
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
File: BE63E1C2FE1D11EE9E701774C4F9AE02.roa (raw, json)
Hash identifier: NUvqKomOJzmZgHZvUhB1VdywrMt2NncyOmulVkE8kqo=
Subject key identifier: 7E:61:0C:13:54:08:AD:88:9D:F4:EB:52:BD:70:4D:11:72:83:BA:15
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30B1
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:16:12 +0000
ROA not before: Mon 06 Jul 2026 16:16:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134926
IP address blocks: 157.20.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12465 (0x30b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:16:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd4cc-1039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:41:be:c1:55:cf:cf:f8:14:c2:9e:f3:06:
5e:80:84:40:66:28:b5:c6:75:9b:34:54:66:4a:40:
cf:4c:29:4e:70:dc:0d:76:77:20:f0:7f:26:24:36:
e1:9d:48:3c:56:46:78:78:a2:2f:a3:81:bf:8d:9b:
3c:e6:34:a9:12:99:41:36:33:08:0a:b9:7e:24:67:
60:11:63:c6:d7:96:d3:50:3e:3a:a6:bb:12:c6:b8:
7b:c4:28:30:4c:68:f1:ef:2a:e3:0b:9f:e3:48:93:
a3:1d:25:4b:9b:5d:43:65:1b:4c:67:61:f0:35:e3:
33:c1:ac:3f:3b:3f:83:85:24:52:1f:35:77:2a:be:
5e:79:e6:fc:f3:86:69:75:e0:93:bc:90:b7:fc:d0:
0e:12:23:41:90:56:6e:79:96:34:99:28:37:a0:39:
4b:2d:cd:37:18:5c:32:73:1d:62:fd:c0:92:8f:c2:
0d:fd:b6:c2:a6:44:8f:bf:7c:b7:cb:ed:8e:b2:4c:
ab:49:eb:58:48:be:93:5e:6e:eb:2d:cf:4a:1f:1c:
65:c7:be:ba:83:fc:9e:52:d7:f2:35:a1:d2:c8:6c:
c5:62:c1:89:65:60:85:03:ae:b2:45:78:25:81:f1:
e4:80:2a:24:72:54:ab:1b:0a:75:52:f4:c4:7d:d7:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:61:0C:13:54:08:AD:88:9D:F4:EB:52:BD:70:4D:11:72:83:BA:15
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.214.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:fb:2f:04:03:ba:58:77:93:4c:21:ca:00:ac:fa:f5:9d:32:
ec:3f:fb:f5:61:29:26:96:59:bf:b8:0c:72:c9:e5:07:87:11:
74:c2:ef:ec:05:d5:b2:17:ff:82:94:9d:c7:54:5f:3e:06:21:
ed:b7:c3:37:bc:3e:20:1d:7c:66:9b:35:0b:4b:1f:19:ae:49:
d0:8b:e1:96:66:90:4f:b9:99:26:6e:93:9e:c2:62:22:4a:f1:
c3:94:f4:2f:ad:8e:d5:66:4d:9f:71:9c:e1:35:2e:be:dd:81:
24:c0:b7:d9:03:94:d4:6d:e9:c8:42:fc:41:4c:ef:ad:2f:48:
4c:0b:5a:d3:55:c6:12:3b:e8:52:3e:91:cb:45:d9:ea:9f:1d:
ee:5c:f0:14:c5:c5:89:01:ba:bb:bd:a6:9d:91:1e:df:31:34:
0a:89:56:1e:1d:4c:16:b1:df:95:88:98:ac:32:7d:db:be:36:
50:18:05:ee:c8:cd:6e:0d:fc:1a:41:89:c8:e8:87:2e:58:77:
ff:7c:42:4e:20:ca:13:d2:bc:56:6a:b3:0b:f6:cd:9d:94:30:
df:a6:a8:e0:54:87:a7:cc:fd:95:e9:f6:dc:1f:1a:02:3d:b8:
27:67:26:6b:d8:b9:8d:52:a8:ad:52:5b:52:d6:5a:9c:e5:aa:
6c:d5:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:33 2026 by rpki-client