
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2ABC809E077F11EFB9D19238C4F9AE02.roa
File: 2ABC809E077F11EFB9D19238C4F9AE02.roa (raw, json)
Hash identifier: P2RM3gYeGzI38Ys6bJDrneCfUueyPimH5ZsHsm5q+p8=
Subject key identifier: 39:ED:10:53:63:16:E5:5D:81:B4:62:89:8B:DC:10:2C:40:70:D1:B7
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F42
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2ABC809E077F11EFB9D19238C4F9AE02.roa
Signing time: Sun 31 May 2026 16:24:38 +0000
ROA not before: Sun 31 May 2026 16:24:38 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 152502
IP address blocks: 157.66.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12098 (0x2f42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:24:38 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c60c5-6609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:d7:cb:dd:60:fe:5a:6d:e2:e4:58:ed:dc:
4f:3c:84:92:00:f3:bc:0d:2d:11:13:53:9b:f1:6e:
1e:b9:d2:c1:b5:94:0a:a9:0b:03:36:95:df:e0:e2:
61:7d:5b:cf:50:d2:d0:d0:cb:5d:b0:99:5b:7d:46:
f8:e0:fb:85:82:7c:c6:db:2a:12:cf:1f:dd:06:2c:
63:67:6e:5b:23:8a:27:fc:db:a4:ba:47:ed:2d:83:
fb:fa:5c:0a:fa:a4:47:17:ed:f3:18:6f:cc:b7:32:
63:e4:9e:24:6b:7c:5b:9f:59:e1:e5:c8:88:1e:ff:
54:2e:7b:ae:37:ac:fa:60:ab:42:d4:db:d8:e4:1d:
89:c6:54:27:a8:59:f7:ed:f5:6d:36:08:63:fb:90:
36:ab:17:d3:89:49:cd:99:06:84:93:40:0d:75:5a:
94:1a:17:ee:fb:f3:5c:cd:97:7e:ad:9d:26:d2:2d:
1f:2b:7d:a9:d7:83:de:1e:ad:33:c9:d2:51:44:4e:
4a:83:15:e9:61:fa:49:3a:51:d7:93:6c:06:c2:91:
78:d7:a3:45:23:4c:ea:06:7f:49:bb:57:73:bb:94:
8d:f1:5b:06:78:e0:21:09:e3:7d:a7:99:1d:03:34:
73:42:cf:b4:f9:62:a7:b3:20:86:ae:36:55:b5:c8:
6b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:ED:10:53:63:16:E5:5D:81:B4:62:89:8B:DC:10:2C:40:70:D1:B7
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2ABC809E077F11EFB9D19238C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:42:57:c4:0b:84:cc:22:1e:bd:07:42:40:6d:fa:c1:df:57:
ac:3a:12:6f:10:6e:d9:ef:42:e7:5d:c8:d4:95:81:3c:fc:35:
c7:5a:d9:fb:ba:a1:58:48:5c:4e:01:42:57:b6:67:22:94:03:
95:a7:3d:81:72:4a:9b:bc:30:57:1e:e4:06:aa:64:bc:c6:8f:
ec:4b:56:a2:a4:e8:8e:00:d3:8f:e4:8d:25:09:26:cc:cb:51:
57:f8:f4:02:60:7c:94:6a:eb:97:c7:b0:37:97:06:5f:e1:e4:
97:db:b1:43:bb:04:e9:ef:a4:e4:38:de:ed:b7:c8:6c:f6:0a:
f3:dd:d9:b9:08:e6:26:2a:f5:9c:7e:57:79:ae:a9:dd:74:d6:
27:91:5d:06:d0:71:cf:15:8c:f9:b3:d8:05:78:95:71:c0:8f:
87:27:8d:29:c7:84:2b:05:31:36:ac:c5:0f:32:1f:b1:5c:52:
da:e0:61:5e:af:d9:9a:50:34:cc:ba:cc:10:e3:53:c7:b6:19:
6e:b6:d9:56:fd:8c:bd:dd:34:d0:bb:ba:9e:ce:ce:56:81:21:
ce:af:85:55:cf:92:0b:fb:58:69:95:53:61:5d:21:dd:98:16:
26:7c:94:85:9b:2c:32:02:49:0f:f1:66:a0:c7:a2:1a:d4:56:
44:c2:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:11 2026 by rpki-client