
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B0B842BCBDDE11EA9977C550C4F9AE02.roa
File: B0B842BCBDDE11EA9977C550C4F9AE02.roa (raw, json)
Hash identifier: PrLrru3zoZQM89KPo5jUm/JBwmvCInvqTImo0wu3Z08=
Subject key identifier: 55:96:58:90:2B:11:8A:44:8D:73:0D:35:70:23:FB:07:DC:E1:A0:D5
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2E85
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B0B842BCBDDE11EA9977C550C4F9AE02.roa
Signing time: Sun 31 May 2026 16:18:34 +0000
ROA not before: Sun 31 May 2026 16:18:34 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 134322
IP address blocks: 158.144.178.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11909 (0x2e85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:18:34 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5f5a-70e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:92:e0:b4:82:7c:29:f2:1b:0b:56:32:91:
1b:bd:84:05:a5:a5:5f:be:cc:c5:52:bb:37:d3:92:
7f:d5:bf:2e:fc:2f:87:0d:75:72:ef:6d:fb:5a:48:
64:1d:7b:bb:b2:b5:c6:77:ec:92:86:ef:50:70:b7:
54:95:9a:45:bb:43:95:ab:65:6a:a8:6c:4b:3c:68:
45:9c:4d:be:83:b7:9d:6e:5c:54:c2:1b:35:2a:69:
a4:7c:a4:14:27:63:2c:57:64:2a:d9:43:0e:75:17:
cb:4b:91:f0:f6:40:8a:c2:5d:4b:08:91:a0:f6:6c:
4d:d3:e6:8e:9e:79:04:ce:40:01:70:a9:2c:2b:e1:
af:a7:23:a1:6e:ef:9c:87:fe:a6:55:ce:10:ef:24:
e5:48:05:67:61:ba:fb:9b:f6:46:c7:74:8a:2a:39:
27:1c:e7:d7:16:bf:43:b2:76:c1:f3:03:a7:46:d5:
e8:e3:ae:57:c6:68:e6:cb:88:1a:97:80:84:09:41:
d8:26:ae:5a:9a:1b:2d:8c:09:02:b4:0c:12:ac:cf:
c5:92:29:04:74:53:70:3e:68:65:8e:00:7f:35:6f:
71:d2:cc:e7:67:81:63:44:66:62:5f:50:12:f8:ad:
01:8e:4d:4f:cd:a8:ac:eb:08:48:95:f4:f8:11:3b:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:96:58:90:2B:11:8A:44:8D:73:0D:35:70:23:FB:07:DC:E1:A0:D5
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B0B842BCBDDE11EA9977C550C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
158.144.178.0/23
Signature Algorithm: sha256WithRSAEncryption
83:6d:65:89:91:70:20:cf:dc:18:ff:b3:21:78:9a:17:f8:0c:
c3:8b:53:a5:a2:86:6b:b9:6a:2d:bb:90:79:67:04:9d:e0:45:
3c:69:51:2b:25:fc:b7:e3:7e:79:cb:c2:bd:de:79:0e:a3:aa:
ed:83:1f:a4:f5:7c:e9:38:c2:8f:d0:a5:fc:31:c5:ff:e3:41:
ec:b5:e2:ad:eb:75:ba:0c:c4:6e:da:09:d5:b8:7e:39:2a:5b:
b3:04:d5:b0:2a:fa:ac:38:14:6a:63:c1:c9:10:95:10:0c:eb:
c4:b3:74:f0:41:a8:a3:0a:f6:f3:f2:dd:0b:e6:e5:e1:47:cc:
0d:ae:15:7b:ac:bc:6c:35:44:0b:4c:4d:d9:f8:b3:96:97:52:
0c:94:71:2c:0e:24:32:3c:3d:60:87:60:dd:87:3a:50:fc:8b:
52:92:98:d2:aa:90:40:07:bf:d1:c4:94:ca:43:29:2d:96:95:
d5:ab:5c:da:5b:d9:4a:c6:fd:ec:2f:c5:fe:36:80:84:cd:4f:
9d:2a:ce:84:7b:07:7f:0d:0d:a1:bb:94:5d:a8:a0:5a:29:21:
a1:36:2e:01:f5:27:de:21:fb:ad:41:c1:af:95:5e:f1:23:32:
4e:a9:5e:31:d5:15:84:94:a7:e3:dc:5b:f6:04:7d:51:f8:e5:
4f:60:19:4f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYxODM0WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNWY1YS03MGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqF6S4LSCfCnyGwtWMpEbvYQFpaVfvszFUrs305J/1b8u/C+HDXVy7237Wkhk
HXu7srXGd+yShu9QcLdUlZpFu0OVq2VqqGxLPGhFnE2+g7edblxUwhs1KmmkfKQU
J2MsV2Qq2UMOdRfLS5Hw9kCKwl1LCJGg9mxN0+aOnnkEzkABcKksK+GvpyOhbu+c
h/6mVc4Q7yTlSAVnYbr7m/ZGx3SKKjknHOfXFr9DsnbB8wOnRtXo465Xxmjmy4ga
l4CECUHYJq5amhstjAkCtAwSrM/FkikEdFNwPmhljgB/NW9x0sznZ4FjRGZiX1AS
+K0Bjk1Pzais6whIlfT4ETu4SQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFWWWJAr
EYpEjXMNNXAj+wfc4aDVMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjBCODQyQkNC
RERFMTFFQTk5NzdDNTUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnpCyMA0GCSqGSIb3DQEBCwUAA4IBAQCDbWWJkXAgz9wY/7MheJoX
+AzDi1OlooZruWotu5B5ZwSd4EU8aVErJfy34355y8K93nkOo6rtgx+k9XzpOMKP
0KX8McX/40HsteKt63W6DMRu2gnVuH45KluzBNWwKvqsOBRqY8HJEJUQDOvEs3Tw
QaijCvbz8t0L5uXhR8wNrhV7rLxsNUQLTE3Z+LOWl1IMlHEsDiQyPD1gh2DdhzpQ
/ItSkpjSqpBAB7/RxJTKQyktlpXVq1zaW9lKxv3sL8X+NoCEzU+dKs6Eewd/DQ2h
u5RdqKBaKSGhNi4B9SfeIfutQcGvlV7xIzJOqV4x1RWElKfj3Fv2BH1R+OVPYBlP
-----END CERTIFICATE-----
Generated at Sat Jun 6 09:59:32 2026 by rpki-client