
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D74300A41D1211F1BF2912330A3D8C67.roa
File: D74300A41D1211F1BF2912330A3D8C67.roa (raw, json)
Hash identifier: xA8xFH2A9VI9TksO6zZT6BTRdHxdo5achOmKqT5ueG0=
Subject key identifier: 7A:6A:AC:16:A8:5C:0E:51:49:63:D9:26:07:E8:A0:82:D7:19:33:FD
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3139
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D74300A41D1211F1BF2912330A3D8C67.roa
Signing time: Mon 06 Jul 2026 16:20:42 +0000
ROA not before: Mon 06 Jul 2026 16:20:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151089
IP address blocks: 157.20.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12601 (0x3139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:20:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd5da-5e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:d2:6c:b0:19:2b:19:a0:b1:cb:d3:d3:d0:
25:6c:5b:4f:6c:28:ee:57:17:b8:51:f1:d2:64:0c:
13:6d:a7:55:68:9e:0e:fe:5d:e4:fa:78:a3:05:9a:
33:2a:55:80:68:30:6f:02:4c:43:e4:3e:a1:ac:63:
b7:b0:ba:3d:2e:41:1f:3e:41:6e:77:2a:91:76:3a:
91:ce:a0:63:34:9d:3b:5b:ec:6a:b3:31:d3:f2:b7:
63:ca:5f:ce:dd:bf:4a:52:c6:9d:76:a0:c2:99:e6:
60:22:c4:e2:db:a7:61:d2:01:b1:4e:9a:be:1a:8b:
e0:a8:54:ec:ed:81:f8:e3:25:4e:ac:c3:5b:84:7c:
4c:c0:e1:02:53:21:0e:5a:c6:6e:f4:0b:6d:88:f2:
df:a3:31:4f:b2:47:d5:9f:bc:c3:4d:cd:96:f0:d9:
71:44:3d:9c:f7:5e:55:31:79:98:15:b0:9f:a5:a3:
0b:2f:c8:e7:51:07:ac:b6:17:33:d0:eb:51:dd:75:
43:3c:d5:da:3b:b3:bf:b7:55:32:8f:ac:c9:20:69:
ca:75:9c:ae:f9:d7:d3:43:4f:eb:89:a5:1c:d1:38:
3c:71:75:a8:d8:eb:79:78:f8:23:63:dc:43:24:9d:
27:19:c9:53:08:b9:e7:ed:51:84:05:b9:8d:f5:e5:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6A:AC:16:A8:5C:0E:51:49:63:D9:26:07:E8:A0:82:D7:19:33:FD
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D74300A41D1211F1BF2912330A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.170.0/23
Signature Algorithm: sha256WithRSAEncryption
99:a7:38:73:97:0f:f5:48:a8:63:4e:6d:f9:0b:0e:f2:fb:8d:
19:a7:e2:16:7d:8e:02:8b:0c:43:21:e6:dc:3e:97:52:57:cb:
48:f5:ac:a1:4b:b1:ed:ff:bf:39:71:a6:00:30:f6:03:d5:24:
6f:2c:ea:64:21:de:ea:b5:ea:0e:ef:96:99:d0:fc:bc:36:00:
54:82:08:42:99:44:0d:d3:85:ec:6c:a0:23:fe:85:08:16:57:
7b:68:a7:12:60:34:be:cc:6f:e8:3d:74:4f:42:90:ba:78:44:
c4:da:52:8c:c5:69:60:e9:ae:69:d7:7c:1a:92:be:1d:23:f5:
9b:4c:6a:c3:2f:4a:c0:e4:b0:8e:45:ad:5b:e6:33:3c:a7:a6:
02:13:e5:bf:4a:e7:37:2a:47:92:85:10:40:5b:06:99:a8:a3:
39:4a:18:10:14:68:3d:0c:ba:f8:a7:7a:9b:15:96:5d:90:2f:
de:a2:cb:94:08:6d:0a:b5:95:57:32:22:04:dc:7d:35:6d:61:
2b:f2:3c:fc:74:8f:6b:b4:81:15:65:c6:a2:89:b4:30:37:ae:
43:94:56:82:13:92:f3:2c:4e:0d:82:a5:dd:5b:31:e6:a1:bb:
07:06:67:37:bb:9e:19:6f:dd:0c:dc:66:d2:cb:78:85:88:b1:
81:71:82:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:49 2026 by rpki-client