
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A161B3B8C0D511EEB0307181C4F9AE02.roa
File: A161B3B8C0D511EEB0307181C4F9AE02.roa (raw, json)
Hash identifier: fmGk3ARif4jNrKl38RpDKvHAOUjHgnPbEpJuitGYDwc=
Subject key identifier: 5D:B7:ED:C3:7C:37:5E:4F:BC:1E:38:2C:90:1C:1B:EA:B8:1A:93:BF
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 314C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A161B3B8C0D511EEB0307181C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:21:19 +0000
ROA not before: Mon 06 Jul 2026 16:21:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151729
IP address blocks: 157.10.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12620 (0x314c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:21:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd5ff-d466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:8d:07:04:3e:84:89:81:13:cf:a7:dd:fa:
bc:16:1a:9a:2e:9b:8b:15:07:13:6b:2c:ec:92:9f:
f8:78:df:54:1f:e3:a7:26:e8:06:d8:47:15:f0:da:
ca:fe:47:31:45:fe:fa:e3:55:19:c5:9e:dc:dd:98:
a1:05:19:0d:be:fe:ca:26:ff:ba:e7:19:52:de:6a:
76:fb:df:fb:e8:97:00:fa:bf:53:42:42:a6:00:09:
1d:2c:da:50:f4:7d:c2:17:fa:55:f2:09:46:29:fd:
fd:9b:e4:c6:4e:57:d1:f3:97:8a:54:4b:bd:5d:30:
d1:a0:a8:67:3d:ff:8b:f9:c9:49:c0:d6:b3:9d:e0:
ae:89:4d:d6:d6:f2:19:30:c7:3d:25:bd:92:e3:42:
1b:30:f1:ac:75:3c:23:7e:ca:d9:c7:92:b7:f9:f8:
af:2e:51:5e:13:3f:13:aa:1e:a0:b3:25:1b:fa:aa:
ed:f3:fc:23:b3:c0:f1:bb:5c:3b:22:1f:03:94:85:
d0:14:03:fe:d1:d1:8d:7a:cd:21:ed:70:1e:d5:ba:
a4:6a:d7:cc:5e:63:d5:34:ab:31:35:bb:be:54:8d:
a0:f8:cd:17:78:fa:07:85:53:87:ac:3d:47:53:d4:
f3:82:61:6b:03:fe:ff:63:67:ff:07:9c:4d:07:0a:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:ED:C3:7C:37:5E:4F:BC:1E:38:2C:90:1C:1B:EA:B8:1A:93:BF
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A161B3B8C0D511EEB0307181C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.248.0/23
Signature Algorithm: sha256WithRSAEncryption
22:83:50:4b:1b:84:ec:5a:7f:6a:71:5b:d6:42:2f:bb:34:9a:
16:6f:f5:55:2b:70:18:4b:28:90:1d:6b:01:c4:84:fd:77:55:
6a:eb:b7:88:80:1f:fe:d4:8b:b9:2f:9b:8b:44:4d:38:82:87:
db:05:57:e9:53:dd:dc:24:26:e0:1c:dc:08:86:28:49:79:49:
a6:26:5b:51:da:53:55:7d:60:6e:a8:f5:b2:ab:77:c2:41:eb:
6d:c2:5d:91:76:e7:60:12:1e:48:0a:2a:16:8d:13:fb:c1:4d:
4d:4f:50:a3:74:e5:2e:fc:9b:61:d4:85:c5:e9:8b:fa:40:68:
81:78:30:85:80:3a:35:af:42:43:b5:38:1a:7a:07:aa:d0:5d:
63:5a:89:97:a7:cd:b0:a4:8a:d9:b1:3b:89:20:f2:d6:e0:c9:
43:c8:f1:7f:38:a5:9e:25:18:a4:a7:69:d0:65:04:bd:19:f2:
91:27:51:5d:fb:13:0a:da:7f:2f:93:f2:ed:e3:ef:a2:83:df:
e8:4f:b7:ed:4a:ac:6d:69:86:50:c0:a1:17:18:e2:e4:f9:4c:
42:7d:52:7d:af:96:34:5c:a8:95:19:49:f4:20:56:c3:46:9b:
01:e8:6b:b4:b2:93:e3:b9:86:68:7c:3b:cc:21:70:f2:21:41:
7c:16:f6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:24 2026 by rpki-client