
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/75E58BA20A3911F0B3D0D353C4F9AE02.roa
File: 75E58BA20A3911F0B3D0D353C4F9AE02.roa (raw, json)
Hash identifier: v48OzrJnqHiyyN7XK/+R2ZpZMyYQyPycwfbO9WSsATY=
Subject key identifier: AA:85:AE:8B:58:EE:FD:B0:C3:72:76:40:D1:14:86:96:80:0D:CE:D2
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3143
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/75E58BA20A3911F0B3D0D353C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:21:02 +0000
ROA not before: Mon 06 Jul 2026 16:21:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151702
IP address blocks: 157.10.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12611 (0x3143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:21:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd5ed-5fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:01:d2:04:c0:20:52:51:45:71:d8:a9:e3:
b0:3a:c4:9e:01:f0:40:ad:54:64:ca:25:e4:7b:e1:
16:ee:90:48:f2:b8:09:3b:5d:98:ca:43:68:4c:fe:
17:1c:07:00:e9:d3:c2:80:98:9d:3b:fa:ab:7a:be:
0a:0f:d3:18:49:c7:f7:72:10:1e:52:82:59:c2:81:
6f:14:56:f1:60:13:74:3b:7e:a7:49:bb:b0:d4:78:
a9:01:d9:51:50:0c:81:70:d2:5e:5e:93:bc:b2:f3:
75:e5:23:fd:4c:ee:43:20:f4:e7:73:3f:fe:ee:db:
54:77:8f:7a:ed:d5:d9:da:92:32:9e:e1:e5:17:ee:
1c:8c:40:29:1b:d4:d9:ea:ab:b7:2c:50:24:99:f7:
2b:8f:72:35:76:bc:b6:58:ef:9a:93:e6:4f:fd:b8:
97:3f:e6:d3:07:80:d0:0c:30:81:6c:d1:d2:e0:f2:
f9:95:5c:74:20:c8:a8:3b:04:2c:e3:49:43:8b:ab:
60:23:8e:00:35:9d:66:06:53:a4:45:35:3c:b1:51:
11:2e:4a:79:83:ff:c9:e0:64:b7:37:f3:66:3b:a4:
e2:dc:23:57:58:1a:07:87:78:e1:d9:6b:d6:38:11:
5d:e1:53:2c:70:2a:e8:2a:b9:f3:ec:7d:cf:0d:6d:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:AE:8B:58:EE:FD:B0:C3:72:76:40:D1:14:86:96:80:0D:CE:D2
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/75E58BA20A3911F0B3D0D353C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.24.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:ba:23:32:87:5c:2c:2b:9f:99:23:2e:6e:fb:e7:63:1b:d8:
b8:27:59:2c:3c:ef:e7:0e:d9:c3:f3:15:d6:34:a2:fa:04:89:
c1:d2:1b:64:66:b5:ce:a9:42:e5:31:8f:df:1c:01:aa:d1:2f:
86:9f:35:59:ef:21:8d:b7:5c:c8:43:51:26:df:53:af:d2:f5:
b9:8e:4e:38:35:4c:3e:f0:47:34:42:bd:c7:37:e9:f2:14:65:
1a:1b:09:32:df:31:b1:57:e1:f8:94:80:00:1d:12:70:72:27:
5e:5b:c4:47:83:68:55:7c:f9:34:d6:da:8a:a3:69:f0:95:d4:
39:8b:a0:19:ab:0a:10:b6:1f:19:f0:7f:e3:41:fa:6e:45:da:
8f:f9:45:de:41:d6:29:e3:40:d8:bd:cf:e2:5d:21:f1:86:5a:
48:df:32:ca:2a:25:41:5a:7f:7d:0d:44:88:e1:4b:d2:c1:7b:
86:2a:b2:c5:e0:03:3f:ad:a8:87:bb:63:aa:1b:76:85:92:36:
81:63:49:df:7d:20:a0:75:e6:36:bc:d3:1d:0c:52:2a:03:d0:
48:f5:78:74:b0:4a:c5:e0:5b:c3:80:5a:c3:6a:55:ba:cd:35:
bb:9c:e2:c1:d3:0e:4a:30:a4:9b:c1:2d:f2:49:74:46:39:91:
d7:1b:1b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:33 2026 by rpki-client