
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/2D1602DA066411F182222C40373D8C67.roa
File: 2D1602DA066411F182222C40373D8C67.roa (raw, json)
Hash identifier: mMrMt31kxA+79MGs8DD9o2PTk6Se+H+d9/oEkNp6HkI=
Subject key identifier: CF:B3:37:3D:48:4F:7E:1C:DE:C8:90:88:65:A5:02:64:19:C3:EA:34
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 0658
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/2D1602DA066411F182222C40373D8C67.roa
Signing time: Sun 31 May 2026 17:54:45 +0000
ROA not before: Sun 31 May 2026 17:54:45 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150126
IP address blocks: 151.158.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1624 (0x658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: May 31 17:54:45 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c75e5-fc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:cf:f3:dc:c6:07:4e:fa:04:15:3c:e9:66:
88:ea:d1:d1:52:dd:de:2c:73:85:ed:2a:f1:fe:b9:
60:b3:f8:9d:8d:5f:c2:36:d6:2e:31:61:99:96:71:
ed:bd:bb:04:31:cb:66:d5:36:e6:25:ea:ce:bc:ff:
33:ee:72:ed:5c:25:37:49:04:f7:d5:ee:b2:56:58:
e0:75:68:7b:a9:6a:01:f5:19:07:1e:ec:88:6c:b1:
72:f5:72:16:53:b7:57:12:ee:92:f8:89:b8:16:d5:
77:5a:19:4a:28:61:07:de:61:11:33:9b:ee:76:2f:
69:31:81:b7:c1:a8:1b:f6:c8:f8:38:c1:af:34:6e:
ee:df:13:a8:e8:99:01:91:51:93:e2:51:41:5b:ed:
94:f1:d3:da:68:f2:77:fc:a5:fd:0a:7d:5f:68:13:
fb:ba:52:52:e9:5a:8d:a1:9f:19:5b:4e:0a:2c:03:
4a:e6:68:76:11:81:54:d1:14:ea:f4:0f:b5:ca:f7:
57:96:61:d7:fd:55:2b:b6:a3:4a:a5:e8:b0:89:ab:
a3:a6:37:18:ed:c3:b9:40:7e:39:ef:ca:82:11:fb:
39:54:bd:a5:dc:95:32:69:33:9c:b2:c7:32:ec:cc:
b0:b3:37:32:ad:59:39:f1:34:c2:40:4e:59:45:63:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:37:3D:48:4F:7E:1C:DE:C8:90:88:65:A5:02:64:19:C3:EA:34
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/2D1602DA066411F182222C40373D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.142.0/23
Signature Algorithm: sha256WithRSAEncryption
44:b4:2c:83:f2:91:2c:67:a6:4b:be:04:f6:08:27:e8:7e:46:
10:29:a7:cf:b5:67:f4:87:33:1c:ab:4e:e5:4c:f5:16:43:81:
77:d7:3f:e6:a9:67:19:a6:25:bc:31:a8:79:90:d0:dc:c9:08:
7f:60:ea:da:9b:55:b0:14:f9:b5:fe:23:7f:1d:8b:72:5c:29:
85:ca:45:0d:5f:8d:f3:f3:88:a5:13:00:65:53:5d:0d:07:40:
2c:1b:03:ac:a5:80:15:44:be:0c:41:de:86:a7:4e:ab:3c:92:
d0:d3:da:39:57:a9:31:f1:ed:cf:fd:9b:6c:56:d3:9b:31:a4:
fe:cd:ae:c7:a4:79:4a:38:e0:12:50:cf:5b:60:4f:44:03:19:
f1:7b:c2:3d:7e:ef:6c:b6:bc:5b:4f:56:88:91:e9:1b:f8:6f:
3f:c4:91:68:25:34:5e:87:a0:3a:ab:08:9b:3c:13:18:30:21:
3b:ee:de:9e:36:9d:f6:f0:9f:14:e3:d1:b0:d4:dd:ac:d7:33:
88:9f:94:bf:39:3b:85:99:17:76:e6:bc:16:d5:be:ef:13:dc:
c7:f6:7c:6c:4b:1a:f2:5d:23:84:24:99:80:a2:72:e4:b0:99:
9e:c8:60:7e:2f:f0:a0:51:08:37:a2:29:07:78:02:33:28:df:
60:e4:1d:c8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjYwNTMxMTc1NDQ1WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNzVlNS1mYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0HPP89zGB076BBU86WaI6tHRUt3eLHOF7Srx/rlgs/idjV/CNtYuMWGZlnHt
vbsEMctm1TbmJerOvP8z7nLtXCU3SQT31e6yVljgdWh7qWoB9RkHHuyIbLFy9XIW
U7dXEu6S+Im4FtV3WhlKKGEH3mERM5vudi9pMYG3wagb9sj4OMGvNG7u3xOo6JkB
kVGT4lFBW+2U8dPaaPJ3/KX9Cn1faBP7ulJS6VqNoZ8ZW04KLANK5mh2EYFU0RTq
9A+1yvdXlmHX/VUrtqNKpeiwiaujpjcY7cO5QH4578qCEfs5VL2l3JUyaTOcsscy
7MywszcyrVk58TTCQE5ZRWN5PQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM+zNz1I
T34c3siQiGWlAmQZw+o0MB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvMkQxNjAyREEw
NjY0MTFGMTgyMjIyQzQwMzczRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBl56OMA0GCSqGSIb3DQEBCwUAA4IBAQBEtCyD8pEsZ6ZLvgT2CCfo
fkYQKafPtWf0hzMcq07lTPUWQ4F31z/mqWcZpiW8Mah5kNDcyQh/YOram1WwFPm1
/iN/HYtyXCmFykUNX43z84ilEwBlU10NB0AsGwOspYAVRL4MQd6Gp06rPJLQ09o5
V6kx8e3P/ZtsVtObMaT+za7HpHlKOOASUM9bYE9EAxnxe8I9fu9strxbT1aIkekb
+G8/xJFoJTReh6A6qwibPBMYMCE77t6eNp328J8U49Gw1N2s1zOIn5S/OTuFmRd2
5rwW1b7vE9zH9nxsSxryXSOEJJmAonLksJmeyGB+L/CgUQg3oikHeAIzKN9g5B3I
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:21:56 2026 by rpki-client