
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A1559E0E88B11F0B04EFFE64E6F56BC.roa
File: 4A1559E0E88B11F0B04EFFE64E6F56BC.roa (raw, json)
Hash identifier: OMp/uvuaNLO/ZvmVQDAEZiDumWAZ48VOl379W2PZgWw=
Subject key identifier: 62:C8:B7:B5:01:2C:D2:08:CE:A3:63:88:D6:43:7E:AE:DC:C3:57:78
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2FF7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A1559E0E88B11F0B04EFFE64E6F56BC.roa
Signing time: Sun 31 May 2026 16:30:28 +0000
ROA not before: Sun 31 May 2026 16:30:28 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 24186
IP address blocks: 144.16.0.0/18 maxlen: 24
144.16.192.0/18 maxlen: 24
158.144.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12279 (0x2ff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:30:28 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6224-2a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:9e:27:cd:3f:2f:b5:89:91:11:58:79:71:
3a:22:d6:e8:a4:c4:c0:37:5b:63:51:cb:3d:ec:26:
e7:7d:fa:f1:05:b8:d8:2a:0c:a7:39:72:48:3f:2a:
30:08:c2:82:dd:3d:f3:d0:d8:70:d6:16:8c:09:c3:
ff:e6:9b:b1:05:bb:4e:d3:6f:75:4e:0c:f0:bf:bf:
b0:7d:8c:41:97:3a:3f:87:1b:69:cd:1b:20:95:3f:
78:58:21:ce:65:65:5e:fd:59:68:c2:35:b3:09:71:
fa:16:35:53:53:f2:6f:a8:33:8f:72:e2:9d:ba:46:
e8:3c:34:ca:2d:ca:b6:3a:60:dd:38:a7:67:bb:c2:
97:d6:70:4c:f7:48:74:7c:4c:2d:eb:73:6e:dd:71:
40:1f:c8:d7:f0:e7:9c:56:b2:95:12:c2:7c:4a:7f:
f4:4e:36:80:19:51:7d:bb:9d:ac:ac:22:f7:c9:36:
b0:4b:3b:0f:bd:e6:b1:72:8a:98:f1:f3:4c:4a:1b:
aa:b1:7d:9f:42:0c:a5:ca:02:49:3d:73:59:ce:50:
af:22:53:13:b6:32:d6:8a:f4:2e:98:2c:db:8e:b3:
90:9e:42:2a:27:ec:c1:ec:4a:68:75:82:44:7c:48:
37:c8:32:35:08:4f:b4:bb:cd:85:69:5c:bb:49:c9:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C8:B7:B5:01:2C:D2:08:CE:A3:63:88:D6:43:7E:AE:DC:C3:57:78
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A1559E0E88B11F0B04EFFE64E6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.16.0.0/18
144.16.192.0/18
158.144.186.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:63:8c:31:5e:1e:3c:96:35:93:e7:06:fd:8a:1b:87:e9:2b:
63:cd:72:0e:0e:fa:8a:db:94:86:b9:0d:a8:cd:30:ff:cf:76:
c4:d2:99:d1:cb:e1:b9:2c:c4:c3:d8:64:bd:5b:0c:d5:9e:03:
9c:7a:59:3b:54:7e:99:35:35:9a:d5:2d:79:22:a7:16:aa:da:
fa:6d:89:31:e7:60:54:f0:1f:44:4a:61:3e:cb:fc:bd:49:e9:
13:cc:c6:cd:55:4f:3e:8b:b4:35:df:42:23:c9:d2:a7:db:06:
9b:fd:56:27:c9:42:ea:37:20:f0:26:72:b5:e2:89:83:1a:2e:
d2:01:02:c6:7b:e7:3b:5c:dd:f1:4d:a6:5b:33:77:66:4b:1f:
ee:d1:d2:6e:6b:07:af:7b:12:95:6a:f7:7e:2c:dd:a2:fa:03:
fe:3b:47:6a:da:f5:20:90:b1:3b:0c:48:1d:64:3e:6c:db:1a:
23:25:70:08:05:49:02:1e:67:43:ad:3a:80:85:68:96:28:f3:
5c:72:19:5d:5e:bf:3c:4d:0d:73:34:67:b5:bd:1c:8f:20:ab:
ff:1d:49:ae:04:ef:a4:77:de:c5:38:23:f7:8e:b0:8d:ad:5d:
66:48:b1:cc:cc:0f:01:3f:22:83:2e:9d:07:a9:f4:66:78:a7:
b1:7b:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:46:19 2026 by rpki-client