
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa
File: 7A2414A8C01C11EEAB088B48C4F9AE02.roa (raw, json)
Hash identifier: TwbaGY2KygMRWvfg6wuoZiWqb/lKmz4u+1XpR5FJGtg=
Subject key identifier: 2E:93:51:82:51:BC:E9:D6:66:81:25:8C:08:E4:1F:27:43:60:BC:81
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30DE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:17:43 +0000
ROA not before: Mon 06 Jul 2026 16:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138252
IP address blocks: 157.10.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12510 (0x30de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd527-b7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:73:c9:73:79:44:07:34:a5:96:7d:5f:62:
8c:52:ba:8c:59:1a:c1:f6:43:53:67:16:62:af:33:
fa:87:27:15:89:c0:4a:e3:4a:c1:54:90:66:cf:14:
b7:69:76:25:4c:37:7f:a7:bf:2a:73:c3:48:aa:9f:
ca:02:04:f1:d6:67:57:a7:7a:88:cd:d2:13:dd:62:
79:32:06:97:e6:5b:89:66:81:c0:99:11:d0:ad:67:
fc:6c:68:cb:36:eb:2e:61:7c:1e:fb:c9:c7:84:36:
ab:8b:9b:93:a6:b1:e3:44:c3:56:ee:37:6b:5a:cb:
c4:be:83:81:eb:26:79:1e:7b:45:19:6a:a8:cf:e9:
fd:7f:58:6d:7c:13:76:93:88:1e:12:d6:ca:3d:04:
1c:24:98:f9:6f:8e:d8:64:65:14:4d:34:58:9b:e3:
e2:11:83:35:2b:c3:71:03:87:a0:b5:44:37:b8:21:
bb:14:d3:1c:f2:b7:9c:21:12:e2:7c:28:61:22:3a:
a2:3a:05:89:9a:08:b7:64:c6:da:95:21:cf:32:83:
dd:64:db:bc:70:e5:d4:1e:a2:54:36:02:3b:76:e6:
ab:83:b1:73:39:3a:87:85:ff:fd:52:8e:a1:61:33:
a4:08:00:19:72:9d:b4:0a:34:06:71:37:6f:d4:71:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:93:51:82:51:BC:E9:D6:66:81:25:8C:08:E4:1F:27:43:60:BC:81
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.56.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:a5:75:53:e7:2d:c9:b6:b4:67:0d:84:f5:a5:c1:06:0c:66:
25:bc:6d:b9:2d:d7:da:69:08:11:9a:fc:ab:7f:06:89:0f:83:
94:a1:79:a9:1b:74:ce:9f:1f:44:cb:a5:f1:19:21:90:97:4f:
97:7b:06:72:d6:57:44:99:44:16:de:32:17:c8:68:e7:17:cb:
1b:8f:d1:50:f4:56:67:9e:61:46:bc:13:1d:01:63:90:f7:e4:
3e:88:7b:71:21:69:d9:55:f9:03:d2:5a:dd:5b:7f:19:eb:f7:
15:97:7a:2a:25:d9:0b:ab:85:2e:fa:1b:ee:f9:c4:0b:50:2f:
62:03:b7:be:5e:3c:6b:5e:b5:39:89:d3:98:0a:53:bd:bd:8e:
d7:0c:4a:9a:11:ee:5a:f8:0b:c1:90:b3:63:5b:59:30:62:21:
35:1c:c1:8c:00:c7:29:ff:7a:31:5a:d8:1d:1e:87:d1:43:cd:
45:6c:af:98:f6:1d:d1:c6:f9:7a:f7:87:5e:ca:ee:a6:13:79:
9c:e4:c0:a0:3b:a4:fa:58:d8:a0:f7:37:08:f3:e9:b2:83:4e:
99:20:c3:a6:b6:a2:55:f1:8e:b4:f9:d9:98:e2:ad:94:6b:fe:
fb:f8:56:02:0c:97:f7:23:3d:7e:0f:5b:84:b1:07:18:e1:81:
1d:5e:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:57 2026 by rpki-client