b2:0a:5e:55:ee:e0:
a8:6f:07:1c:55:33:eb:e0:87:da:fc:93:27:40:b7:
13:27:23:6c:df:26:69:c2:d6:64:5b:b8:0b:c1:c3:
9c:78:21:aa:c0:05:45:57:ae:7e:82:37:a8:ac:b7:
67:6f:c0:d0:82:65:bb:f8:f5:3f:18:4d:48:09:cc:
11:b7:11:eb:62:c9:27:4d:63:82:25:4c:2b:f9:5a:
a0:a1:87:c7:1d:5d:58:61:6e:ba:d5:22:71:8d:cb:
ec:17:50:ed:82:a5:0d:85:f4:e9:96:d7:47:00:2b:
cf:6a:64:8a:63:aa:58:35:2c:67:d5:a4:c4:7a:65:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D1:67:67:A6:07:F0:08:81:67:66:8B:26:F9:F6:C1:B1:E1:8C:4A
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2940424A03EC11F08B00B20AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.34.0/23
Signature Algorithm: sha256WithRSAEncryption
08:bd:77:8f:d3:4d:6a:e8:27:7a:53:72:14:cc:c2:75:fd:0a:
83:5d:48:46:29:e0:61:a8:72:5e:13:e9:2c:c9:fc:d1:c3:37:
93:6d:66:4d:49:f0:b4:4d:71:cb:25:43:98:ba:fb:32:e0:c3:
58:3a:e4:6e:f2:58:9b:55:c2:a7:95:cb:48:ae:a0:c1:af:0d:
ce:49:c5:d7:74:ad:20:bb:7e:5c:98:8a:6b:75:f1:9c:75:00:
55:a3:b2:9e:27:7d:40:b4:e1:84:24:f9:df:4b:14:42:f5:de:
b3:a5:0d:cd:4c:50:22:03:e0:87:3a:66:72:8d:3c:43:51:dc:
07:d6:a9:b7:c5:1e:60:d2:0f:64:5e:4c:af:3c:ca:94:db:f8:
9d:fb:25:c0:1e:37:89:fc:ea:55:b0:0b:69:61:64:07:49:b7:
15:42:f8:8b:f9:bc:ef:ad:6e:c3:cd:e1:d6:f0:7d:ec:7b:da:
f1:c8:7e:7a:ae:4f:ea:66:30:2e:2e:7a:9d:c0:d0:2b:95:3f:
b1:6e:8f:02:f1:e3:27:78:3a:41:a2:47:1f:23:0a:48:cf:71:
c4:66:cb:b0:88:f6:10:de:4e:81:24:94:19:e7:ca:a3:9f:a2:
40:36:da:75:6e:e1:87:e0:41:7c:e9:7d:f0:80:33:26:a8:83:
ae:9d:04:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:47 2026 by rpki-client