
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3B55F656F0E111EE8ECF4F49C4F9AE02.roa
File: 3B55F656F0E111EE8ECF4F49C4F9AE02.roa (raw, json)
Hash identifier: OE+kdffGNDI1gqCpNyX6wolYsU3XBnredjHS46p7FE0=
Subject key identifier: A7:4D:8B:8F:83:CF:24:1B:C8:4C:75:7D:51:2B:2F:AA:61:C1:79:64
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2EEC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3B55F656F0E111EE8ECF4F49C4F9AE02.roa
Signing time: Sun 31 May 2026 16:21:53 +0000
ROA not before: Sun 31 May 2026 16:21:53 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 142534
IP address blocks: 157.20.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12012 (0x2eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:21:53 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6021-e3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:dd:0a:10:2e:a2:4a:2c:9e:f1:4d:0a:ff:
2f:26:37:22:19:f0:74:c0:5b:44:ba:2d:a8:94:a8:
e9:4e:54:c8:90:d7:42:e7:76:43:39:39:bb:c2:09:
dd:16:fc:ca:a1:37:95:e8:14:51:47:2b:3c:7a:b1:
ff:18:b1:b8:2d:d6:e3:1b:3b:d3:e6:6b:23:30:74:
65:d8:85:42:75:f1:0b:03:7b:b1:29:f0:0c:6a:7a:
70:90:5c:b4:c9:19:22:6f:95:ed:41:b7:31:24:fa:
c7:f5:c2:08:98:c8:26:96:56:49:f7:f9:e5:1c:af:
79:5e:7f:bb:39:32:3d:ac:68:80:89:2d:b2:2a:f6:
0c:8e:d5:c4:87:2e:31:1b:f3:c7:da:d7:d5:47:46:
30:89:67:ee:0e:eb:80:01:68:be:6a:5c:10:c1:10:
16:db:c8:ec:fe:ce:c9:20:8e:34:fc:99:26:5c:00:
26:42:75:d1:2a:fb:6b:0c:16:fb:cb:20:34:8b:cc:
4c:9d:7a:d4:21:9f:da:2d:2a:de:fe:57:ca:9b:87:
7d:8a:27:f9:f8:5b:75:78:80:31:cc:da:3e:30:00:
3a:ae:d1:d3:1b:96:96:9f:0c:3d:85:fb:b4:85:1a:
e9:72:6c:e0:3c:83:ea:48:46:12:90:c4:40:e0:b3:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4D:8B:8F:83:CF:24:1B:C8:4C:75:7D:51:2B:2F:AA:61:C1:79:64
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3B55F656F0E111EE8ECF4F49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.186.0/23
Signature Algorithm: sha256WithRSAEncryption
75:8d:7d:40:da:0a:e7:1a:6c:13:af:5e:34:7e:70:f6:42:77:
21:45:dd:93:af:90:69:d7:fc:00:4d:16:a9:1c:f7:4b:c8:df:
30:d0:fa:fb:c5:b1:17:40:96:c9:46:b6:cc:57:1e:91:af:be:
5c:e6:fa:ce:0e:d0:2d:e7:94:95:35:e8:9a:08:ee:60:a2:f2:
eb:b1:67:26:12:c3:0f:d3:e2:ae:e4:35:29:d1:b4:aa:62:32:
12:f4:c7:c6:f4:90:a5:01:86:84:04:7b:ba:05:e4:c6:3a:b7:
4f:aa:6c:14:fb:48:ae:ee:21:18:7e:46:71:79:ad:7d:7a:87:
2d:0c:1a:ca:93:a3:b5:2f:ce:ef:92:67:17:42:1e:a7:ea:08:
5f:60:bb:3b:36:35:74:d9:95:73:2b:12:f2:56:28:40:54:92:
8c:62:3c:95:6d:fe:52:89:25:c7:ef:5d:e9:f4:ab:31:73:92:
02:32:47:41:33:39:6a:d5:dd:9d:e7:54:dd:91:69:5e:73:1c:
d1:25:6f:91:45:25:ba:99:5f:6e:fb:6b:bf:bb:72:ec:85:4d:
3a:14:bb:fe:b9:67:0b:7a:f6:1c:18:4b:0e:c5:f8:f0:72:2d:
49:b1:b8:ce:01:10:6b:57:d8:8b:8a:3c:1f:d8:26:06:9f:66:
7c:da:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:38:35 2026 by rpki-client