
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1092D4EADED11EE98CBFB61C4F9AE02.roa
File: D1092D4EADED11EE98CBFB61C4F9AE02.roa (raw, json)
Hash identifier: qjed6gskoiUfleHoNKZnhvD73+RQQnEKAp25LQSccPY=
Subject key identifier: 86:4C:BE:DF:21:C0:EE:5D:01:50:80:4A:48:F0:18:36:B4:15:76:4E
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30CC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1092D4EADED11EE98CBFB61C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:17:07 +0000
ROA not before: Mon 06 Jul 2026 16:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136330
IP address blocks: 157.10.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12492 (0x30cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd502-df57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:a7:91:78:1e:e7:a5:f9:4b:89:62:82:ad:
27:b5:cf:00:6f:b1:b8:82:54:2a:8b:16:8b:bb:73:
41:61:7f:b1:d3:47:ac:45:f8:a0:4c:85:d2:7b:e9:
f6:20:d9:c3:a8:5f:13:b9:51:9f:ba:1c:13:86:ff:
d4:88:c4:07:2c:db:90:b9:25:97:b4:1d:9c:39:38:
c6:40:19:04:89:8c:fb:42:c8:80:a2:bb:cd:81:3f:
1a:9c:cc:e9:c1:4d:c2:c8:f2:b4:f1:82:76:f4:a8:
b5:20:68:d7:17:a9:12:9c:2d:fa:11:d5:93:64:d4:
2e:14:ea:34:e2:9b:9f:f2:5e:f8:9e:84:48:1f:bb:
ca:16:fd:cc:5c:9c:9e:38:e0:73:84:e8:43:47:e0:
de:2c:79:de:99:da:2f:77:93:df:e8:77:3a:f6:4b:
d8:78:19:f1:e2:29:48:30:6e:88:ee:4e:6d:4a:1e:
2c:44:9a:f0:5a:8b:be:78:9b:4f:34:2f:3e:2a:b3:
ff:37:c8:66:3d:31:27:b3:9f:c4:d7:28:d2:ea:79:
a0:3e:30:fc:32:35:4d:07:1d:5e:aa:85:43:e0:67:
63:e8:3b:b5:12:d1:8c:72:d4:8c:89:5b:30:60:60:
9b:a3:e6:08:04:b7:fa:90:fa:18:9e:2b:a9:71:09:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4C:BE:DF:21:C0:EE:5D:01:50:80:4A:48:F0:18:36:B4:15:76:4E
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1092D4EADED11EE98CBFB61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.60.0/23
Signature Algorithm: sha256WithRSAEncryption
52:d5:3f:2f:46:fd:32:a2:cd:02:b1:36:0f:2a:bf:25:0d:ad:
ff:6e:ba:5c:39:8c:4d:24:18:3a:09:e6:35:c9:fe:30:8b:36:
90:27:70:9e:3f:e5:2d:fc:ab:0d:cd:32:f6:92:4f:c2:21:b0:
8b:9c:8e:0b:a6:76:94:53:b3:9b:c7:d6:03:5f:dd:95:01:09:
59:5e:da:3f:ff:cb:4a:ae:48:45:67:4b:7b:45:92:62:36:1d:
cf:10:22:7f:f0:05:a4:3b:88:c3:9b:7e:5a:cb:59:06:ae:90:
39:84:f2:db:ec:8d:03:b2:37:85:ab:3c:e3:86:50:0a:a0:dd:
71:fe:99:b2:f7:bf:b4:de:51:99:57:41:35:19:6d:d8:0d:ae:
39:8d:e1:31:21:0e:7d:98:12:a4:8b:cc:d9:a1:14:b3:45:7f:
46:e7:dc:5b:5b:fe:10:b7:84:a2:f8:8a:93:0d:85:74:ce:15:
7e:8b:41:29:a2:4c:ea:d2:44:f5:f4:66:fc:cc:2d:b9:0d:f2:
1d:2b:3f:1b:f7:f8:b7:cf:f7:77:a9:22:33:45:02:05:05:e6:
51:11:ea:fa:a9:e0:d3:a2:0a:3f:5b:70:8e:b1:77:3a:db:0d:
e1:70:55:4b:16:8e:07:13:17:c1:56:4d:09:75:60:85:7d:7c:
d2:f9:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:58 2026 by rpki-client