
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/C39A0E681C3F11F191DD1E243C3D8C67.roa
File: C39A0E681C3F11F191DD1E243C3D8C67.roa (raw, json)
Hash identifier: hQLjL6uaEzXj5JAnvJVWdPD1jvqNtBt6nBLQSo6Jx78=
Subject key identifier: 71:2D:D2:4D:20:97:2A:44:6A:17:24:74:86:48:17:6B:1E:C9:BF:D2
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 0681
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/C39A0E681C3F11F191DD1E243C3D8C67.roa
Signing time: Mon 06 Jul 2026 17:54:10 +0000
ROA not before: Mon 06 Jul 2026 17:54:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136634
IP address blocks: 151.158.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1665 (0x681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: Jul 6 17:54:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bebc2-4153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:24:fb:c6:9f:d9:9f:28:1b:67:8f:ab:38:
63:5b:43:1f:3f:01:bc:cc:26:02:cb:e0:08:25:a4:
74:ae:14:e7:28:0c:7b:22:70:bc:b8:a8:91:f7:c5:
04:07:2a:87:31:b9:6b:b3:99:2e:9f:8e:12:c5:5a:
61:c0:dd:83:88:5a:4a:82:d2:b9:23:2b:36:bd:52:
33:dc:8a:0c:ca:73:48:f9:5d:09:79:6c:c3:10:df:
37:a3:03:22:42:43:35:ea:bc:e6:4b:58:0e:77:c2:
9a:de:f4:44:16:7e:d7:df:2f:19:3f:68:37:01:5c:
16:4c:e1:c7:82:6c:08:fd:a0:76:b1:cb:b6:ef:4b:
01:d8:67:a6:09:5c:89:36:db:13:ff:10:1f:d2:9e:
33:02:2d:82:ff:9b:7c:92:bd:2b:7b:0a:49:7a:e5:
48:22:81:74:7f:22:7c:4b:39:08:21:2a:c6:e8:5c:
1d:c2:78:98:fb:0e:e8:c7:aa:2b:8b:26:bb:b2:ce:
82:8b:b8:97:75:06:b1:19:72:be:5f:07:3c:7b:cd:
13:6b:61:b0:44:a6:61:69:71:bc:04:32:39:2d:fd:
82:c8:78:2b:61:08:b5:2b:43:25:56:51:f4:0c:11:
1e:73:c1:c5:f9:f9:03:38:2f:8f:58:32:8c:e8:f9:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2D:D2:4D:20:97:2A:44:6A:17:24:74:86:48:17:6B:1E:C9:BF:D2
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/C39A0E681C3F11F191DD1E243C3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.228.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:0b:75:8c:51:ac:53:1f:e7:cd:9f:5a:df:64:12:50:f9:70:
2c:59:c4:7d:27:3a:c7:44:02:cb:66:f9:48:97:91:0e:7e:57:
8d:32:27:57:91:a2:39:81:09:0a:2d:7e:41:74:18:99:27:8f:
4f:91:c1:8f:c0:c3:b6:89:75:25:81:96:ba:9a:9b:89:db:31:
67:80:ae:bd:d8:f2:9a:0b:72:4d:51:06:61:db:94:79:8d:60:
c4:2f:29:89:95:5c:7e:80:63:02:59:90:a7:1c:db:55:9e:8c:
46:f5:9b:60:be:81:5e:fc:bf:26:10:d1:fa:7d:d7:f2:36:eb:
6d:ae:10:a3:b4:00:0b:23:13:f1:d8:ac:fd:74:8c:d4:8c:81:
c0:04:f5:80:03:49:4d:19:c2:a5:21:01:c6:ee:6b:44:de:66:
59:f8:bf:f1:b3:f5:0f:42:97:e5:75:a5:6e:ec:e0:ec:76:a0:
90:25:a6:1f:21:96:96:b6:90:5c:7e:e9:b2:da:75:a9:f8:73:
cc:f2:c8:86:30:69:03:70:2f:01:03:dd:d2:60:6b:4d:18:3d:
3b:68:23:e4:d8:0e:77:cf:a5:3f:68:f9:b7:f3:8d:2f:da:78:
df:8a:e6:6b:55:e4:3c:d0:25:dd:b9:a1:43:e6:7a:58:b3:ca:
2e:66:bc:9b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjYwNzA2MTc1NDEwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZWJjMi00MTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyd0k+8af2Z8oG2ePqzhjW0MfPwG8zCYCy+AIJaR0rhTnKAx7InC8uKiR98UE
ByqHMblrs5kun44SxVphwN2DiFpKgtK5Iys2vVIz3IoMynNI+V0JeWzDEN83owMi
QkM16rzmS1gOd8Ka3vREFn7X3y8ZP2g3AVwWTOHHgmwI/aB2scu270sB2GemCVyJ
NtsT/xAf0p4zAi2C/5t8kr0rewpJeuVIIoF0fyJ8SzkIISrG6FwdwniY+w7ox6or
iya7ss6Ci7iXdQaxGXK+Xwc8e80Ta2GwRKZhaXG8BDI5Lf2CyHgrYQi1K0MlVlH0
DBEec8HF+fkDOC+PWDKM6PlTYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHEt0k0g
lypEahckdIZIF2seyb/SMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvQzM5QTBFNjgx
QzNGMTFGMTkxREQxRTI0M0MzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBl57kMA0GCSqGSIb3DQEBCwUAA4IBAQBPC3WMUaxTH+fNn1rfZBJQ
+XAsWcR9JzrHRALLZvlIl5EOfleNMidXkaI5gQkKLX5BdBiZJ49PkcGPwMO2iXUl
gZa6mpuJ2zFngK692PKaC3JNUQZh25R5jWDELymJlVx+gGMCWZCnHNtVnoxG9Ztg
voFe/L8mENH6fdfyNuttrhCjtAALIxPx2Kz9dIzUjIHABPWAA0lNGcKlIQHG7mtE
3mZZ+L/xs/UPQpfldaVu7ODsdqCQJaYfIZaWtpBcfumy2nWp+HPM8siGMGkDcC8B
A93SYGtNGD07aCPk2A53z6U/aPm3840v2njfiuZrVeQ80CXduaFD5npYs8ouZryb
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:47:56 2026 by rpki-client