
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa
File: 3DC264DE530F11EF8C82480FC4F9AE02.roa (raw, json)
Hash identifier: 84SDH65U9zReMfgw6DPkjRfioAl0Tqu9AI6VbWeRhoA=
Subject key identifier: DD:69:33:17:7C:C0:9F:89:C0:73:3E:E5:D6:4D:89:0E:0A:5E:72:FE
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30B3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:16:16 +0000
ROA not before: Mon 06 Jul 2026 16:16:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134932
IP address blocks: 157.20.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12467 (0x30b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:16:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd4d0-619e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:d2:63:b4:56:c2:cc:2e:cb:44:21:50:14:
14:18:07:34:dc:d3:91:da:a9:36:2b:3a:d6:b3:94:
13:0d:94:9c:a0:ec:62:bf:98:59:f7:a3:42:11:2c:
b9:eb:c9:7b:89:e2:b2:44:e4:8d:e1:ff:5e:1c:60:
68:a6:d6:8a:17:c9:74:c6:e2:72:3e:98:92:5a:fe:
92:3d:00:c1:1c:89:b3:37:39:2d:94:ae:71:03:16:
61:f5:18:d9:49:c1:39:d7:37:b4:b1:9e:73:a5:f1:
f6:39:7a:25:01:e2:b5:9e:21:48:bf:d2:47:a3:0a:
37:1a:63:26:21:21:f3:e3:2e:b8:95:11:61:aa:59:
e2:ef:89:d7:6b:1e:0c:09:24:33:be:ab:85:4d:5d:
8a:7c:d3:3d:27:36:ab:98:10:a1:3a:c3:78:04:f9:
57:1a:85:52:ab:26:29:9e:07:64:73:0f:2b:36:bc:
86:ef:e0:a9:fa:c2:d1:bb:b9:ce:e3:fa:1c:fd:2f:
3e:0c:cd:7a:33:21:71:2f:f4:cd:bd:4e:d3:69:88:
b8:6c:0c:f3:8d:62:fa:66:5d:f7:d9:fe:41:c2:3b:
89:09:39:42:a5:bb:96:d1:ea:9a:8b:ad:62:a8:1d:
95:aa:54:db:eb:4d:4e:9d:79:81:35:7d:d3:c3:21:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:69:33:17:7C:C0:9F:89:C0:73:3E:E5:D6:4D:89:0E:0A:5E:72:FE
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.184.0/23
Signature Algorithm: sha256WithRSAEncryption
be:b6:03:93:2a:9f:ce:50:e1:48:01:d8:b9:3e:d5:21:f0:e9:
cf:18:df:aa:0e:9d:b9:32:ae:9f:da:54:42:1b:4c:fe:7b:ea:
96:25:05:eb:e9:c2:ff:27:50:e5:86:66:f7:f8:34:06:e7:3a:
4d:41:ea:7d:a2:71:d9:cd:86:44:6c:88:79:04:58:48:d8:7e:
7f:6f:80:12:b3:fe:b3:2c:08:05:44:6e:12:4d:eb:20:46:f6:
ee:7b:f0:4e:d4:fe:fb:2b:7b:a8:23:e0:51:ab:12:46:24:4b:
7e:dc:93:c5:86:02:92:84:30:f8:d4:35:7b:06:5b:3f:71:ff:
8c:a0:50:27:2b:7e:5f:51:b6:08:61:c2:d6:59:bd:ad:1a:c3:
23:76:e4:0a:a4:bf:5f:5d:6b:80:b9:92:9d:e4:4d:47:bd:14:
82:65:6c:e5:9a:14:ac:68:d7:de:3b:37:f4:f0:20:14:9e:6e:
57:29:9a:87:d1:c2:c5:fb:f5:81:31:e1:52:c9:01:23:95:2f:
43:d4:40:8a:6b:d1:18:e5:1a:b1:36:08:03:c2:e9:ac:c1:c4:
1e:c9:8e:1e:e0:30:dd:a0:2a:f0:ea:94:80:8f:84:88:5b:cf:
92:f0:3d:2e:4e:3d:ab:7f:6e:e4:aa:3c:29:b9:75:75:f4:ac:
b2:ab:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:04 2026 by rpki-client