
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/AA77D2C8031A11F18B50B9B7193D8C67.roa
File: AA77D2C8031A11F18B50B9B7193D8C67.roa (raw, json)
Hash identifier: mg1qgwOXDSlL/VPDP3MpqCc2+Y6HrT25FwybwAzk4bc=
Subject key identifier: C2:65:2D:59:38:78:95:C5:7C:9F:91:90:76:DE:D5:AD:F9:94:8A:56
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 068A
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/AA77D2C8031A11F18B50B9B7193D8C67.roa
Signing time: Mon 06 Jul 2026 17:54:30 +0000
ROA not before: Mon 06 Jul 2026 17:54:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142213
IP address blocks: 151.158.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: Jul 6 17:54:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bebd5-3a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:6b:40:c3:3b:4d:9e:65:19:ca:1c:af:b1:
b9:e9:39:e6:be:df:d6:24:57:f2:de:77:b4:6b:b3:
a9:3e:19:4d:04:e4:8a:e3:20:14:4b:08:9d:2e:53:
9d:8c:52:a0:30:22:37:83:2b:00:e8:a2:c6:01:1e:
97:50:da:25:e1:5b:2c:9b:bc:86:a6:81:5c:e7:7e:
5e:c5:6f:d5:21:67:0c:9f:66:b5:96:81:4a:63:45:
7f:a6:1c:22:f1:85:f9:e7:90:80:06:45:c1:3d:db:
dd:49:ed:19:e7:70:78:66:4b:ed:71:a2:99:05:52:
75:47:60:48:3f:7f:9f:73:66:2d:15:bd:b7:3b:29:
44:51:46:17:f2:c8:c4:1e:20:7b:d8:8a:94:33:ed:
67:00:d6:01:b7:8a:2b:76:16:e7:fb:ed:b4:ee:8b:
e8:41:23:00:3d:6e:e9:5b:5a:7a:9e:e3:67:51:2d:
23:b6:33:8c:63:d6:ae:6a:39:50:5d:d5:82:0b:e4:
05:44:56:ac:d1:ef:6e:b7:7f:71:16:a6:e0:d9:3e:
e1:46:cc:d7:63:b1:df:4f:b9:af:a0:07:9d:0f:83:
28:68:06:4f:13:80:32:92:fe:5d:64:2f:b2:e5:24:
11:ec:39:18:5d:c1:f3:06:11:e5:5a:c3:68:fe:3c:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:2D:59:38:78:95:C5:7C:9F:91:90:76:DE:D5:AD:F9:94:8A:56
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/AA77D2C8031A11F18B50B9B7193D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.28.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:7b:ac:f9:8b:30:5f:9d:b6:c9:a4:9d:b4:31:0c:4f:4a:0f:
cd:0a:1e:5f:c1:e4:96:94:67:90:c4:b6:16:9b:d2:4d:e4:6f:
f1:e6:28:8e:17:8b:d1:c3:58:c8:20:43:82:4b:e7:f3:31:bd:
d8:f6:a0:35:cf:aa:a6:a6:c0:25:75:f1:e4:e1:53:b8:01:1b:
b8:26:f8:47:f1:ea:22:16:68:c9:d1:81:d8:ad:ba:c0:c5:38:
86:29:b5:f6:a3:78:14:66:5b:83:57:af:1b:4e:73:b7:07:21:
99:c7:16:88:69:1b:98:1d:4f:77:1c:ab:ea:aa:13:6c:68:09:
6c:52:6f:6e:c4:be:8b:36:76:fe:56:2e:9f:ef:b4:b5:2a:85:
3f:c5:50:26:8b:51:64:29:9d:96:ee:19:b9:d4:5f:aa:82:3a:
56:31:ac:48:34:34:e4:e1:97:30:0d:9d:34:b8:2c:d6:93:bf:
07:ee:ad:4e:78:b1:61:da:48:bb:ae:98:63:10:8f:08:c4:c0:
6e:7f:87:e5:b6:97:33:c5:6f:a7:5c:2a:54:ef:c6:07:4c:92:
1c:55:88:03:d1:c4:67:9a:4a:67:05:43:56:28:94:9c:0e:3f:
1b:ae:b8:22:3a:e2:84:3c:b4:8a:dd:b2:cd:a4:80:ab:7b:79:
dd:67:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:08 2026 by rpki-client