
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A148FF044A0211F198214334BF833773.roa
File: A148FF044A0211F198214334BF833773.roa (raw, json)
Hash identifier: Lxc8M0Q7pB6o5/fPG+6vBF3Z+UdTotEDjN+d6FLXvMk=
Subject key identifier: 2D:69:DB:85:B9:A6:75:59:85:59:55:6C:18:C9:F1:C0:01:87:EE:79
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 0657
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A148FF044A0211F198214334BF833773.roa
Signing time: Sun 31 May 2026 17:54:44 +0000
ROA not before: Sun 31 May 2026 17:54:44 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 142251
IP address blocks: 151.158.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1623 (0x657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: May 31 17:54:44 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c75e4-1e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:a9:b7:ff:cd:c5:69:52:cc:5f:36:61:54:
1e:3e:c6:6d:6f:9e:36:3b:99:7f:70:43:8d:86:29:
2b:3f:42:60:8d:d3:d7:f8:26:67:1b:48:6b:aa:f4:
fc:70:b0:44:fb:b4:a6:70:87:24:92:2e:a9:dc:ea:
6c:70:f7:81:83:55:56:5d:7f:d8:b6:bf:9d:3a:46:
42:1f:24:f4:80:1c:02:67:75:e9:e3:86:7f:86:35:
bd:ab:3b:9d:d0:e7:1c:84:a8:3f:98:46:40:ff:ef:
53:ea:af:de:6e:d3:6f:cc:f9:d6:95:6f:e4:7d:e7:
c5:db:85:b5:67:be:5c:ff:6d:c5:b8:32:d4:59:af:
a9:95:6a:1c:dc:25:db:25:d4:68:e0:a6:0f:88:2b:
c5:10:c8:2d:8a:b3:88:ad:c7:b7:b8:47:8d:fe:e3:
25:75:ef:84:ba:4a:7b:04:8a:75:c0:93:a7:db:f4:
eb:ed:a9:2f:b8:8f:b0:04:ba:6b:34:f9:09:8e:f6:
3a:ce:79:28:53:a2:0d:a7:f9:83:ea:b0:58:4e:b8:
84:41:1b:0b:ec:4f:9a:a2:05:09:9c:91:bf:c5:2f:
36:f7:d7:54:fa:72:74:16:cf:df:a4:af:a9:27:59:
fc:fb:a6:27:10:95:95:5e:6b:73:ab:a6:7e:9d:05:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:69:DB:85:B9:A6:75:59:85:59:55:6C:18:C9:F1:C0:01:87:EE:79
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A148FF044A0211F198214334BF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.104.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:d2:39:71:f4:0a:23:3a:15:97:13:1a:75:fa:cd:51:c7:9a:
c9:92:ba:67:0e:4d:ad:fd:92:a4:f3:06:d9:f4:3f:77:8e:e8:
ad:92:c0:ae:6d:49:89:66:b2:9e:57:f4:e0:c3:0f:eb:20:e8:
3a:c0:ec:ee:ed:5b:dd:81:fa:2d:6a:5b:f2:82:45:a4:c7:43:
f3:fa:8a:c5:4b:74:bc:3f:51:74:5f:62:82:e8:d6:c4:51:97:
58:99:7a:cf:36:a8:17:bc:dc:98:ef:5a:dc:79:3c:f4:21:d6:
ce:3d:42:cd:1a:9d:69:4c:62:d4:54:e2:13:4e:83:eb:b4:8d:
b2:6e:ac:82:4c:be:3b:03:ee:40:b8:6a:0f:1f:fb:3d:ee:08:
75:8e:c2:e0:10:77:16:14:aa:1d:4a:68:ff:c6:a7:2c:2b:50:
7b:77:ef:bb:02:5b:40:c0:9f:17:59:bb:1a:91:b0:5d:5e:b0:
12:00:88:c6:5f:18:bb:9b:78:76:21:2f:3f:6e:8c:ee:98:de:
73:64:10:0a:39:df:6b:3b:6c:36:f9:bb:09:2d:96:46:07:6b:
94:5c:f8:e6:94:e0:d0:5b:c8:00:87:a0:1d:2e:4d:c3:3c:e3:
ba:c7:2a:6b:ee:a3:4e:20:9b:fd:59:4e:73:48:90:f6:91:52:
56:87:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:57:23 2026 by rpki-client