
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3D8177A4AB5211EEAC610B2CC4F9AE02.roa
File: 3D8177A4AB5211EEAC610B2CC4F9AE02.roa (raw, json)
Hash identifier: R/6lielOA77BsneU+bWvyeRv72K8iqGVRBFjIapqyE0=
Subject key identifier: 38:D3:AE:A3:7E:B1:55:39:4F:32:08:27:F4:A3:5D:41:0F:11:60:93
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3156
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3D8177A4AB5211EEAC610B2CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:21:39 +0000
ROA not before: Mon 06 Jul 2026 16:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151743
IP address blocks: 157.10.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12630 (0x3156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd613-0b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:e2:b6:27:8b:5e:b4:ec:8f:0a:84:93:de:
a9:9f:17:7d:2b:25:c5:92:fa:cb:50:1c:2e:73:9c:
f3:f7:fc:dd:10:22:ce:e8:ab:3b:6a:79:3c:58:76:
49:26:ca:8b:4d:e8:00:ff:4f:26:0b:27:e8:85:ed:
2c:bc:0d:ee:4d:90:aa:58:d0:e0:05:0f:aa:84:af:
0a:3d:88:7e:68:9e:ff:0d:58:eb:95:55:0e:7d:0f:
68:70:51:71:f7:52:f1:9c:ee:ca:9a:2f:be:1c:a4:
39:fb:64:5d:6e:db:1a:0e:9b:49:f8:06:de:87:67:
fb:bb:87:4f:b5:8d:d9:18:37:6a:04:d7:31:25:a7:
eb:c5:3c:c6:e2:de:db:ca:f5:fc:7a:ef:48:eb:43:
90:52:14:82:63:36:8d:cb:de:4e:70:e2:2b:62:d0:
48:e1:80:a9:d9:84:96:df:83:cf:52:18:58:23:9b:
bb:2e:ef:4f:19:8e:fd:ae:55:c2:8c:6a:a8:82:3b:
4f:42:d8:6b:87:42:26:f5:89:bf:a8:97:5c:b2:9c:
4f:df:a1:12:f2:c9:fe:bc:bc:db:e7:70:9b:6f:27:
2e:ec:68:8c:a5:62:59:74:0f:d1:65:93:ed:c8:67:
6a:a8:a6:00:aa:1a:83:f4:c3:66:50:5b:9b:a9:eb:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D3:AE:A3:7E:B1:55:39:4F:32:08:27:F4:A3:5D:41:0F:11:60:93
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3D8177A4AB5211EEAC610B2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.62.0/24
Signature Algorithm: sha256WithRSAEncryption
55:cb:86:14:bf:89:97:28:ae:56:83:39:10:c0:db:fb:7c:3f:
3e:c1:cc:31:21:fb:05:aa:33:e1:93:c8:33:a3:75:c3:e1:d2:
82:e1:82:f0:ea:6d:d4:4a:63:b3:71:37:95:78:7e:3e:0d:10:
5e:04:80:d7:5a:1e:5b:1e:1a:0d:4f:d1:48:0f:5b:65:01:2c:
ec:e2:e0:2e:09:5a:b5:bb:e0:21:5d:1d:0b:2a:65:28:e6:a4:
d4:86:eb:49:d0:b3:2b:6f:c7:a3:07:04:2d:95:60:71:75:73:
ce:6d:0c:a8:60:2a:ab:df:5f:35:43:de:25:f9:1d:bc:82:43:
e9:80:a5:63:0c:98:88:40:c4:63:a6:0b:04:96:87:2b:f4:d9:
61:11:13:0b:db:90:7e:dc:49:a0:8c:f2:2a:9c:f6:c2:1e:90:
b8:e3:e0:07:f5:d3:8d:55:da:47:c8:93:80:72:73:98:ed:52:
92:d2:c7:45:e9:24:73:7f:1c:b1:15:f0:06:2f:a8:38:7f:1a:
a4:c0:70:3f:ad:2e:17:71:3e:ed:68:8c:8e:a9:d4:56:1f:38:
53:ff:85:f3:9f:92:43:e7:49:90:02:41:12:e0:87:ee:6c:80:
a7:6c:88:a2:1c:4f:c6:9f:76:d7:a3:9b:84:00:6f:1a:8b:57:
b4:3f:e3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:40 2026 by rpki-client