
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa
File: 98E195B8006911EF9D4A377FC4F9AE02.roa (raw, json)
Hash identifier: OZCRwno8oPRTcGfjpIIa6uI6V896RcZPhe1zCqlZYcY=
Subject key identifier: B3:24:76:27:A9:8E:D8:A2:FC:33:85:E7:A1:BF:82:4B:03:A3:2D:12
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F3F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa
Signing time: Sun 31 May 2026 16:24:32 +0000
ROA not before: Sun 31 May 2026 16:24:32 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 152499
IP address blocks: 157.66.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Jun 2026 09:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12095 (0x2f3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:24:32 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c60c0-4540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5b:30:0d:68:22:e8:7d:06:ca:4e:96:4e:c1:
22:ec:ce:12:f5:83:19:4c:52:12:ec:ca:f6:0a:41:
cc:0e:09:e1:b3:13:ac:6d:33:c3:1e:39:53:ef:de:
92:03:f2:03:50:0b:9c:45:44:9e:76:c8:3e:0a:bc:
13:77:cf:b3:c0:ae:88:35:7e:0d:fa:6f:47:ea:65:
40:31:96:b6:0f:a3:e9:09:42:44:2c:8b:7d:0f:13:
18:be:bf:d4:57:4f:ba:98:25:77:39:bd:b2:a4:0a:
2d:07:de:51:66:fb:eb:1f:5e:e2:97:d1:92:74:f3:
be:24:cc:d5:e5:e2:2e:07:03:d8:1e:b5:f8:c4:ca:
3b:59:38:52:74:87:21:68:8b:79:3e:f1:bc:73:55:
eb:a2:05:e2:b3:35:3f:2f:5c:13:65:4c:1b:40:92:
b6:21:41:e7:40:cb:09:bf:28:8e:a3:52:4d:d0:87:
94:dd:27:ec:7d:c5:88:44:fa:cc:77:c1:d7:52:c9:
ac:a3:ea:70:d1:de:bb:13:b7:15:53:07:59:61:a4:
83:82:f3:75:7d:1a:79:6d:03:c1:4a:38:3f:67:09:
1a:b0:7e:04:65:d3:11:5e:7f:2e:89:4c:1c:b0:f8:
66:5c:45:90:fe:e8:a0:a8:57:a4:9c:3f:2e:b5:dd:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:76:27:A9:8E:D8:A2:FC:33:85:E7:A1:BF:82:4B:03:A3:2D:12
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.146.0/23
Signature Algorithm: sha256WithRSAEncryption
01:6f:d9:49:d3:a8:33:ab:56:d8:86:3c:4d:f9:52:fc:0f:6d:
c1:e0:32:9d:54:5d:6c:cf:1d:e8:69:ab:d0:5f:c7:c8:d9:1a:
8a:4e:f9:41:9e:45:32:c1:33:cf:4e:66:46:31:13:65:40:55:
69:60:eb:c4:79:34:ab:10:45:7b:67:a4:38:67:90:33:21:7b:
9c:94:58:fc:3d:4b:5d:94:73:c2:31:d5:90:df:7d:e7:d9:87:
74:bc:7b:dd:f3:ce:bc:e0:a3:1c:92:b0:5a:54:a6:f2:bf:f3:
49:dc:05:04:3f:56:b6:51:a3:08:12:3c:f9:72:a7:5b:a0:08:
d7:da:43:50:1a:f7:07:5c:56:07:05:f6:34:69:21:98:31:d9:
6e:59:f0:ea:0b:8b:d9:ed:c5:73:d0:69:6f:44:d3:0d:54:fb:
ce:86:12:d4:03:36:41:a9:04:b7:b8:6c:f1:ff:74:ee:0c:5e:
ca:c3:af:e9:af:1c:9f:7e:df:e6:af:35:be:df:81:3f:4b:1c:
cd:b7:d3:7e:e3:06:42:1e:15:4c:0b:97:c3:de:26:dd:b8:a9:
06:13:cb:a7:58:9c:22:f7:8f:be:67:32:cd:19:b7:fd:26:1d:
1d:b0:79:29:d3:de:b6:ed:5d:e8:c0:59:1d:1f:d2:e6:c9:d0:
e5:55:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:25:56 2026 by rpki-client