
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
File: EB4DFDD619B511EF90608063C4F9AE02.roa (raw, json)
Hash identifier: 5s3WImc6+js/61TmFw+Wmvaak7S2WrDxph3fRqr12/w=
Subject key identifier: D3:5A:96:B1:45:95:FB:CC:1F:A7:67:C6:1D:BA:DF:C6:05:4B:D5:F9
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3172
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:22:37 +0000
ROA not before: Mon 06 Jul 2026 16:22:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152510
IP address blocks: 157.66.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12658 (0x3172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:22:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd64d-4514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:c6:80:3f:f3:64:92:8b:72:7a:cc:6c:93:
43:bb:9b:df:f7:40:a2:b9:65:36:e4:e4:45:c1:d5:
fa:45:1b:b2:c3:d8:15:fd:84:20:86:3e:15:1b:e4:
06:2c:7d:fb:2c:65:0b:0c:f3:d8:98:7a:1b:d7:0d:
3e:f7:ac:cb:b0:b8:18:b4:ce:ef:99:18:68:9e:c4:
5c:f9:c4:6e:d1:74:a3:67:fa:6f:27:75:b1:ec:94:
5e:87:7e:9b:34:0b:c1:fe:00:1d:27:80:b5:eb:f7:
db:80:12:dc:f7:d7:7b:c0:27:72:9c:78:13:bd:13:
8b:f6:36:c9:64:db:4c:3b:d0:93:cf:e1:c8:64:a2:
e1:3b:42:62:9e:7a:af:dc:af:1d:1d:98:42:d6:b2:
b3:7c:1e:7f:a9:5f:1e:00:be:1c:e5:68:89:3a:b5:
1d:cf:af:2e:81:b8:91:d4:de:9b:74:58:bd:8d:39:
07:b6:c3:24:1d:4e:dd:f2:71:99:4f:b8:67:2e:04:
66:e9:12:cd:b3:35:76:74:75:71:5b:a3:c6:14:3c:
86:60:05:89:40:17:3f:56:a4:34:93:dc:5a:73:98:
7b:51:60:05:a1:62:cd:c3:c6:c4:72:39:38:bc:94:
bb:76:be:b3:e6:44:67:af:c0:5c:b0:c5:15:66:27:
5a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5A:96:B1:45:95:FB:CC:1F:A7:67:C6:1D:BA:DF:C6:05:4B:D5:F9
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.191.0/24
Signature Algorithm: sha256WithRSAEncryption
86:08:10:44:ac:a7:bd:7f:24:56:e5:57:b5:3b:4c:e5:98:bf:
a4:13:2f:c1:85:e9:d7:fa:38:a0:52:35:26:02:13:f2:70:90:
2e:ff:6b:de:7b:c1:78:18:b6:e5:93:fb:11:b6:96:5a:bd:45:
41:7f:d3:d4:78:84:92:67:cc:11:8b:a3:af:14:b5:24:d2:3b:
ae:91:6d:18:f1:c7:0a:b0:e9:f3:4a:3a:a6:74:2a:41:be:fb:
2e:cf:1a:d1:87:47:50:dd:ac:60:92:28:63:63:2b:f3:a9:4a:
de:4d:2e:34:85:66:31:cb:cb:c0:0d:b9:70:77:3c:b9:84:ae:
ab:41:b6:cc:f5:85:12:81:e2:73:d1:6a:67:d7:ed:ee:eb:cb:
f8:79:f5:6d:4f:52:86:90:83:80:d1:f1:64:a5:8e:00:a0:90:
d0:71:3d:f4:76:68:85:ae:04:9b:54:e0:ce:82:ea:4a:91:d4:
44:2f:29:31:fa:d0:ef:06:10:45:ec:cb:71:87:cf:c0:ee:89:
d7:dc:a4:24:7d:20:e6:98:26:2d:72:53:00:b8:0c:fc:01:f2:
1c:f5:0a:a4:61:a5:7a:b8:66:00:80:fb:75:7a:97:f9:a4:93:
6a:8d:c0:6d:e3:8a:aa:ea:3e:24:36:8a:9b:ea:84:87:bf:27:
19:e1:1e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:38 2026 by rpki-client