
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75152618582311F1828FFEA5A6833773.roa
File: 75152618582311F1828FFEA5A6833773.roa (raw, json)
Hash identifier: 0rNeKhj93hmGp345Dcs2VVFV8gwT2f3afgi7s6Y6YqA=
Subject key identifier: 45:27:D8:D6:96:CF:E9:C0:35:6A:FC:14:B4:C0:ED:C0:06:7C:D4:98
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EF1D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75152618582311F1828FFEA5A6833773.roa
Signing time: Mon 06 Jul 2026 16:40:09 +0000
ROA not before: Mon 06 Jul 2026 16:40:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134258
IP address blocks: 157.119.169.0/24 maxlen: 24
157.119.170.0/23 maxlen: 24
2402:5e20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61213 (0xef1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:40:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bda69-eb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:0e:1c:99:a2:78:e6:d2:6e:59:66:0b:fc:
5d:f6:f7:10:b1:1a:93:20:c1:38:e4:c0:cf:98:c1:
4d:30:c3:d1:6b:f8:34:cf:c2:26:ba:a8:0f:5b:50:
70:e2:5c:81:e1:6f:9b:4b:24:bb:2c:86:ea:c7:49:
ba:1a:2d:80:50:3e:01:6d:da:41:89:a5:19:59:e7:
3e:d8:74:ff:81:51:b7:46:1b:67:ad:20:ed:3f:35:
ef:08:bb:fd:ee:94:14:0b:18:f5:d1:81:ad:f8:21:
30:c1:e6:50:69:78:4b:7a:2d:3a:0b:da:c5:7a:f5:
bf:b3:a7:64:c9:52:e9:a7:da:1f:10:30:f4:9c:fc:
5d:1a:dd:3a:2e:3d:b6:1c:76:0c:31:d3:f2:7d:b3:
c9:d6:c6:bb:72:54:85:de:31:c3:12:3a:34:51:33:
29:0d:95:98:db:ad:82:04:ad:db:a7:a0:66:bf:aa:
b8:d3:9b:67:cc:a6:5f:fa:a8:71:c5:dc:e0:d2:12:
df:f0:76:aa:3e:fb:f8:b4:ef:d7:4f:77:1f:d1:69:
78:be:60:fc:f1:82:a9:bd:60:54:f4:93:9c:37:a3:
99:90:8b:e6:be:eb:f4:27:6d:84:da:63:b8:ba:5f:
dc:77:bb:b6:07:a2:96:fa:48:7f:ed:d1:c4:b9:e0:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:27:D8:D6:96:CF:E9:C0:35:6A:FC:14:B4:C0:ED:C0:06:7C:D4:98
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75152618582311F1828FFEA5A6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
157.119.169.0-157.119.171.255
IPv6:
2402:5e20::/32
Signature Algorithm: sha256WithRSAEncryption
b0:13:2b:23:2c:e3:38:ac:e6:48:34:0a:5f:0e:9a:0c:f3:35:
46:ea:69:64:c1:53:12:d3:62:89:83:2b:1d:60:c7:f6:cc:7b:
14:8e:e6:a4:1e:30:0a:ed:3f:8c:99:05:df:1d:2e:51:8f:0e:
1f:78:95:59:18:58:dd:ef:38:d6:55:dd:64:77:9c:04:69:bc:
a8:4b:68:b7:49:51:8b:22:c5:c1:ba:2d:17:e8:93:48:3c:13:
56:31:78:a6:7f:03:b9:27:d5:b2:07:76:9b:d6:e7:d6:fa:8d:
39:16:29:57:c0:64:3a:38:67:6c:ab:8f:23:da:7d:03:cd:58:
d8:9e:ba:db:1c:d2:16:8b:cb:6d:53:33:f2:03:22:93:c0:87:
4e:1c:b1:5e:90:a8:92:c4:38:f0:f6:df:9d:60:94:05:07:e0:
e0:0d:8e:3e:09:90:96:e8:17:89:23:48:c4:39:e5:c9:04:3c:
58:7d:6a:da:1a:42:3d:dd:e8:26:da:9d:14:53:4d:31:20:ab:
1f:e5:d5:05:72:10:ac:bd:b6:18:aa:cc:32:98:62:19:44:d3:
f4:ff:be:3b:d9:7d:b3:62:9b:cb:30:e0:b9:cc:af:9d:bc:6f:
4a:c8:02:74:f0:b1:5a:c8:33:bb:b1:12:47:55:f2:62:fa:94:
65:60:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:24 2026 by rpki-client