
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A809B2600E411F1990281B8376F56BC.roa
File: 4A809B2600E411F1990281B8376F56BC.roa (raw, json)
Hash identifier: nv6nolLAo2z4hHDllw9XJhgSmt1OZWI4Nxb8/Owg8bA=
Subject key identifier: 60:3A:31:82:4F:05:9F:91:30:C4:71:A1:BD:DD:FA:B0:0E:75:B6:8E
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2217
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A809B2600E411F1990281B8376F56BC.roa
Signing time: Tue 03 Feb 2026 09:39:53 +0000
ROA not before: Tue 03 Feb 2026 09:39:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137085
IP address blocks: 157.66.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 10:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8727 (0x2217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Feb 3 09:39:53 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6981c269-8bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:13:03:1c:92:9f:dc:b0:71:b8:18:2a:e6:
7a:ee:1a:6b:dc:ec:1e:83:bf:f1:a5:e5:ad:fc:d4:
21:3d:0b:7f:68:f0:a6:33:2b:a9:89:c9:a5:86:f5:
f5:b4:c2:13:f1:5a:64:af:bc:55:65:04:b0:a4:df:
3f:22:ba:30:8b:0d:5e:35:fb:4d:1b:7e:36:14:80:
c4:b3:e1:27:90:65:19:bd:a8:03:ff:0c:0e:3a:72:
7a:4b:3a:85:d4:0c:c5:50:1e:de:93:6f:40:12:64:
90:d2:ef:41:cb:c2:e6:95:26:7c:2a:32:89:55:85:
c6:66:36:67:52:5a:eb:ee:4d:7d:54:18:d9:97:18:
96:2e:1c:67:eb:68:00:90:1c:e5:66:df:6a:98:55:
35:6d:a2:61:1c:8b:20:9e:c6:cf:d1:97:7c:2a:7a:
1d:87:ff:fd:f3:39:ad:73:0e:7f:9b:b2:59:72:4a:
2e:93:af:a0:9f:69:a0:eb:ff:0c:46:ec:e2:c0:78:
ef:b3:9a:f2:21:a3:c1:3b:04:99:e0:a8:08:bd:13:
16:22:02:20:6b:61:a2:c3:66:4c:07:81:46:e8:5d:
31:ba:db:4a:aa:10:fe:0c:8d:c6:67:3d:fd:49:c0:
a8:c6:07:e2:0a:5b:5c:b5:d9:a0:75:c1:22:4d:42:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:31:82:4F:05:9F:91:30:C4:71:A1:BD:DD:FA:B0:0E:75:B6:8E
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A809B2600E411F1990281B8376F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.66.74.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ba:e4:0f:f3:15:c5:94:44:0e:5b:74:72:10:be:39:c1:df:
be:51:e8:b8:96:b5:3a:8e:a7:7e:25:6f:b3:92:e3:19:29:e9:
de:5c:ce:5a:87:a7:62:a6:3b:b4:38:1c:ad:c1:5b:d1:10:d2:
d0:3b:0f:20:53:17:2c:6f:16:a5:07:a4:ed:5c:1d:99:2e:1d:
5d:c0:aa:78:c1:96:da:c9:e0:00:9b:b0:9a:84:aa:86:21:5f:
55:f1:3c:f1:30:00:94:8c:2e:05:2b:0e:ae:60:07:19:c6:a8:
7d:be:4b:13:68:64:db:68:84:a8:35:7a:6e:41:77:94:6e:29:
89:d4:66:35:3a:6f:09:01:00:d3:f8:2e:9c:0b:3c:de:1f:57:
b3:ab:a9:d0:11:d3:05:8f:76:18:61:cb:c3:ea:33:65:46:da:
8b:c1:28:b9:38:68:6b:38:bb:08:f5:b8:60:25:96:1a:df:58:
a2:fb:22:70:5b:80:86:57:5f:c4:ca:83:7c:c6:81:ff:d6:05:
bd:b0:e5:e6:62:94:1c:96:24:a4:0a:01:5a:5f:e5:02:85:49:
f7:ec:91:51:7e:ec:64:d8:ca:e9:08:f4:6b:48:d0:8f:5f:61:
c1:e5:98:1e:b8:26:0e:5f:35:5b:da:4b:c7:16:c0:8c:73:44:
07:89:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:57 2026 by rpki-client