
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F41C354CCB411EEA47EB676C4F9AE02.roa
File: 8F41C354CCB411EEA47EB676C4F9AE02.roa (raw, json)
Hash identifier: 8hh50m++dP8TCRWoDBFrhThdmafOwa7i6CcRd87/1qM=
Subject key identifier: CE:4C:75:EC:63:CD:7F:BF:D0:80:D1:A5:19:D1:D8:8A:37:17:A8:4A
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2EF3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F41C354CCB411EEA47EB676C4F9AE02.roa
Signing time: Sun 31 May 2026 16:22:07 +0000
ROA not before: Sun 31 May 2026 16:22:07 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 146918
IP address blocks: 157.10.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12019 (0x2ef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:22:07 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c602f-d9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:21:7c:dc:d5:f8:90:ca:5d:65:38:6f:f5:
9f:d4:df:c2:11:8f:1b:60:f9:56:5e:65:5a:9f:e6:
64:42:3b:44:4f:73:94:f4:83:fb:bc:57:a6:2c:29:
30:58:c3:39:f8:c0:20:be:aa:c6:1a:98:4c:72:80:
5b:97:a0:87:14:a9:6b:a6:23:3c:6a:54:41:19:cc:
69:0b:37:c8:f2:b3:b1:13:ba:a9:2e:7e:da:42:ed:
bb:d2:ff:69:2b:bb:8d:07:e0:37:12:3e:d8:f1:9b:
27:3e:2c:fe:38:13:05:f8:2e:49:71:01:2b:dc:ea:
4c:fe:06:cf:d1:7b:8c:50:22:06:58:ae:35:47:d1:
b4:c5:cc:e2:48:97:18:08:b3:8e:e2:6a:9a:dc:82:
67:a3:8e:7c:22:ee:40:5c:2b:ab:b3:d7:1c:87:cd:
7d:95:02:6e:de:cc:3b:d8:9e:22:86:a7:bb:9d:25:
d4:c4:63:9a:2e:c9:8b:2e:8a:1b:bf:d8:74:96:40:
74:36:ff:dc:98:0d:8f:db:be:ce:cc:51:76:02:9c:
e8:ab:f4:2f:30:c1:4a:92:bc:97:73:0c:a8:fd:d1:
81:44:48:9c:88:52:ba:c4:60:2c:da:0c:95:a1:24:
19:ac:93:4e:71:59:92:d5:3f:cf:1e:da:8b:c6:2a:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4C:75:EC:63:CD:7F:BF:D0:80:D1:A5:19:D1:D8:8A:37:17:A8:4A
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F41C354CCB411EEA47EB676C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.96.0/24
Signature Algorithm: sha256WithRSAEncryption
71:6b:a4:7a:f5:d3:5b:ca:b3:6d:11:a4:c0:b4:25:1b:a8:b3:
0f:1a:e4:52:f4:63:25:0d:96:1b:ec:2b:d4:84:cd:3b:fb:95:
76:90:eb:9d:df:61:7c:0a:bd:d0:c3:16:52:58:c9:2e:70:25:
0a:da:b3:f0:39:89:be:37:20:12:d4:96:9a:00:e2:8b:f3:ea:
9f:43:ff:56:57:5f:a5:da:2e:19:b5:99:2f:11:50:d5:cf:50:
a4:1d:2f:0c:f8:d8:76:dc:29:6a:f1:54:18:12:c1:71:ab:16:
2c:d6:0b:f7:ca:b3:2c:4c:86:35:06:86:d6:76:92:12:94:46:
5a:4a:c9:79:2e:16:5a:23:43:80:b2:1d:5e:1e:82:bd:7f:7a:
3e:71:2d:0d:43:3e:e8:fc:9a:6f:16:e2:1c:c8:ff:68:1b:ad:
49:48:4b:11:18:88:a0:3a:42:9d:f8:32:59:69:75:b6:de:72:
c3:a4:fc:6c:d7:ad:5c:f3:64:92:36:14:01:69:62:59:bc:33:
03:89:f4:be:f6:e4:b8:87:50:eb:e6:e3:c0:bc:b3:62:58:db:
9f:41:ca:9a:06:5b:58:e2:b6:bc:2a:df:82:31:12:8a:87:1b:
8f:71:58:30:4c:07:4e:5f:84:83:e9:12:af:0c:2b:52:5c:f0:
20:9a:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:47 2026 by rpki-client