
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/CED17ACA08BA11F182E596311F3D8C67.roa
File: CED17ACA08BA11F182E596311F3D8C67.roa (raw, json)
Hash identifier: 2bb8Hl6yb1VvrEoyyvqZ42tVw0IBDH+PBL0+ivGK6RY=
Subject key identifier: C2:54:D6:08:CB:63:D0:AA:60:22:7D:8A:99:48:E1:4B:95:E4:A7:66
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 065D
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/CED17ACA08BA11F182E596311F3D8C67.roa
Signing time: Sun 31 May 2026 17:54:56 +0000
ROA not before: Sun 31 May 2026 17:54:56 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153477
IP address blocks: 151.158.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1629 (0x65d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: May 31 17:54:56 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c75ef-232b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:5c:19:6c:21:1b:2c:0a:cd:59:a3:ac:2f:
58:5b:b8:9a:9a:09:98:62:f6:bd:de:b1:fe:20:40:
59:31:ec:56:75:c4:52:fc:4b:e2:64:2c:23:89:f1:
d6:cf:09:b6:c0:0a:25:d3:95:87:f5:04:c5:59:85:
80:5f:1d:4e:2e:ab:fe:0e:c9:a3:71:6a:70:c5:61:
58:52:cf:66:66:cf:8e:7a:23:b0:41:94:31:b4:26:
ea:81:96:15:dd:c0:d0:0b:83:14:9c:6b:83:42:24:
08:70:ae:f3:88:7b:15:d0:af:03:9d:63:3b:f1:c6:
ea:2b:ee:ef:b5:53:36:c2:e2:7d:bf:1d:30:9a:bc:
b3:60:f7:70:ef:e8:92:d2:54:47:a7:c5:df:6f:1f:
18:25:83:62:a1:d4:36:d8:b5:82:de:8d:00:5b:fb:
65:cc:aa:6a:48:8e:36:e9:ba:a8:c0:ab:70:26:7b:
4e:d6:d4:79:5f:29:ea:22:a5:1a:1b:2e:af:a2:0f:
30:4f:9b:c0:86:fd:3c:1e:b4:87:70:2e:2c:05:7e:
4e:00:4a:01:e4:03:64:f1:bb:14:df:e5:7e:a2:d7:
5b:3b:bb:ea:ac:bb:9a:c6:c8:1e:6e:4b:c1:b0:d4:
03:83:ec:2d:f8:28:30:16:c3:00:9f:73:47:82:e1:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:54:D6:08:CB:63:D0:AA:60:22:7D:8A:99:48:E1:4B:95:E4:A7:66
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/CED17ACA08BA11F182E596311F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.144.0/23
Signature Algorithm: sha256WithRSAEncryption
08:8c:4f:91:54:0c:b1:27:ef:61:2b:03:28:88:40:09:d2:b4:
9f:1e:12:5c:a2:66:55:f2:2e:4c:e1:ff:47:22:fa:b5:8f:b8:
63:f9:b5:d2:81:4e:36:eb:8a:45:44:ea:41:8b:3d:d5:45:ea:
e1:69:df:b2:26:ec:a0:a3:87:2c:9e:dc:b7:72:b4:14:38:d4:
fa:25:3c:1d:89:05:8f:17:d6:66:15:29:e7:a4:5e:d7:65:f6:
66:43:f8:c0:0f:94:50:a7:24:16:e4:22:5e:07:7a:36:3a:89:
03:98:ca:08:ca:40:fb:87:d4:be:bd:58:00:7f:41:6d:0c:de:
d4:94:3d:40:3c:34:39:c0:35:9f:21:65:26:fa:32:4a:62:ac:
78:52:be:d0:fa:54:ae:02:1f:69:aa:c7:25:a5:9a:17:34:62:
9a:95:8d:c9:43:2d:b5:c3:bd:fd:ab:5c:5e:fd:ab:03:8b:6a:
a4:b7:38:8d:6f:4d:4f:60:c9:03:34:9b:18:6e:fd:b1:49:21:
b6:c3:26:84:84:73:7e:be:8e:00:65:17:67:8d:c7:f1:9e:a2:
26:6a:8b:dd:d4:b0:42:e7:c3:dd:cd:d7:8c:79:7b:5b:0c:67:
f0:42:41:a3:d3:46:65:4b:4c:5b:0e:b5:1a:1a:f6:40:ca:06:
49:20:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:38 2026 by rpki-client