
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/637A68DAE8F111EE97648F87C4F9AE02.roa
File: 637A68DAE8F111EE97648F87C4F9AE02.roa (raw, json)
Hash identifier: TeC+FHx89KL3H+phXIcF7iSkH3b1ht6ov/kzgWn2HWw=
Subject key identifier: 3E:07:56:9B:23:D6:FE:37:A6:53:1E:3B:66:FB:35:D7:D0:66:77:D2
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3173
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/637A68DAE8F111EE97648F87C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:22:39 +0000
ROA not before: Mon 06 Jul 2026 16:22:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152512
IP address blocks: 157.20.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12659 (0x3173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:22:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd64e-c9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:81:91:52:63:9d:e1:b7:6b:0c:56:02:94:
15:96:2f:4a:d3:6a:ae:d9:9e:d2:ad:73:da:b1:9c:
12:2b:69:1d:a3:8e:2d:66:b8:f1:f0:09:90:03:66:
61:22:43:18:3d:ea:5e:4d:18:b3:f1:03:ca:d3:e7:
8f:07:a1:f2:91:82:a3:f9:56:f3:2e:14:32:cf:6d:
f6:f7:70:a3:5d:f9:a7:3c:bf:7f:e4:36:dd:7a:b4:
bb:a4:37:34:b0:d5:e4:b1:16:0b:3c:48:6c:c0:9b:
8f:85:0f:d7:54:86:70:9b:12:a7:5e:ec:e3:a2:a0:
07:81:c2:cf:58:46:35:d3:ff:ec:19:af:c8:f7:1c:
38:ad:f9:af:e7:f9:d5:9b:07:d4:fe:e7:f3:dd:8f:
91:87:71:e8:c9:d8:82:64:98:1a:b8:54:24:c5:fc:
17:8d:f2:67:93:a4:63:0b:54:4a:79:c9:69:20:43:
5c:40:7e:a9:d6:25:2e:b7:9b:33:ca:84:a1:66:b0:
cd:d6:8c:ba:d0:26:bd:4a:5a:45:15:d5:e8:42:2e:
c9:75:0e:13:00:04:f7:fa:6c:64:b3:b7:1c:5e:79:
4c:29:e9:5a:cf:3b:fd:cc:76:72:09:ea:a0:d9:4f:
10:64:e1:bf:d7:b6:2d:52:e4:0b:f8:11:aa:8e:bf:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:56:9B:23:D6:FE:37:A6:53:1E:3B:66:FB:35:D7:D0:66:77:D2
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/637A68DAE8F111EE97648F87C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e2:54:8e:30:ed:38:5e:5a:f4:7f:24:1a:07:9c:ad:07:9a:
27:6e:87:4e:c4:20:e1:3f:77:a5:04:bf:ab:99:6d:50:13:0b:
15:29:98:eb:41:0b:df:93:71:e8:aa:64:4e:2c:b6:8c:f7:e9:
6e:9c:46:d1:66:85:ea:ce:a5:88:91:b8:95:8b:61:e6:9f:ef:
b0:73:1f:26:54:bc:8f:09:ee:c5:04:ff:ca:24:b3:dd:4d:22:
72:f2:ca:f4:70:9d:b6:bb:36:f5:96:4d:d7:c7:67:45:53:04:
fc:bb:74:6e:7a:cf:37:10:5c:b8:23:c8:6e:b9:22:3f:3e:d8:
0d:53:ec:86:e2:aa:1b:ad:4a:b9:1c:23:27:a7:2c:77:85:c9:
f0:a6:e9:5c:a3:df:27:c4:55:71:74:1d:fd:f7:22:1e:21:33:
5f:86:8e:a1:ad:4c:ca:ce:95:7d:31:2e:1c:a7:9d:b3:7d:e3:
cd:66:5b:60:5e:34:0d:9d:a5:96:c7:4e:42:76:02:df:52:35:
eb:d8:6b:36:f0:5e:01:7e:8b:85:85:4d:17:a8:9c:f6:fd:bb:
6a:35:f7:26:b8:4d:bd:34:83:6c:fb:68:b4:26:85:fd:3d:65:
66:d8:93:49:d6:e3:71:d7:69:28:f4:eb:01:b0:19:c2:f3:54:
58:e0:a4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:35 2026 by rpki-client