
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5E2DFFA0F30411EE9E863142C4F9AE02.roa
File: 5E2DFFA0F30411EE9E863142C4F9AE02.roa (raw, json)
Hash identifier: qE9DWQ2Esqfc7jnAQnpNncP5C5e55C0OLwBu+DTp8qI=
Subject key identifier: B3:45:3A:09:EE:C8:71:B5:04:99:5A:32:B0:59:14:86:19:B5:94:CA
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2FFA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5E2DFFA0F30411EE9E863142C4F9AE02.roa
Signing time: Sun 31 May 2026 16:30:35 +0000
ROA not before: Sun 31 May 2026 16:30:35 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 45536
IP address blocks: 157.20.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12282 (0x2ffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:30:35 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c622b-1162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:84:71:9e:f6:1c:f1:c6:05:46:08:a8:f8:
cf:4c:97:41:b7:53:7b:c1:e7:dd:a7:72:77:48:a7:
8a:9f:13:66:3a:53:5e:26:26:a9:af:c0:e5:cb:e5:
60:05:19:8d:09:69:a0:ab:e5:fd:b0:95:e2:80:e3:
4a:46:33:f5:7e:f4:d4:b9:2b:f5:4e:bf:f4:04:da:
73:31:60:ea:55:08:09:2a:fd:84:69:aa:49:90:2f:
62:27:3a:41:94:5c:a9:65:8c:ba:80:f4:a5:f1:72:
8f:ea:25:56:4f:57:f1:49:af:95:d8:90:b8:a8:05:
e6:fb:82:c1:3d:57:72:26:ca:3a:a8:be:27:7d:f5:
18:c1:68:18:f5:a3:41:09:9b:1c:21:49:18:8a:25:
b2:b4:5d:aa:7d:8a:9d:f9:8d:c7:77:33:5b:20:81:
0f:60:25:a6:c9:48:e5:02:94:a0:1d:e6:c4:b7:06:
94:3b:fe:0e:74:08:6c:4d:69:33:18:c6:df:b9:2b:
89:45:b4:bd:69:09:7a:49:68:35:f7:44:3e:ca:d7:
d8:05:f0:dd:e1:7c:6f:23:3b:66:f7:89:a5:33:d6:
29:4d:7b:fb:20:51:97:d4:68:cb:41:58:17:73:3a:
7e:2d:2b:26:c9:0c:7c:1b:15:14:b5:7b:a2:38:2b:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:45:3A:09:EE:C8:71:B5:04:99:5A:32:B0:59:14:86:19:B5:94:CA
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5E2DFFA0F30411EE9E863142C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.226.0/23
Signature Algorithm: sha256WithRSAEncryption
89:98:52:d4:6b:27:13:39:c1:71:11:75:b0:12:47:b0:7b:9a:
a6:99:d9:6d:f2:c3:c0:e9:45:bf:6d:42:6f:b9:e1:a8:7b:6a:
06:96:c2:c8:74:22:87:98:c7:02:45:ed:06:eb:24:b2:d5:33:
ce:24:4a:d0:19:99:13:67:86:fe:b3:96:84:35:72:70:dd:8f:
47:47:dd:12:3e:07:3f:b3:4a:ca:0f:f0:25:65:29:9c:2a:97:
2e:4f:9b:8d:e0:99:8b:e1:39:fa:1e:23:bd:b8:0d:24:6f:22:
e2:94:fc:f0:e4:bd:ba:7a:cf:fa:16:5d:62:68:d1:89:87:07:
44:c7:6f:b2:e2:f7:a9:3d:48:ab:58:8b:14:65:17:22:a4:5a:
bc:5f:88:2a:1d:19:8d:03:df:0f:fd:e7:43:1f:7d:5d:3d:c9:
e2:57:ab:d7:d6:95:29:95:27:99:b9:50:63:48:08:2a:c8:1c:
ae:ad:bb:86:1f:03:3c:32:90:87:1f:7c:1b:8b:73:f1:7c:9f:
db:f4:3f:c6:93:a0:31:43:ac:a2:5e:0e:70:92:ee:40:91:b9:
b5:82:7d:37:23:e9:2b:fc:be:a5:c5:8a:7a:55:97:23:bb:5d:
e0:6a:29:b4:18:78:37:93:1b:cb:93:4b:b3:08:50:65:0c:0e:
de:f1:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:42 2026 by rpki-client