
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/88D9D8BA2E0411EF87801679C4F9AE02.roa
File: 88D9D8BA2E0411EF87801679C4F9AE02.roa (raw, json)
Hash identifier: YDf6IuBgkM8qtPdGekpBEKJaX8yxI+SCdBEmknZ5RuY=
Subject key identifier: 90:C3:62:02:2A:40:B6:9A:D4:77:D8:78:14:F2:FC:ED:DA:41:5E:A3
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 319B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/88D9D8BA2E0411EF87801679C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:23:59 +0000
ROA not before: Mon 06 Jul 2026 16:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152572
IP address blocks: 157.66.178.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12699 (0x319b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd69f-abeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:82:e3:88:33:2a:fd:d8:c2:2c:c7:0b:69:
84:a7:f6:aa:cf:e5:ab:e9:98:cf:f8:21:c7:d3:45:
ef:1b:2e:62:31:dc:52:a3:5c:9d:e7:46:e7:dd:10:
b7:f4:7d:b3:5c:30:92:8e:28:17:38:ab:06:ae:0a:
15:56:fe:f2:25:b6:f2:fc:e6:d3:31:a7:b1:87:15:
36:23:f1:2b:1a:7f:91:ed:f6:26:88:8b:46:49:bd:
f7:9b:ca:a8:b3:95:12:82:4c:d5:dc:c7:2d:94:9e:
aa:7d:93:bc:e2:83:0f:49:83:fc:ac:74:64:7c:66:
f9:fd:46:ce:bd:5d:fc:70:dc:c4:e8:ac:a3:d4:9f:
15:43:5e:f3:cf:2d:e7:48:a4:7d:76:62:03:aa:55:
51:0d:80:06:67:ab:f8:79:ff:39:a4:77:ec:64:31:
5d:42:90:9d:0e:5f:82:00:a5:be:39:24:fa:43:86:
25:77:9f:4f:e7:50:1a:18:cc:7e:cc:a8:76:fc:32:
68:e4:ed:b7:46:58:7f:6d:a8:35:0f:5b:25:55:58:
d3:b2:9c:13:f5:00:8e:23:21:01:46:b0:cd:b9:ea:
17:b3:82:74:98:28:5d:d8:71:15:24:40:c8:23:98:
96:9e:04:62:d5:39:e3:17:14:7b:17:49:e3:95:d2:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:62:02:2A:40:B6:9A:D4:77:D8:78:14:F2:FC:ED:DA:41:5E:A3
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/88D9D8BA2E0411EF87801679C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.178.0/23
Signature Algorithm: sha256WithRSAEncryption
40:fd:94:4e:54:60:ef:25:33:6d:f6:9c:ec:1b:5d:33:bf:eb:
5d:dd:5e:88:f1:fc:ab:50:a6:1f:98:f1:25:05:73:96:7d:4c:
64:a5:f7:41:e0:de:50:9a:15:47:96:e5:ec:00:9f:56:92:64:
3b:40:b4:70:ca:1e:94:45:87:71:9f:4e:9c:f0:ed:80:06:c2:
d7:e0:9f:4d:53:28:b0:16:f9:c0:b4:79:0b:88:29:ad:a6:d7:
3f:ba:5b:98:b5:7a:f9:ae:50:4d:1b:90:70:05:8a:6e:bd:c9:
88:5b:f7:0a:cd:0d:5f:8e:b2:ba:c9:31:95:f8:95:6e:0a:6f:
1d:58:70:2a:dc:a0:58:31:83:d3:cc:0c:99:b3:ad:20:4d:96:
36:78:1b:a7:c6:7c:4e:0e:9f:fc:86:be:36:7d:c0:a8:d9:41:
b4:b3:4c:a7:26:77:83:cd:10:0a:4a:88:0f:2e:94:d0:3d:5e:
ea:0e:82:a2:78:a5:c9:a5:52:9d:df:c0:d0:0c:4a:01:11:5c:
d2:00:72:5f:d2:d3:ff:f1:7e:03:cf:b7:c6:57:43:cf:68:bc:
2e:7b:8b:6a:a0:63:f2:e3:d7:99:11:34:f6:a3:67:3e:da:67:
c2:5e:8e:5f:84:85:72:d6:d0:db:8d:e5:c0:06:4c:e8:6b:43:
fb:6e:f3:b3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYyMzU5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDY5Zi1hYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumOC44gzKv3YwizHC2mEp/aqz+Wr6ZjP+CHH00XvGy5iMdxSo1yd50bn3RC3
9H2zXDCSjigXOKsGrgoVVv7yJbby/ObTMaexhxU2I/ErGn+R7fYmiItGSb33m8qo
s5USgkzV3MctlJ6qfZO84oMPSYP8rHRkfGb5/UbOvV38cNzE6Kyj1J8VQ17zzy3n
SKR9dmIDqlVRDYAGZ6v4ef85pHfsZDFdQpCdDl+CAKW+OST6Q4Yld59P51AaGMx+
zKh2/DJo5O23Rlh/bag1D1slVVjTspwT9QCOIyEBRrDNueoXs4J0mChd2HEVJEDI
I5iWngRi1TnjFxR7F0njldIiHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJDDYgIq
QLaa1HfYeBTy/O3aQV6jMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODhEOUQ4QkEy
RTA0MTFFRjg3ODAxNjc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnUKyMA0GCSqGSIb3DQEBCwUAA4IBAQBA/ZROVGDvJTNt9pzsG10z
v+td3V6I8fyrUKYfmPElBXOWfUxkpfdB4N5QmhVHluXsAJ9WkmQ7QLRwyh6URYdx
n06c8O2ABsLX4J9NUyiwFvnAtHkLiCmtptc/uluYtXr5rlBNG5BwBYpuvcmIW/cK
zQ1fjrK6yTGV+JVuCm8dWHAq3KBYMYPTzAyZs60gTZY2eBunxnxODp/8hr42fcCo
2UG0s0ynJneDzRAKSogPLpTQPV7qDoKieKXJpVKd38DQDEoBEVzSAHJf0tP/8X4D
z7fGV0PPaLwue4tqoGPy49eZETT2o2c+2mfCXo5fhIVy1tDbjeXABkzoa0P7bvOz
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:31 2026 by rpki-client