
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7B6334003D2C11F0A30B5E63C4F9AE02.roa
File: 7B6334003D2C11F0A30B5E63C4F9AE02.roa (raw, json)
Hash identifier: gGHu8NB4WXxGTmlmIqBqoiSkYmk8A06/gQeWryL/ja8=
Subject key identifier: 25:E2:D9:B3:F6:A6:AF:42:A7:9F:1D:AC:45:11:98:48:FB:EB:09:2D
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F40
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7B6334003D2C11F0A30B5E63C4F9AE02.roa
Signing time: Sun 31 May 2026 16:24:34 +0000
ROA not before: Sun 31 May 2026 16:24:34 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 152500
IP address blocks: 157.20.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12096 (0x2f40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:24:34 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c60c1-d821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:13:dd:c5:8e:81:1a:30:ec:5c:13:bd:48:
ad:dc:d4:ef:51:87:8b:44:3e:8f:7c:57:e8:32:35:
3b:ea:13:a6:07:2b:1a:1f:df:07:29:6c:ba:99:a8:
82:e5:c7:68:6f:16:16:f3:63:43:cf:49:5b:e5:6d:
f8:b8:30:85:b9:57:ca:b1:48:e7:9b:41:a9:6d:a3:
9d:ff:1a:f3:3b:51:f2:47:18:88:20:be:08:18:98:
94:85:e2:9f:d7:28:43:6c:98:9e:96:dc:87:fd:c7:
ec:d1:dd:29:e2:52:95:12:4b:bd:77:d6:68:0f:23:
2e:a0:be:11:75:08:a2:e4:3b:4a:ef:1a:a8:0e:2e:
9d:2d:fa:83:25:eb:c5:9b:8f:e2:10:24:8e:4b:b0:
b9:85:f8:c0:e7:ff:4f:48:a8:ad:76:bf:89:91:8c:
8a:69:f6:f0:13:b9:ca:89:40:22:17:e9:37:8f:7e:
b3:2a:06:04:eb:47:f0:ac:4d:ee:98:d3:d7:b5:1e:
e4:4b:5d:81:b9:d2:fb:06:37:8e:6b:30:93:31:b8:
9c:5f:6d:60:27:29:b1:c4:f8:59:34:96:b1:7d:a2:
54:b3:a3:0b:83:63:a7:89:ee:0e:45:9b:e4:b4:2f:
5b:77:95:46:53:e4:ef:86:14:ff:c6:83:03:9d:81:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E2:D9:B3:F6:A6:AF:42:A7:9F:1D:AC:45:11:98:48:FB:EB:09:2D
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7B6334003D2C11F0A30B5E63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.84.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:56:7b:bf:69:fc:b3:63:27:5c:83:c7:6e:10:a1:a1:50:54:
92:ba:fb:09:bd:9d:02:59:6d:fd:71:30:e0:8f:6b:09:5c:9e:
cd:83:1d:9a:7e:93:f1:57:1b:47:1c:aa:f1:8f:04:8c:d8:3b:
d3:9a:95:78:e0:43:d5:77:12:8f:f8:6b:97:35:fb:5e:93:9a:
24:09:02:f9:d2:90:26:35:77:b9:c7:3f:1c:49:8a:31:48:f2:
78:df:4f:80:18:27:08:c5:f3:1c:20:f1:36:ca:92:6b:cf:0a:
fe:5c:81:23:c0:cb:e2:ff:06:de:83:99:b3:d2:c0:5d:b8:69:
2f:5a:ab:94:5d:08:50:95:73:62:d3:d1:9d:48:bd:3d:25:96:
6b:a6:c9:3e:a5:ea:f9:95:00:9d:bb:63:c1:68:34:c2:c8:01:
b1:ce:2e:c9:93:3b:ab:35:1a:10:80:d8:00:be:f4:03:d6:bb:
92:6d:7b:a4:d6:cd:37:64:91:11:b8:32:fb:8b:55:af:71:bb:
c9:ca:18:0e:43:b4:ef:f5:6c:b0:dc:2a:03:83:36:68:8a:cf:
de:9d:67:da:09:4a:a6:53:6f:02:d5:29:bf:73:89:64:72:ae:
0d:d7:bc:8f:1b:37:95:a2:3b:15:c7:20:80:1a:86:61:50:dd:
e7:36:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:51:50 2026 by rpki-client