
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2E27FDAED48411EE90222927C4F9AE02.roa
File: 2E27FDAED48411EE90222927C4F9AE02.roa (raw, json)
Hash identifier: xtFyjl6n3UgMekhQEFPADC/2WgvQeHARpsXfm9ZF9wU=
Subject key identifier: CD:6C:0C:51:D6:49:D7:A3:B8:C9:81:DC:AF:7B:5D:F8:D7:5D:85:17
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 315F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2E27FDAED48411EE90222927C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:21:58 +0000
ROA not before: Mon 06 Jul 2026 16:21:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152487
IP address blocks: 157.20.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12639 (0x315f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:21:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd626-b2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:b4:1e:39:69:a7:d2:61:8f:ec:30:5d:34:
25:b9:71:4a:44:36:02:36:07:eb:53:d1:e6:e6:69:
87:f3:71:c5:5c:6a:64:c3:55:bf:57:29:ae:a5:bf:
92:a0:09:1a:68:f3:5a:b9:a4:3a:ed:bc:f8:0c:47:
92:cc:72:80:51:8d:1d:9a:47:97:a2:06:53:06:c0:
e9:63:0d:1e:0b:e3:ec:5c:01:25:8a:c0:7d:38:47:
05:e4:1b:52:29:99:d1:c9:b7:ea:29:69:1d:12:7c:
7a:8b:c8:80:16:40:83:33:e7:e2:04:ee:b6:35:2a:
ad:28:37:ce:a4:77:dc:db:cf:b5:ad:41:18:ec:51:
bb:1e:94:b4:0a:1f:e6:71:b9:48:0a:0d:05:db:13:
c0:01:c7:49:9b:d0:72:72:8d:97:32:dc:f6:49:89:
44:f2:3a:77:d0:3c:0b:47:8c:54:f7:3c:a6:18:82:
fa:c4:40:0b:e1:f6:9c:10:e2:5f:2e:7a:61:dd:2f:
f7:48:ab:6f:55:71:c5:6a:47:4a:88:8e:a5:33:76:
1d:df:c1:cb:8d:ef:b3:af:b2:2b:9c:cb:2e:67:18:
4d:33:8f:ae:28:66:c3:03:02:9b:59:51:62:44:db:
5b:8a:01:fa:74:de:25:ae:cf:d2:4a:cb:4c:60:b3:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6C:0C:51:D6:49:D7:A3:B8:C9:81:DC:AF:7B:5D:F8:D7:5D:85:17
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2E27FDAED48411EE90222927C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.76.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9f:a2:3f:d8:b9:a5:df:5f:f8:43:f2:60:dd:38:f6:ed:28:
ae:04:73:13:52:59:4a:54:f3:25:d2:76:19:29:8f:7e:68:83:
ab:6f:c5:37:ed:ac:ae:a6:58:56:a2:b7:80:0c:ec:e2:a4:dc:
6c:22:45:2c:af:4b:18:b1:bc:55:f4:88:be:70:8d:a6:46:06:
6d:66:ba:2a:f7:78:85:7c:82:e9:a4:06:fe:a0:a4:84:2b:50:
70:4e:fe:42:b6:6a:d0:ed:11:ae:f3:65:92:24:9c:e9:aa:5d:
96:65:78:cd:86:b1:04:30:58:7b:be:84:a0:7f:d3:3c:4b:37:
16:7a:87:ba:74:85:ea:e4:c4:d3:fb:24:c5:63:36:76:81:fe:
63:e8:08:6d:74:9b:5a:db:5b:39:29:b6:4d:48:48:8b:b8:1a:
08:8c:09:19:70:6f:3c:43:d9:7b:dd:7a:b9:5a:2e:26:30:1e:
d1:93:be:34:14:75:39:f9:3e:85:bc:4f:93:55:fe:96:81:41:
20:a8:c1:37:25:a2:1a:04:b2:23:56:a7:a4:c0:7f:f2:b6:88:
3f:e1:77:2d:68:d8:99:0d:56:92:af:ab:51:7a:d3:b1:ba:8d:
d6:90:6f:28:23:e4:2d:b6:7c:d3:1b:db:1b:cb:04:86:72:3c:
77:c0:ec:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:41 2026 by rpki-client