
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa
File: 7A2414A8C01C11EEAB088B48C4F9AE02.roa (raw, json)
Hash identifier: NAxwOngkt+KL3qY13dicErzy+BJzi8r9DCrOoIF3pI4=
Subject key identifier: 69:C8:31:B4:D5:D6:60:2D:F2:09:C2:3D:F4:FD:0B:C0:7D:44:8F:76
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2EB7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa
Signing time: Sun 31 May 2026 16:20:11 +0000
ROA not before: Sun 31 May 2026 16:20:11 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138252
IP address blocks: 157.10.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11959 (0x2eb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:20:11 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5fbb-cf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:96:a1:36:d0:db:df:8b:d0:89:ef:a9:3a:
c1:73:0b:c4:2c:ab:76:3a:65:13:07:b7:e3:c1:8a:
02:a5:1e:9f:9e:83:69:b0:c0:d4:41:f3:96:1c:72:
51:04:4e:61:67:63:36:4f:22:1e:e3:b6:b4:a9:b9:
58:ac:3a:fa:aa:f2:70:f4:4d:e3:36:68:94:1e:4c:
0c:fa:42:fb:55:f8:d7:16:d7:18:0d:6b:78:61:9a:
b7:18:6d:06:a5:c0:3a:53:b2:70:18:5c:ea:02:47:
33:3a:33:c7:a4:2f:5e:35:77:46:e9:9c:e1:37:86:
73:99:40:76:1f:67:c4:65:e1:35:ae:49:f6:45:9b:
b9:87:b9:aa:e1:b8:a3:f7:88:e8:6b:b8:44:fe:b6:
22:9f:ef:8c:bc:86:83:a1:76:e3:9d:7b:99:10:2f:
5f:42:3d:81:e7:cd:00:18:29:4d:a7:de:b7:b4:e1:
f5:bb:42:c4:48:35:12:47:8a:a1:4f:c3:02:24:50:
1a:da:49:55:4b:85:24:a5:58:f8:aa:80:c4:c6:57:
3d:52:a1:51:a5:3b:91:96:33:0d:b9:16:db:ed:2e:
97:2e:1d:a7:d7:ea:72:b9:bd:3a:31:aa:8c:28:f8:
89:4a:0f:0c:fe:0b:e4:5a:dd:f7:5a:1f:78:2f:04:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C8:31:B4:D5:D6:60:2D:F2:09:C2:3D:F4:FD:0B:C0:7D:44:8F:76
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.56.0/23
Signature Algorithm: sha256WithRSAEncryption
85:b8:7a:c2:f5:bf:8e:28:da:21:91:e0:7e:b9:22:24:e7:f6:
01:7c:95:3a:94:0d:36:57:4e:47:ef:96:c0:84:c7:b1:f3:53:
ea:24:53:2a:44:85:1c:72:c2:b7:ad:ef:56:51:02:b3:a9:b3:
d5:4f:de:dc:ff:11:bb:63:39:55:21:ad:fa:e0:2e:ec:0d:aa:
5c:9d:7a:75:17:99:a0:b9:85:50:14:90:86:fb:89:59:ab:c8:
87:1c:62:61:2e:89:5a:fd:61:74:c4:68:5e:b2:09:01:bf:70:
8b:05:f1:de:d3:68:a2:9a:9f:d7:99:95:89:ea:f7:18:35:b3:
ca:83:69:57:90:80:54:4a:8d:7f:ee:ca:9d:ea:55:82:73:63:
4e:60:b6:e8:44:7d:90:45:41:88:98:8b:2a:de:ed:51:46:61:
71:81:d6:4c:66:9f:91:5a:d9:9b:ff:10:fc:79:d5:3c:f3:c1:
a3:4f:69:50:49:70:7d:f1:1e:ce:73:09:e0:60:4f:47:63:c7:
04:82:69:fb:51:2e:92:6a:4e:ad:71:63:5a:bc:2e:88:49:60:
e8:c7:00:49:60:f4:25:26:71:65:56:36:53:6f:21:e8:4b:74:
33:8f:58:22:d7:6d:2c:d0:e7:e1:fb:e0:b7:8c:e4:ee:be:3b:
17:62:0e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:01 2026 by rpki-client