
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3F70542169111EF9B147C3AC4F9AE02.roa
File: C3F70542169111EF9B147C3AC4F9AE02.roa (raw, json)
Hash identifier: ot63x80yjOn0xqkNLESFXBjdLZLqmF7Ea20jZ6/OmuY=
Subject key identifier: E1:46:39:A1:57:24:52:59:9A:2E:84:87:89:1B:05:C9:6E:AC:7B:77
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 319A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3F70542169111EF9B147C3AC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:23:57 +0000
ROA not before: Mon 06 Jul 2026 16:23:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152571
IP address blocks: 157.66.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12698 (0x319a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:23:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd69d-d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:10:66:b8:f0:bb:4a:86:91:65:46:6f:9a:
2d:18:b8:df:cf:c7:d7:79:3a:32:df:b0:ab:1c:c4:
ca:2c:14:be:a8:40:41:a4:dc:e0:d3:57:68:ee:48:
1d:b7:1e:76:9f:fc:e1:9f:c1:d4:a3:35:c3:33:c1:
32:49:8e:0b:92:2e:d9:80:01:c1:fd:e9:74:26:6a:
a7:8c:fa:5f:9c:c2:0c:65:09:94:19:3f:04:07:b2:
a4:ce:2b:ff:9e:1c:b1:0d:2d:8f:d6:f9:c5:c3:88:
30:19:c9:1b:c4:71:22:04:15:be:23:38:81:d9:e5:
bc:45:9e:fc:c2:14:06:bb:10:89:e9:4b:d6:4d:4a:
e9:e0:6b:90:ec:e7:d9:b7:61:aa:2b:f9:fa:7f:9d:
a4:a6:5f:94:a6:68:7e:5a:fb:27:e3:ea:ff:e5:65:
0b:3a:59:74:c8:f6:d1:7c:91:f6:1b:8c:88:e9:f4:
f3:0f:03:48:0d:8d:90:9c:94:70:2a:43:bb:4b:29:
72:77:ff:18:15:b1:8e:a0:27:16:8d:f6:e1:69:43:
76:23:bf:1f:df:22:2e:50:8b:08:22:37:c2:91:28:
90:25:9f:19:2a:d4:73:40:44:de:f9:f8:2a:b5:7e:
78:d2:13:6a:26:ac:0a:a8:a8:23:60:db:a1:a9:2c:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:46:39:A1:57:24:52:59:9A:2E:84:87:89:1B:05:C9:6E:AC:7B:77
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3F70542169111EF9B147C3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.150.0/23
Signature Algorithm: sha256WithRSAEncryption
66:95:ce:31:1d:36:7d:45:38:c5:e3:64:b8:bb:4d:92:db:bf:
c3:2c:c6:85:c6:aa:28:9c:82:76:70:8f:76:d1:6f:9b:0f:ef:
d3:bf:32:5f:0a:21:af:6c:ec:36:8f:f5:c0:20:b9:f9:ac:a9:
ad:8c:4f:58:43:3e:08:7e:84:86:e1:b9:bd:6a:11:ee:90:fc:
c3:e7:c7:69:08:91:c1:74:27:32:35:c1:b6:26:e7:1a:c6:e7:
75:ef:e2:22:51:e5:03:4c:b3:25:82:78:8f:dc:f9:54:51:f6:
fe:91:05:3f:83:6f:42:dd:b3:85:20:9d:85:d5:4f:a7:b7:5a:
ab:8a:e6:49:78:49:6d:02:b8:d5:75:58:9e:58:81:04:8f:fb:
45:4f:5e:9b:03:2f:ac:e2:1f:3b:35:6b:af:7b:8a:1e:52:44:
8c:63:10:bd:d0:7d:09:e0:b7:01:29:63:95:79:74:52:9b:b6:
fa:0f:ba:1b:d3:c5:50:c2:f8:c5:1f:ee:05:04:af:26:33:c7:
cc:0c:7b:97:b1:3a:fa:c3:c8:80:e8:1a:e7:54:eb:59:19:64:
7f:4e:1a:a8:04:37:fb:17:11:f9:69:3f:0a:35:6e:54:c6:39:
f1:f9:7d:91:75:67:59:9f:5f:1c:a2:9f:e2:93:27:9c:82:b3:
93:f1:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:46 2026 by rpki-client