
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C153BA24607311F095A7F032C4F9AE02.roa
File: C153BA24607311F095A7F032C4F9AE02.roa (raw, json)
Hash identifier: H7wqFuhGGNrglngZxiViEcjCrBCGN9CJs/LsKLZ+NPc=
Subject key identifier: B5:BF:31:B6:37:0A:EA:D3:DA:F7:8D:37:2C:65:6D:7C:16:EE:3A:B1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EAB7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C153BA24607311F095A7F032C4F9AE02.roa
Signing time: Sun 31 May 2026 17:46:19 +0000
ROA not before: Sun 31 May 2026 17:46:19 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 154012
IP address blocks: 2402:13e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60087 (0xeab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:46:19 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c73eb-5d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:07:cb:0d:bc:05:d7:ec:01:cf:05:ed:bc:
b9:83:8a:73:34:7a:53:f7:b1:e0:ed:1f:0d:38:fe:
f5:a9:09:63:cd:d8:5d:62:4f:46:43:d8:ba:4d:1e:
6a:2c:0d:58:d6:18:97:72:49:f7:c6:40:93:24:03:
c0:f7:7c:13:48:14:44:84:d0:7c:40:f7:9b:86:b0:
79:1d:07:b6:dc:64:c1:5b:4f:bc:42:45:f2:62:0d:
bf:3d:ea:ea:e4:ca:a3:28:ab:62:c4:be:70:b9:53:
49:ad:e2:f5:63:77:8f:fb:f0:ea:42:4a:e5:ea:19:
59:0a:21:5b:4e:50:f5:9f:04:3c:53:4f:af:30:53:
e6:ab:91:87:10:33:c1:01:cb:d3:b1:75:8a:87:46:
53:e3:1c:df:bd:b0:25:76:ff:19:87:0b:ab:ea:76:
61:2f:1c:be:2b:20:98:42:7f:c6:fb:98:0e:aa:6a:
ff:c7:66:5b:6b:39:c0:b5:01:67:cf:f1:47:13:60:
92:fe:ac:f5:6c:b7:70:90:a8:d5:bd:83:91:ae:cb:
42:a5:d8:54:c3:8d:e2:19:e0:66:a8:c0:13:28:17:
c6:31:a2:40:52:ab:f0:bd:e6:04:db:ee:f8:12:54:
25:e5:1c:bb:e4:9a:2e:01:18:a0:03:ba:1c:05:75:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:31:B6:37:0A:EA:D3:DA:F7:8D:37:2C:65:6D:7C:16:EE:3A:B1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C153BA24607311F095A7F032C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:13e0::/32
Signature Algorithm: sha256WithRSAEncryption
65:1d:4c:bb:30:3a:ba:af:f8:f9:6a:d8:af:7c:5b:69:93:37:
44:6f:73:c8:3f:80:a5:cc:cc:66:ff:8b:4b:cc:e6:f5:0c:c3:
ca:c9:42:5d:51:be:6e:b7:ba:2d:05:af:1c:bc:8a:ff:99:a8:
a8:4d:f1:14:a9:e3:dd:d4:e5:23:c7:fc:11:23:12:06:77:16:
17:29:e2:10:4c:2c:b1:88:69:16:5e:31:0d:e7:1f:80:fc:06:
c0:ef:35:e6:04:9f:04:67:27:31:37:cd:e7:53:c7:b0:2a:dd:
76:c6:1b:fd:55:f4:62:b6:c7:85:28:f9:10:89:2a:22:18:d2:
b7:bb:b7:50:69:e0:8d:00:81:98:5c:5e:c7:14:c3:28:65:fd:
9e:85:cb:94:34:3d:73:2f:9a:a5:10:fc:91:c3:c6:e9:26:3d:
33:e5:0f:d5:2f:29:b9:bf:c7:7a:b2:d1:b1:cc:1b:93:d8:8c:
21:47:27:de:c2:ea:e7:26:b9:22:1f:ff:ed:81:dd:d9:73:aa:
c1:e7:52:6e:61:a5:48:f6:ee:b8:c2:b6:be:f2:45:f5:24:12:
04:27:e3:f5:a4:71:5b:e6:3d:aa:3a:b7:bb:b8:72:f6:c9:48:
bd:e7:65:b5:55:2d:35:98:2d:70:30:ed:7d:91:e2:fb:f5:b1:
24:14:6e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:05 2026 by rpki-client