
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa
File: FFB4C24ADC4411EE9199B15EC4F9AE02.roa (raw, json)
Hash identifier: zCp/BPMOwUVKy18QweUtyTxR+wf/wyutZ//AuIo0U+Q=
Subject key identifier: 54:FD:D9:C0:66:20:8C:C1:15:4A:BA:6B:42:F5:79:0B:5F:AD:D3:0C
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F34
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa
Signing time: Sun 31 May 2026 16:24:11 +0000
ROA not before: Sun 31 May 2026 16:24:11 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 152485
IP address blocks: 157.20.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12084 (0x2f34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:24:11 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c60aa-9660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:d1:2e:ce:82:d6:b3:e6:dd:57:78:52:02:
4b:08:b1:49:19:8b:bb:9e:1d:a2:9c:57:b2:da:58:
b7:75:2d:17:86:e0:6b:06:5c:37:95:d0:23:e5:b4:
ae:22:5d:3a:8b:45:73:0f:a3:b4:6f:b3:3a:dd:f0:
45:5f:b2:56:9a:53:38:bb:51:64:be:43:6e:31:80:
99:10:38:7c:89:5a:2b:01:55:e3:64:02:72:6d:6e:
a0:03:5e:39:4c:52:b1:f0:be:0c:4e:1b:d6:86:de:
3d:c8:bd:4c:b9:85:a6:0f:5a:04:c5:ff:46:48:31:
d7:17:a7:7b:05:e9:64:fb:f4:0a:fe:48:cd:83:93:
e0:24:6e:45:b1:6f:8b:1f:c6:f0:bf:fa:97:48:9c:
fe:78:4e:43:41:0d:66:2e:03:29:61:56:cf:b9:ef:
44:7b:b4:26:f4:8d:e2:55:44:fd:b6:6f:04:d9:28:
4b:0c:7a:96:c9:ec:d3:aa:30:f6:e2:f4:b3:30:6d:
90:6c:b2:71:fa:36:8d:5d:d7:e3:b4:61:bc:3a:4f:
8f:7a:c1:e8:0f:7a:e1:5a:c6:3f:e5:f3:3e:10:e2:
48:77:f0:2e:a7:74:d4:96:0e:ad:99:3d:53:09:4b:
eb:f1:0b:a5:be:ae:82:bb:ac:81:9b:6e:e0:db:bb:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FD:D9:C0:66:20:8C:C1:15:4A:BA:6B:42:F5:79:0B:5F:AD:D3:0C
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.182.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:dd:00:d0:8c:d4:36:e7:dc:a4:ec:3e:43:15:fd:db:eb:c2:
89:fc:ec:78:c6:37:9a:cc:0c:b2:8c:23:99:0f:22:16:79:5e:
bd:4c:05:33:61:77:0d:41:37:a0:fc:dc:1c:95:dd:f1:93:9e:
e3:be:63:6d:ef:69:52:fe:be:9e:e6:72:73:d0:f3:4b:6d:8b:
47:a4:f4:98:af:fe:d5:10:c8:8d:70:8d:4c:9e:bf:91:2b:d2:
2c:b3:db:6a:46:b7:f5:51:2f:c6:da:92:d3:d6:1d:ce:29:60:
4f:68:c0:2d:a4:0f:22:96:b3:d7:03:25:ca:e4:61:7a:e6:b9:
a9:7c:db:c0:89:9a:64:e4:f3:6f:3e:23:0f:ce:c9:cd:ff:69:
60:36:b3:4f:99:65:f3:7f:10:fc:c6:e8:90:28:6a:fa:99:38:
e1:18:af:82:ec:3f:02:9a:37:f0:14:5d:12:ca:d3:54:42:eb:
0b:9c:ee:b5:e8:42:ba:44:cb:26:de:3a:8e:5a:87:88:95:cf:
96:28:3a:fb:c8:95:df:a9:ec:71:b4:5e:a4:e4:99:be:ec:90:
fe:f9:61:b1:2a:9b:b4:da:6e:7f:cc:cd:f6:93:21:23:c2:6f:
be:62:bd:7c:54:14:d5:d5:28:81:6e:8e:c6:b8:90:5b:07:69:
5d:53:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:10 2026 by rpki-client