
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A08C2E961BA511F195A2E3A7083D8C67.roa
File: A08C2E961BA511F195A2E3A7083D8C67.roa (raw, json)
Hash identifier: qMgt9HWWy/RpJzgqls8z+VL7Pu3cjeATqJvCDYbhnZ4=
Subject key identifier: EC:7A:38:7A:AB:3E:AF:A7:1D:0C:2A:27:F8:71:42:0D:26:2B:43:F5
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 0686
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A08C2E961BA511F195A2E3A7083D8C67.roa
Signing time: Mon 06 Jul 2026 17:54:21 +0000
ROA not before: Mon 06 Jul 2026 17:54:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140972
IP address blocks: 151.158.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1670 (0x686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: Jul 6 17:54:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bebcd-2896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:4a:fb:79:1c:4b:7a:4a:f7:3e:29:52:e3:
1f:1f:c4:d2:87:d6:01:3b:d0:fa:60:c4:e9:f7:3d:
f2:45:53:71:0f:ab:cc:d1:ca:c1:5c:e6:67:2c:c6:
a4:db:e3:01:5b:6c:f3:36:f4:58:1e:0b:03:c7:6a:
76:52:71:e3:0a:02:58:62:d2:d0:d9:79:9b:d0:8f:
25:1f:0f:e5:fd:7f:30:4f:b4:03:90:db:3f:f1:19:
e0:1f:12:6d:9a:42:1a:5b:e5:11:d5:c9:87:66:1b:
54:6c:be:80:1f:89:95:9b:a0:e7:da:50:e8:07:72:
1a:db:8c:f1:0e:d0:69:01:d9:50:9c:8a:5a:5c:f2:
b4:b5:ec:22:01:8c:5f:eb:a8:8a:c1:f0:fb:04:77:
24:0f:21:df:1d:ec:32:68:7a:67:e7:cd:a1:67:14:
45:14:18:c7:1b:a4:24:8a:15:fa:61:96:a9:8b:31:
8f:75:1d:ec:46:60:3a:83:f6:db:34:1a:7a:95:3c:
2f:45:b2:e8:f6:25:68:c1:d5:25:1e:e6:fd:c0:c4:
ea:b0:5f:c0:2a:ae:b6:4a:42:07:b4:c0:9c:91:95:
b3:eb:28:95:79:fa:42:82:78:37:c6:86:12:ce:9c:
ff:8d:f7:b0:27:15:f4:df:22:6e:d5:83:5f:d1:c5:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:38:7A:AB:3E:AF:A7:1D:0C:2A:27:F8:71:42:0D:26:2B:43:F5
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A08C2E961BA511F195A2E3A7083D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.248.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:78:73:4e:1c:d9:d2:f9:af:7c:a3:c1:2d:75:1a:31:c2:c1:
c9:45:de:9b:3a:f9:68:23:ea:8e:5e:7f:ef:55:c3:5e:7c:75:
01:34:49:17:3c:98:3b:c4:56:99:c7:e4:93:2e:25:39:4c:3a:
18:e8:7d:88:87:fa:e2:90:a0:75:a6:59:27:57:f9:57:f8:a2:
72:af:e5:86:2d:13:1f:a8:9e:5e:e8:8e:b4:39:9a:38:28:c1:
11:a2:9b:12:da:9f:78:7b:b2:5c:f3:a5:bc:d4:96:8c:d6:9f:
23:c0:b4:42:50:15:c5:c1:9f:b5:a2:3a:1a:71:e3:ba:9e:96:
53:1b:c7:9c:d3:88:a0:b5:97:00:af:79:c6:29:81:9c:af:b7:
a7:7b:46:1c:25:9c:e8:19:5a:cf:c7:9d:47:34:42:1b:bd:ab:
f7:3b:fc:4d:bc:17:d8:2e:b9:03:ce:8f:ff:c0:dc:ae:7e:67:
06:c9:c6:54:30:8a:4c:9b:8e:10:e7:f1:48:ca:70:79:32:09:
35:d9:36:db:52:9c:96:8b:7f:85:88:87:3d:a1:12:12:4d:d4:
a8:8d:d9:12:da:a1:3d:5f:9d:37:51:d8:2f:57:bc:2f:51:cf:
69:d5:d7:74:c0:33:e8:02:ac:00:df:1a:d0:02:18:7a:9b:b5:
b9:fb:c1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:18:24 2026 by rpki-client