
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/CED17ACA08BA11F182E596311F3D8C67.roa
File: CED17ACA08BA11F182E596311F3D8C67.roa (raw, json)
Hash identifier: RsZ8t6/Tqc0Wu/6NMMyosh18l9nndVxM3x+HaTSs/gE=
Subject key identifier: 66:E4:E3:8F:A5:5D:22:FC:2C:1E:BE:A7:89:E6:11:F1:78:0A:A6:A2
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 0692
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/CED17ACA08BA11F182E596311F3D8C67.roa
Signing time: Mon 06 Jul 2026 17:54:45 +0000
ROA not before: Mon 06 Jul 2026 17:54:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153477
IP address blocks: 151.158.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1682 (0x692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: Jul 6 17:54:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bebe5-0814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:0c:8c:65:2f:c6:ea:fe:3a:fd:a3:47:56:
0f:dc:c6:7d:2c:de:fe:94:50:8f:8b:84:2c:9d:aa:
03:62:ce:fe:c4:6b:b8:8b:a2:2f:b7:f3:70:89:e9:
8a:be:68:66:3d:dc:39:56:d4:e8:e2:04:ad:d7:9f:
33:a9:58:84:0d:f2:7e:46:68:c4:ca:38:2c:f7:c6:
b5:0b:f7:2f:12:22:67:6b:2d:24:1c:e9:9b:cd:0d:
14:e8:07:b7:81:7f:70:0c:fe:b0:0e:0b:70:e0:8a:
af:48:30:09:59:48:98:f4:ad:28:0e:1d:a4:0a:27:
79:4b:3b:c5:b8:62:18:4b:ea:40:36:fe:f7:e5:0d:
c1:d0:55:b1:7a:8c:21:cd:dd:dc:72:6b:98:cd:0a:
fa:16:6c:a3:67:e4:72:7f:0e:cc:7d:d0:31:cd:bb:
25:32:21:76:65:4a:68:fc:d7:f9:3a:59:39:16:41:
b4:28:fe:ce:7f:5b:05:02:7f:22:49:80:66:91:c1:
a7:4d:89:a1:10:8f:59:fd:82:3e:a6:74:aa:c6:f9:
72:7c:41:cd:7c:e5:8a:e2:74:02:5c:72:59:b8:72:
63:aa:ee:cf:c6:aa:36:f6:8d:d3:eb:a7:3c:fc:f4:
e6:53:31:45:13:10:56:01:09:98:10:88:2e:6f:a1:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E4:E3:8F:A5:5D:22:FC:2C:1E:BE:A7:89:E6:11:F1:78:0A:A6:A2
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/CED17ACA08BA11F182E596311F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.144.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:a4:b2:df:24:e7:e0:a7:e3:b8:66:bb:3e:eb:be:a5:bb:9f:
00:17:40:c6:b2:89:7e:de:d1:fe:64:46:c1:34:e8:94:c7:14:
9b:cf:2a:64:f2:1e:44:3b:1a:44:35:94:0d:d3:a6:91:54:08:
ea:33:0f:8b:08:d7:87:d7:ca:3c:dc:9a:68:8c:0c:b3:e6:aa:
f2:8a:3c:52:af:94:a2:ae:73:da:90:04:6c:5e:77:bd:6e:9b:
d9:34:b5:d6:a2:dd:73:b4:d1:0f:8f:bc:70:69:d7:95:f2:68:
d8:6a:4a:13:3d:ff:bc:5f:01:90:b3:a1:0c:ef:d0:3d:5d:bd:
d3:75:24:3c:06:79:27:49:cf:27:3e:f9:82:c3:58:f3:8f:c9:
2e:38:85:28:af:8e:a4:8b:bd:9b:92:21:c2:42:c7:b5:29:e8:
b8:a4:33:f1:5f:e4:a0:5d:a1:a9:e5:68:56:2c:95:b9:17:2e:
73:1d:c3:9e:03:02:2c:a9:ae:95:e7:3e:8e:c6:13:5a:74:97:
f4:12:8e:fd:ad:37:d6:76:bc:bb:b8:51:f2:4e:e3:97:7e:21:
5b:c5:13:d6:88:f9:e2:12:aa:2a:b9:29:e6:cb:e8:7d:49:d7:
90:cc:42:2c:18:ea:4c:d2:b4:d4:66:d3:e8:07:bd:6f:49:9a:
26:5a:4b:ed
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjYwNzA2MTc1NDQ1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZWJlNS0wODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwMoMjGUvxur+Ov2jR1YP3MZ9LN7+lFCPi4QsnaoDYs7+xGu4i6Ivt/NwiemK
vmhmPdw5VtTo4gSt158zqViEDfJ+RmjEyjgs98a1C/cvEiJnay0kHOmbzQ0U6Ae3
gX9wDP6wDgtw4IqvSDAJWUiY9K0oDh2kCid5SzvFuGIYS+pANv735Q3B0FWxeowh
zd3ccmuYzQr6FmyjZ+Ryfw7MfdAxzbslMiF2ZUpo/Nf5Olk5FkG0KP7Of1sFAn8i
SYBmkcGnTYmhEI9Z/YI+pnSqxvlyfEHNfOWK4nQCXHJZuHJjqu7Pxqo29o3T66c8
/PTmUzFFExBWAQmYEIgub6FGzQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGbk44+l
XSL8LB6+p4nmEfF4CqaiMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvQ0VEMTdBQ0Ew
OEJBMTFGMTgyRTU5NjMxMUYzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBl56QMA0GCSqGSIb3DQEBCwUAA4IBAQBKpLLfJOfgp+O4Zrs+676l
u58AF0DGsol+3tH+ZEbBNOiUxxSbzypk8h5EOxpENZQN06aRVAjqMw+LCNeH18o8
3JpojAyz5qryijxSr5SirnPakARsXne9bpvZNLXWot1ztNEPj7xwadeV8mjYakoT
Pf+8XwGQs6EM79A9Xb3TdSQ8BnknSc8nPvmCw1jzj8kuOIUor46ki72bkiHCQse1
Kei4pDPxX+SgXaGp5WhWLJW5Fy5zHcOeAwIsqa6V5z6OxhNadJf0Eo79rTfWdry7
uFHyTuOXfiFbxRPWiPniEqoquSnmy+h9SdeQzEIsGOpM0rTUZtPoB71vSZomWkvt
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:20 2026 by rpki-client