
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa
File: 98E195B8006911EF9D4A377FC4F9AE02.roa (raw, json)
Hash identifier: tZzk7FHJ2QdvnAxN24hXIAHO69f6+iECbOx5SHYdnBE=
Subject key identifier: EF:8E:25:43:83:85:6E:30:50:F0:46:00:FE:02:DF:98:C6:38:EE:F0
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3168
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:22:17 +0000
ROA not before: Mon 06 Jul 2026 16:22:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152499
IP address blocks: 157.66.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12648 (0x3168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:22:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd639-9bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:d3:fb:3c:10:c3:21:bb:22:f8:5c:a0:e3:
d8:0d:72:ee:9c:0b:5d:08:4d:98:01:c5:3f:e1:32:
f9:e2:e7:22:fe:71:05:2c:b1:6f:d9:5c:94:58:62:
be:be:30:f2:b2:96:2f:89:39:dd:1d:61:62:99:91:
c5:e6:79:d5:1b:54:30:13:c1:f7:61:f0:d1:23:bc:
ee:57:36:e8:92:63:39:81:95:fb:78:86:3e:78:22:
59:52:ae:92:c3:d4:12:dd:62:01:da:9a:88:f4:ad:
36:c4:4a:75:04:b9:fd:c7:ab:fe:03:12:e0:50:49:
1f:a6:c6:6b:59:af:e1:dd:e2:f7:0f:dd:8f:09:a7:
44:1f:e4:2c:02:7f:0e:c6:2a:67:03:d0:55:64:cd:
5e:7d:00:5d:6b:7a:ea:44:e8:cd:3f:eb:92:a0:a4:
01:92:cb:1a:a2:59:fb:fc:3a:e3:a8:b0:cf:8b:13:
33:71:0d:d9:de:e8:33:cb:b1:b1:c8:19:93:ca:38:
ad:59:29:27:24:74:af:54:68:a1:d8:48:20:fc:91:
ed:f5:46:b5:2f:2f:d5:a5:7f:ec:55:75:b6:12:a4:
3a:6b:d1:6d:12:43:a5:65:8a:17:e8:fa:e6:8d:9e:
39:31:29:06:8f:0f:9f:32:ce:37:f5:0d:35:f0:63:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:25:43:83:85:6E:30:50:F0:46:00:FE:02:DF:98:C6:38:EE:F0
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.146.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:d2:94:85:56:4d:62:2b:b7:35:bd:83:7b:ff:26:22:85:72:
ef:2c:b8:2d:88:32:98:9a:13:2e:a5:82:93:3f:74:3d:e9:d3:
68:b0:7b:c7:26:f7:26:23:e7:bf:95:af:91:66:60:64:d6:4a:
ec:d1:0f:f0:1d:09:36:e5:23:14:c2:ed:e3:70:ff:b0:36:f2:
c2:77:2c:9a:d0:35:af:b4:3c:3b:1b:85:0d:1a:10:15:db:1e:
e2:c1:1a:28:59:97:95:d2:ff:39:7e:d6:23:18:cf:32:d8:78:
4d:57:aa:c2:13:85:b2:50:53:c8:c7:5e:51:02:0b:ab:f2:fa:
b2:05:3f:84:23:5d:5a:28:c1:23:c0:33:2f:5b:0e:74:36:41:
95:4c:dc:16:0a:c7:94:a5:e1:7c:b9:d4:64:b9:05:1b:11:03:
01:09:0d:cc:92:2d:bf:74:2a:72:b1:24:51:a8:df:3d:18:14:
74:76:34:99:12:26:6e:48:82:d1:38:a9:e5:23:42:8d:db:e9:
66:82:9d:27:61:7b:d7:a6:96:5b:22:56:57:6d:cb:6f:e1:b8:
20:7b:cd:c7:25:a5:03:b9:9f:f6:72:26:4b:2a:02:99:4f:4c:
f9:62:34:f2:6f:ae:69:40:07:ab:be:f1:98:87:49:a9:67:5f:
0d:da:ad:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:24 2026 by rpki-client