
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa
File: 3DC264DE530F11EF8C82480FC4F9AE02.roa (raw, json)
Hash identifier: FqPdn7UBXxnxnEsVYOygQuhpzHPrG3GqSyjDp9W9I5Y=
Subject key identifier: 98:F9:66:53:C4:56:B5:DC:D1:1A:FE:8D:7C:E2:78:96:8C:D2:36:99
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2E8E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa
Signing time: Sun 31 May 2026 16:18:52 +0000
ROA not before: Sun 31 May 2026 16:18:52 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 134932
IP address blocks: 157.20.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11918 (0x2e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:18:52 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5f6c-f072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:d9:fe:ad:82:b7:83:95:a6:28:31:e8:9b:
c3:05:b3:69:9a:4c:88:57:cf:2b:63:df:06:ee:39:
f4:57:98:88:dc:4c:6f:5f:cb:83:b1:81:c7:f0:ce:
0a:84:60:0e:50:50:bd:2e:8b:d5:0e:4f:54:81:15:
25:0e:bb:cc:43:a1:dc:76:16:d1:e4:eb:ec:0a:e9:
83:0a:49:15:30:4e:e8:47:ef:d1:ca:cb:59:df:e2:
2e:62:3a:a4:17:a8:e6:72:dc:3f:c1:ac:66:28:5e:
89:a2:37:cb:60:3c:64:2f:1b:62:22:bb:e9:86:6c:
f5:01:cf:61:77:8d:1c:5b:7d:dd:fa:5c:8a:c0:63:
85:69:96:56:d5:c8:12:f7:9b:ee:a6:8f:db:81:9e:
23:37:5d:6b:ff:a1:25:c3:95:4c:58:23:4c:97:cf:
bb:bd:c7:75:2c:a7:65:db:c7:27:14:77:56:51:7e:
6b:f5:82:e6:ae:64:63:e3:81:50:c7:3b:34:2c:42:
86:cc:e7:e1:fe:52:ed:b4:18:d6:91:bc:0d:c0:1e:
f6:7b:d8:54:7d:72:a8:21:23:61:96:6e:f6:bf:04:
b8:98:a6:e4:29:89:87:c8:7f:15:84:8d:47:08:d4:
5f:6d:e6:11:24:41:fe:0a:60:30:38:81:85:aa:3b:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F9:66:53:C4:56:B5:DC:D1:1A:FE:8D:7C:E2:78:96:8C:D2:36:99
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.184.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:4e:36:6f:96:be:e9:51:d3:19:98:43:4f:94:ba:e5:96:6c:
50:e3:2a:18:66:cc:eb:0d:59:14:95:45:59:77:ff:5d:8c:c8:
f3:ac:33:44:6f:a4:ee:d6:09:fa:86:ab:2c:c6:fa:0e:14:dc:
03:3f:24:29:b4:21:c5:0c:26:1e:17:eb:49:2c:c0:d0:ae:5d:
28:9a:59:6a:68:97:de:3c:25:ac:34:08:51:a0:9c:f4:f9:85:
be:5a:17:98:12:9f:a2:1b:a7:7c:e7:b3:99:48:3f:b9:f2:cc:
52:28:a8:a9:93:a8:31:eb:43:27:16:67:f8:77:46:18:94:29:
77:20:0e:b4:a7:c9:e7:0a:d5:1d:d1:21:36:a1:a9:ed:47:9e:
e0:3b:0c:87:de:12:20:92:0f:89:7e:66:10:33:01:33:9a:8c:
3d:7f:9b:23:2e:97:db:c6:49:6f:ec:bd:3f:d3:a2:c5:0e:1c:
01:cf:2b:52:b9:e0:26:74:21:fc:a0:fc:d4:92:66:81:a9:d4:
0b:f7:ef:be:32:b8:a4:7d:0b:35:25:ca:0d:9f:1c:be:14:52:
50:d2:aa:4f:40:30:3d:67:f9:a4:73:f9:bd:9f:83:e2:c4:06:
1d:29:73:4f:49:b2:f3:49:f3:41:3e:bb:f0:00:4f:a8:31:60:
4c:a5:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:52:27 2026 by rpki-client