
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA0B108CDD5E11EFA66C7457C4F9AE02.roa
File: DA0B108CDD5E11EFA66C7457C4F9AE02.roa (raw, json)
Hash identifier: +YTWW8bATK7NKagdV46+45VK92HolYnf41Qbq0RNX7Y=
Subject key identifier: C0:74:A4:BF:7E:D6:39:13:6D:5A:38:03:CA:03:CA:B9:57:83:CF:4D
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F4D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA0B108CDD5E11EFA66C7457C4F9AE02.roa
Signing time: Sun 31 May 2026 16:24:59 +0000
ROA not before: Sun 31 May 2026 16:24:59 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 152517
IP address blocks: 157.20.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12109 (0x2f4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:24:59 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c60db-b527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:c6:5a:7b:fb:cf:f4:5a:40:c6:54:85:a1:
2c:f3:24:21:ed:96:b9:c7:dd:7c:8f:e7:c2:1e:7b:
3a:ef:e3:fe:19:e7:9c:c9:03:16:66:dd:5e:a5:9e:
90:b3:53:5b:04:ec:9d:0f:22:27:04:3b:50:a7:c5:
b8:28:87:f6:0a:47:1e:58:7f:27:73:78:2a:98:4d:
63:bc:75:8a:1e:d5:0e:91:ef:8e:d1:98:58:86:67:
e4:5a:22:dc:3c:10:ca:2c:82:f0:07:7f:2c:95:d2:
a4:03:bf:b3:84:c3:f7:dc:6c:e9:2b:7f:25:8e:24:
c9:09:f3:94:9e:a2:d3:62:60:48:63:b2:08:af:1d:
34:4a:16:3f:a4:16:20:ef:5a:37:3d:f7:f5:cd:d3:
2a:7f:97:55:68:26:c4:fc:fe:be:3d:86:07:c6:8f:
c1:71:69:18:41:fa:91:cb:7a:53:cb:92:f9:d1:c1:
bb:f7:93:8a:d8:3a:40:67:e8:48:00:63:38:cb:b1:
23:dd:cd:d6:6b:84:46:8f:10:36:9b:3e:bb:26:a7:
f1:cc:96:fc:f1:27:1b:0d:21:da:a1:60:f7:68:00:
cf:e0:83:ad:79:27:a2:1d:e8:81:e6:d4:63:e5:2b:
c3:f2:c8:7e:52:f0:a4:27:8c:16:f6:fa:34:66:52:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:A4:BF:7E:D6:39:13:6D:5A:38:03:CA:03:CA:B9:57:83:CF:4D
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA0B108CDD5E11EFA66C7457C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.196.0/24
Signature Algorithm: sha256WithRSAEncryption
72:52:0a:2c:d1:e4:2a:9b:c7:39:22:d9:a1:9c:da:95:ed:29:
45:49:88:e5:fe:5f:3a:87:b6:e2:d9:10:2c:57:b9:a0:ba:f8:
4e:00:54:e1:21:2e:ee:b5:dd:a3:38:e8:c0:53:c2:c2:a1:78:
ab:50:c2:da:ed:6a:f0:04:70:e0:de:84:3c:01:b5:d8:11:b7:
51:2e:65:64:31:1b:44:72:85:b7:e1:80:81:4c:dd:cf:92:24:
f8:8e:69:fd:f1:e1:b0:12:ba:28:f2:0c:5a:b7:df:3c:b0:b2:
be:27:58:54:27:27:59:bf:dd:ef:2a:a0:5a:83:67:6e:4b:10:
1c:de:6a:f7:c5:d3:c4:f6:b3:c9:5f:99:46:39:af:55:04:5b:
99:8e:13:65:0f:d7:a6:20:d6:6d:3b:fc:5b:df:8a:4b:c8:b9:
f1:d6:cf:c9:09:ad:b2:bd:c0:66:39:0a:f3:8f:32:53:a8:df:
5f:4d:a5:fb:c7:c5:1c:e8:c9:a1:68:19:82:13:07:57:c6:ae:
20:c1:25:ae:4d:1f:bb:e1:43:5a:98:fc:44:7f:fe:d4:fa:cf:
bf:60:d9:4c:51:69:c1:62:51:00:16:fe:85:19:cb:b4:51:36:
51:15:53:0c:dd:bb:e5:7b:70:47:ac:e1:8b:85:4b:30:17:7a:
6c:13:80:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:41 2026 by rpki-client