
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/497464A4FD5F11EEBF4BFE32C4F9AE02.roa
File: 497464A4FD5F11EEBF4BFE32C4F9AE02.roa (raw, json)
Hash identifier: fl9zZqoG4BiHfEdnOTm2PDlw1jD8hc83kVeqsENJAtg=
Subject key identifier: 6E:1A:23:39:44:79:11:40:06:88:1D:8D:94:73:3B:91:F3:7A:5C:58
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C6B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/497464A4FD5F11EEBF4BFE32C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:47:42 +0000
ROA not before: Thu 08 May 2025 15:55:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55410
IP address blocks: 157.15.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11371 (0x2c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:55:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c20e-708a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:cd:fc:10:5d:32:94:0c:ee:f5:ed:cc:16:
94:fd:e4:2a:18:5f:ef:1f:77:c8:5b:36:f3:d8:23:
03:3d:d8:e4:ea:f6:41:d5:b1:2e:fe:68:40:84:48:
65:30:2d:8a:f7:b4:2b:c7:e7:f3:4c:cb:80:89:35:
48:ea:5e:ed:fd:ac:e9:36:22:e2:90:81:ed:ec:6a:
9e:05:58:74:d1:6c:19:6c:09:e9:09:1f:43:ba:39:
27:c0:1d:83:69:5a:67:ef:19:1e:43:b2:45:7b:d5:
2f:18:d7:e4:58:94:3f:a8:b5:28:0b:c3:f7:bb:07:
8c:d1:80:28:4b:2d:b3:ba:e3:f1:cd:5f:df:1a:21:
38:12:06:06:d0:3c:36:7e:79:dd:20:57:cc:6a:6a:
c5:d0:0d:77:3d:4e:d9:e7:d7:9c:bc:bf:2b:c3:be:
c5:97:a6:0c:fd:ba:31:2c:04:61:13:5c:7f:25:55:
18:5f:1d:b9:4c:73:5d:d0:03:7c:fc:53:e3:0c:25:
40:0f:92:02:c2:74:68:f9:87:8c:96:f4:42:15:5a:
a9:0e:ac:da:22:f5:a0:09:2e:24:52:50:1c:64:f7:
46:c4:ed:e4:65:3e:5a:51:be:55:4d:b3:4b:34:d8:
b1:05:b7:9c:76:13:f1:de:5b:2b:66:a5:54:30:e3:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1A:23:39:44:79:11:40:06:88:1D:8D:94:73:3B:91:F3:7A:5C:58
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/497464A4FD5F11EEBF4BFE32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.158.0/24
Signature Algorithm: sha256WithRSAEncryption
28:12:2e:11:44:74:b4:df:c5:60:b6:1d:43:eb:4c:af:fd:b7:
e8:9a:d8:46:fa:7f:14:28:d7:ee:3b:c8:7e:63:a1:84:e4:34:
a4:a3:3d:f0:c6:97:e0:f5:91:21:62:db:34:4f:6c:90:9b:9a:
25:74:fe:08:85:3f:04:55:2b:8f:18:b9:e7:aa:b4:af:12:eb:
ea:02:eb:03:a2:10:71:38:ee:c2:89:27:7e:0f:e9:fa:c9:e0:
9b:15:f1:0d:44:6a:3f:71:de:0d:be:84:ed:da:34:5d:d4:69:
6d:1c:22:a5:97:55:11:f1:3c:71:49:47:eb:48:a7:44:33:b1:
6b:12:a2:5d:d4:56:c7:ac:87:70:57:c4:d3:b3:47:8c:ef:7f:
6a:db:4f:51:f4:4c:ff:96:e3:9d:5d:c6:9f:ef:6f:8e:8c:21:
33:96:7c:4a:7e:5e:20:0b:0b:27:d3:10:f2:98:ce:b5:86:51:
27:66:ec:cb:f6:15:da:9c:83:cb:5d:4a:df:02:9b:e0:02:9e:
65:69:ea:82:af:72:99:04:a5:84:46:60:46:aa:f6:b3:a2:22:
6d:5d:1e:4d:9e:f7:65:74:bb:bb:1f:c1:1f:9f:5f:70:30:b2:
07:89:30:5f:40:b6:5b:dd:17:6e:04:3e:fa:65:98:2f:1d:b3:
7c:7d:9c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:16:24 2026 by rpki-client