
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ABA87AC0C58311EEBC410F36C4F9AE02.roa
File: ABA87AC0C58311EEBC410F36C4F9AE02.roa (raw, json)
Hash identifier: MfpPD/fJZIJ28tjJXHTvvGKSl7N/TEvng5bNZL1ZBlQ=
Subject key identifier: 2A:B8:D3:C3:F0:16:E4:6B:65:1E:65:C1:7B:F9:36:C5:6B:AD:FC:5D
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2EC3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ABA87AC0C58311EEBC410F36C4F9AE02.roa
Signing time: Sun 31 May 2026 16:20:33 +0000
ROA not before: Sun 31 May 2026 16:20:33 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138771
IP address blocks: 157.15.146.0/24 maxlen: 24
157.15.147.0/24 maxlen: 24
165.99.84.0/24 maxlen: 24
165.99.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11971 (0x2ec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:20:33 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5fd1-1c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:2b:91:5c:ee:e7:04:c1:ac:61:05:80:de:
7b:71:e3:12:7d:f6:10:bb:8d:87:83:6f:37:ec:80:
69:06:65:61:a7:dc:cf:08:24:84:82:28:34:1e:b5:
92:f2:cf:e6:b2:20:32:30:6f:29:49:c7:8d:2c:51:
96:9f:5e:24:fc:50:9e:bb:98:0e:74:cf:46:9a:de:
42:04:e9:15:29:04:06:5d:ae:bd:19:67:9f:87:1c:
c0:67:1c:cf:9b:f1:8b:2d:91:ee:06:5f:f7:7d:cd:
1b:72:d3:63:00:8c:65:fe:f5:8b:8e:28:2b:b8:de:
d8:87:35:8c:82:75:d9:e9:eb:37:2a:eb:0f:bc:d0:
37:7e:96:56:fb:fb:88:c7:44:99:8b:bb:53:3a:39:
7c:ba:08:49:43:93:2d:bf:b7:3f:f3:e0:a6:63:50:
13:ed:e8:c2:ac:43:f8:f5:3c:52:c2:b9:01:7e:b3:
b7:6e:5d:33:e3:8e:ed:fc:03:37:f8:83:52:66:fa:
5e:db:aa:e8:03:9c:cb:73:51:f2:24:e4:04:f2:00:
a5:f2:cc:78:c8:c2:d8:99:d7:30:77:60:0e:c3:1f:
2e:f0:95:6f:81:26:7d:e6:82:4f:7f:df:e4:e7:e3:
cf:b4:fa:9a:57:83:b1:8f:1a:dd:05:d6:84:9e:17:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B8:D3:C3:F0:16:E4:6B:65:1E:65:C1:7B:F9:36:C5:6B:AD:FC:5D
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ABA87AC0C58311EEBC410F36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.146.0/23
165.99.84.0/23
Signature Algorithm: sha256WithRSAEncryption
33:f7:a8:da:72:16:a9:3a:e2:52:85:03:3d:2e:b8:7e:e6:a9:
4f:a5:b6:c0:49:d0:8b:96:52:ee:e8:d3:0b:21:f7:97:7b:bd:
8c:09:6b:1c:63:6b:23:ac:2a:02:41:a9:27:bd:01:75:31:92:
20:27:a5:5e:54:a2:8c:0b:65:e0:2b:5a:2c:09:7c:d5:a4:5a:
91:40:67:cd:30:94:5b:fa:2c:fd:47:98:4a:4f:ef:d9:68:ad:
d0:22:12:8f:91:c5:19:c1:81:8f:9f:3e:72:bc:ce:5b:11:8b:
87:6b:26:90:73:fd:91:a9:a7:77:03:fd:95:a8:8b:99:eb:48:
43:7c:b7:5a:93:10:16:6a:f8:47:05:bd:8e:ee:97:83:e4:3f:
09:9d:be:76:90:ea:72:ee:38:f0:a8:fb:72:03:f6:fd:dc:f7:
de:e2:f1:f6:09:92:35:e5:18:53:f2:2d:25:2c:b9:00:22:56:
2b:cc:c7:86:9a:c0:b0:98:97:b7:d9:34:9f:bf:da:f6:3b:a7:
b9:12:86:3c:56:aa:81:29:71:4d:9e:ea:31:85:a7:52:70:5c:
17:f7:ed:59:74:3b:47:c6:f4:3d:9f:33:c9:7f:3f:4b:27:dc:
fd:08:72:fa:b6:70:06:a8:cf:b9:71:5b:c2:3a:48:db:06:59:
da:c8:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:05 2026 by rpki-client