
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BD032766013D11EFA1F5104BC4F9AE02.roa
File: BD032766013D11EFA1F5104BC4F9AE02.roa (raw, json)
Hash identifier: 5WoHxk/ImgAFbks4RWtQpecNNZCQ6ofMAKhDhwQw+Ao=
Subject key identifier: C2:44:0B:AC:FD:7C:51:15:42:DA:F0:D0:D4:F8:A5:CE:07:8B:49:9B
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F21
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BD032766013D11EFA1F5104BC4F9AE02.roa
Signing time: Sun 31 May 2026 16:23:34 +0000
ROA not before: Sun 31 May 2026 16:23:34 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151726
IP address blocks: 157.10.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12065 (0x2f21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:23:34 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6086-060d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:01:ac:b0:38:74:6b:34:e0:7b:3a:02:24:
b2:8b:0c:65:2e:23:d6:23:37:2f:7d:f0:ab:c2:e4:
1f:96:79:e6:9a:da:79:31:df:07:25:56:25:1b:0a:
61:fc:ac:3b:6d:9b:c7:9c:e4:82:94:63:40:6b:56:
8e:07:5a:3f:50:c9:f0:8f:d8:8f:60:b6:5c:bb:b8:
7a:9c:96:b9:ed:e4:b4:d3:9e:11:b2:15:00:ea:1a:
45:05:ca:b4:48:d1:5e:39:34:eb:96:16:09:a5:f0:
ee:f4:2d:dc:32:d4:bc:fc:04:27:c5:f2:9e:84:f7:
f8:b9:cd:63:60:4d:5f:4c:27:35:c6:7f:52:f2:1f:
2c:a7:73:9d:cf:52:1f:35:2f:e3:3b:0c:53:75:b2:
a3:48:3e:fb:97:14:9c:91:95:8f:10:ea:98:37:ba:
17:75:08:64:a6:32:25:ad:4b:ae:ac:04:60:29:a1:
0e:b2:c9:4e:86:df:39:cd:ce:10:f0:63:ed:b6:4e:
b5:77:6b:2f:a1:8e:d0:db:30:58:18:b7:2a:0e:9e:
45:19:2b:a6:e9:db:be:7a:53:f6:84:ae:c8:87:47:
e2:20:82:06:62:d4:85:3a:21:b9:bc:1b:18:29:fe:
67:0e:06:41:95:16:e6:db:e3:34:2c:76:85:3b:b2:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:0B:AC:FD:7C:51:15:42:DA:F0:D0:D4:F8:A5:CE:07:8B:49:9B
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BD032766013D11EFA1F5104BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.150.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:1b:c8:d1:5d:3a:35:72:c2:1d:11:9e:99:6e:6c:e9:45:43:
0c:81:73:97:fd:c9:3a:96:2e:53:24:e0:10:96:63:6c:5f:b3:
5c:84:f7:b5:03:f9:d1:19:bc:34:5d:c9:ff:7b:a6:c9:93:b2:
ae:79:ee:06:8f:d1:6f:5c:3e:fb:31:bb:c7:f7:3a:b0:75:37:
00:fa:d9:6e:48:97:5c:16:84:da:9f:a1:43:cf:f1:54:85:fc:
3c:9a:64:38:cf:63:b5:08:e4:0e:2d:fd:0e:e7:30:44:b4:83:
a1:48:b0:ab:55:19:a5:18:68:4c:d3:1d:68:af:d9:6e:c2:b6:
c7:48:d2:2f:73:91:1a:f3:24:49:ef:6f:f6:0d:e2:c6:8d:c4:
3f:48:41:2b:60:be:db:b4:f6:69:f6:fb:40:68:28:e7:77:c6:
b8:15:3b:9f:5b:9d:83:d9:cc:95:3b:b0:17:56:d6:bd:e5:58:
22:f7:62:ca:f2:07:cb:81:bb:41:dd:d5:95:85:e8:3d:e1:0c:
45:b4:18:81:3b:50:5a:b2:89:4d:0c:7a:15:3c:5a:b1:26:17:
8f:30:36:f1:f3:1b:77:be:44:f4:18:f7:84:48:89:4e:3c:29:
f0:d8:a2:52:f3:ce:cc:c6:69:85:2e:7c:f5:41:75:98:00:de:
ab:f4:c3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:32:31 2026 by rpki-client