
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CD64208E2FC211EFBBE41251C4F9AE02.roa
File: CD64208E2FC211EFBBE41251C4F9AE02.roa (raw, json)
Hash identifier: r/HxMUlJ4Ic8NWAq+ST36v1uJB6Tbtr6Y8CWU80phIA=
Subject key identifier: 35:08:8D:26:55:B7:48:AF:72:A3:62:F8:A9:80:10:95:AA:CE:F0:C6
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3165
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CD64208E2FC211EFBBE41251C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:22:12 +0000
ROA not before: Mon 06 Jul 2026 16:22:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152496
IP address blocks: 157.66.105.0/24 maxlen: 24
160.19.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12645 (0x3165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:22:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd634-416c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:56:74:7f:a8:0d:05:63:3a:47:fa:7c:02:
4b:41:2f:d0:fa:e8:31:b9:34:d2:6a:c7:3c:13:d3:
d1:ff:00:2c:00:3e:51:ad:2a:bc:87:ca:c6:91:8c:
fd:97:50:d0:ce:f8:64:36:dc:3a:22:12:fe:a4:2e:
0f:55:9a:82:03:40:38:33:1a:b5:ae:6c:51:04:bf:
22:04:bd:df:ec:9f:c5:52:af:08:80:e2:8f:cb:e6:
b8:cc:6f:e2:9b:7f:fe:75:99:ad:dc:78:75:9c:a6:
d2:23:9f:72:dd:56:2e:48:be:64:95:2c:ba:2c:c1:
9e:43:52:9b:e7:f5:bd:84:d2:99:ef:01:c8:1f:29:
28:95:8d:0f:a2:e5:11:02:cd:00:8d:de:9a:74:70:
4b:d5:11:45:e0:31:5b:9f:1e:1f:8e:7c:c4:f4:46:
89:e1:b6:b2:e8:37:b5:b4:15:1d:7d:0f:59:55:9c:
ed:ab:b7:37:d3:73:fb:e1:25:3e:9b:44:ef:a4:98:
3c:01:b2:f3:c5:bf:3c:a0:dc:cc:73:01:bc:24:fd:
44:b9:ce:ad:a0:3b:11:9a:40:8e:70:59:75:7f:b1:
c0:03:22:0d:25:00:44:26:71:7c:30:33:c3:dc:48:
69:4a:50:54:bc:12:3a:0e:8e:9e:e8:99:16:32:8a:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:08:8D:26:55:B7:48:AF:72:A3:62:F8:A9:80:10:95:AA:CE:F0:C6
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CD64208E2FC211EFBBE41251C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.105.0/24
160.19.43.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ce:7d:7b:b3:0a:a3:14:97:6b:83:01:bc:1c:44:2f:2b:f2:
a1:c2:a0:9d:64:29:6a:cd:89:bf:43:b6:83:b7:66:1e:4b:5c:
12:e3:95:94:c7:76:93:5f:16:79:78:03:c4:df:54:ba:b2:64:
59:1d:d2:8b:5a:15:53:4e:74:a9:84:22:b5:32:08:23:a3:8c:
d9:a8:56:c1:c3:61:28:dd:97:4e:81:06:1b:33:6c:79:30:76:
6c:f0:08:94:5f:77:f6:e4:4f:86:d2:95:5c:70:21:ad:bf:f2:
c0:ba:ce:46:f8:57:71:6a:c0:fa:02:62:f9:2b:cc:05:cc:52:
a8:db:b1:95:ad:50:52:51:0b:10:96:e6:25:44:14:0d:4b:c3:
f4:0e:44:28:de:52:ea:db:c0:df:c8:eb:22:72:0b:03:87:66:
8a:17:61:91:6d:59:ce:67:55:10:52:d6:34:c8:2b:2a:e7:1c:
73:63:d2:94:a8:ed:6e:ec:e8:23:1b:d0:3b:7a:11:16:9a:b0:
9b:a6:1e:bb:0d:0e:a3:60:2b:b0:a4:58:c4:1b:a9:63:78:eb:
0a:5f:da:a9:62:b9:3f:41:a5:b3:06:bd:b3:6d:bd:81:d9:e2:
9d:37:23:f7:95:4f:70:bc:8f:80:00:3a:ac:cb:e3:d3:28:14:
db:f8:b2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:46 2026 by rpki-client