
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D742AC8064BB11F19118AB24A047A888.roa
File: D742AC8064BB11F19118AB24A047A888.roa (raw, json)
Hash identifier: JT29fOsPLvhaSkscgnI2EXKiZW2TMqYKobtfkh+BY1I=
Subject key identifier: CE:C5:48:40:87:7F:76:93:39:75:F0:65:BE:EB:6A:E9:25:90:98:0B
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30C5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D742AC8064BB11F19118AB24A047A888.roa
Signing time: Mon 06 Jul 2026 16:16:53 +0000
ROA not before: Mon 06 Jul 2026 16:16:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135806
IP address blocks: 162.4.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12485 (0x30c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:16:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd4f4-2624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:a2:33:b9:66:eb:ce:91:32:83:4f:75:f9:
78:27:f5:ea:b4:e8:90:8c:56:e4:54:6e:dc:05:6f:
e2:2e:d4:7a:15:a1:8e:92:df:13:97:db:c7:f4:be:
c8:e9:b9:42:17:1a:73:38:a8:ac:e5:df:a2:44:00:
3a:8c:7e:ab:7e:c9:4b:bf:88:b3:e2:68:38:1b:73:
60:0c:5e:28:d8:97:62:20:0d:68:e4:e1:30:6b:d8:
22:31:19:e0:3d:25:ca:9d:ac:13:32:6a:7a:70:ac:
d1:8d:76:3b:5a:f9:60:41:c6:76:a7:2c:e1:b6:81:
d0:71:7f:3e:b4:b3:80:37:32:4f:80:2d:5f:4e:3c:
6b:88:b6:88:83:3b:bb:a9:d1:52:d7:78:cf:9e:3b:
5c:17:56:d3:33:84:31:38:0d:e6:0c:e4:b7:4c:9d:
b5:11:48:f5:12:79:d8:24:17:dc:f1:57:18:e1:3d:
3b:f1:20:9e:d4:95:81:95:65:26:80:8d:8e:fe:e4:
ae:d9:44:b5:98:2e:19:92:b9:48:9f:40:8e:72:30:
51:17:9c:a0:c3:33:30:34:c7:68:3b:2d:a4:9d:b1:
15:c6:7d:68:51:57:f6:80:ac:98:60:af:6a:93:74:
da:ac:5d:ab:9c:5d:7c:1e:4f:18:db:e5:3d:39:19:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C5:48:40:87:7F:76:93:39:75:F0:65:BE:EB:6A:E9:25:90:98:0B
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D742AC8064BB11F19118AB24A047A888.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.142.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:9a:fc:9e:69:f9:d1:14:f0:5b:94:e6:d4:5e:2d:5e:c9:40:
1b:46:e8:05:1b:bd:43:b0:a9:f1:33:31:2d:ad:13:dc:aa:c6:
76:50:fc:bd:8a:bf:4e:3b:63:10:37:bb:2d:25:68:0d:3f:b4:
7a:82:57:25:33:88:a4:b6:d2:fa:ba:eb:7f:87:3b:81:1f:26:
67:d1:df:84:d2:17:f6:b2:c9:09:e1:24:73:b8:47:70:0e:00:
4a:f0:eb:30:07:c0:65:94:8f:7e:3b:69:81:7a:8a:8e:76:ca:
a5:c8:12:f1:52:93:28:e8:0b:93:ba:eb:a4:74:90:6b:c1:d2:
c3:d9:c4:4b:20:ec:09:b6:60:19:af:cf:62:3d:c8:5f:8d:b9:
88:54:23:b8:42:30:fc:4a:fc:a0:17:a3:1c:a6:e3:e5:f5:23:
45:cf:ac:ec:26:87:98:9e:86:80:2b:df:6e:d3:33:99:22:00:
81:85:04:35:e3:83:08:6d:f6:bc:eb:b5:d6:a4:82:95:64:ec:
fc:d8:36:62:3d:77:0c:be:9b:8e:7f:f3:67:89:e6:e3:d9:72:
15:66:eb:de:dc:30:a3:ba:38:d7:2e:a4:4b:ba:90:2b:87:a3:
da:6e:0c:37:a0:06:ec:61:86:d7:41:08:3c:ef:28:5e:16:54:
2f:22:8e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:05 2026 by rpki-client