
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa
File: DB8A251A059411F18B30AAF03F3D8C67.roa (raw, json)
Hash identifier: F1SxeWg9ZSN03jfkFl9rgKRKVvQiYkrIcYk0nopRvf0=
Subject key identifier: 47:9F:0D:B5:B8:41:6D:FF:EC:F2:50:8E:36:F7:4D:22:D6:8B:5D:3B
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 0659
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa
Signing time: Sun 31 May 2026 17:54:47 +0000
ROA not before: Sun 31 May 2026 17:54:47 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150589
IP address blocks: 151.158.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1625 (0x659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: May 31 17:54:47 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c75e7-7382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:bd:c8:04:2e:41:ce:c8:e1:44:24:94:9b:
10:2d:b8:d1:df:a8:ca:0f:ab:93:40:99:c4:95:12:
a0:a2:e5:0d:6f:63:18:ab:ff:0e:65:f5:3b:91:a6:
e0:ad:6a:a6:17:43:87:df:c7:c7:d7:cd:bd:43:bd:
3e:5b:a2:b6:e4:93:3b:84:4c:79:54:69:53:c9:56:
03:e0:29:6a:de:b6:d4:07:fb:84:8b:99:dc:f4:a9:
3e:5a:25:9a:a7:5c:fe:aa:b5:8e:be:5a:0c:bb:aa:
05:a2:c5:7f:7f:51:8b:0f:3d:e5:00:b1:b9:22:48:
33:5b:cd:03:cc:39:57:4e:b7:3f:83:90:1a:c3:be:
cc:b2:a9:4e:87:4b:cc:6d:d0:47:f2:5e:3e:43:b0:
14:44:21:92:3b:ba:6d:05:ba:e2:67:68:77:d3:7b:
94:63:f6:56:ec:72:06:6a:2a:4a:f0:b8:3d:b6:52:
8d:2e:04:f2:ca:16:c9:fc:47:5e:43:8c:00:b5:94:
1d:35:a1:64:64:7b:a9:84:e0:67:d0:1e:9b:00:a5:
a5:3a:23:32:3f:da:35:b8:f8:79:51:a8:38:8f:20:
51:f3:dc:49:0d:52:75:e5:d2:cc:68:20:f4:95:5b:
6e:ac:85:c0:e8:0a:4f:ad:e0:1c:32:75:ed:7b:4a:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:0D:B5:B8:41:6D:FF:EC:F2:50:8E:36:F7:4D:22:D6:8B:5D:3B
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.32.0/23
Signature Algorithm: sha256WithRSAEncryption
09:ff:da:54:0d:4e:32:cb:e4:39:bc:ba:76:87:7e:9d:8d:df:
ea:3b:b5:7d:a3:31:27:da:80:b7:3c:73:09:e6:7f:4d:8d:66:
05:79:e1:e4:04:54:c4:65:d4:dc:86:8e:3b:74:ce:54:37:e8:
95:57:f1:37:67:96:14:81:2e:3b:f3:ea:86:59:5c:65:e2:db:
b6:c0:f1:a8:46:db:22:7f:97:6f:f5:4c:ba:4e:4c:f0:25:79:
bb:cc:2f:f2:a7:7e:a2:4c:fc:4e:1c:16:ff:88:c4:8a:f7:9b:
91:0e:71:46:a6:87:ed:a4:00:bb:17:0f:c1:fc:f4:73:da:2d:
cf:d7:d6:67:fe:84:9e:98:b2:91:a3:32:d4:24:7d:15:4e:f8:
49:af:da:7a:f9:de:18:ec:9a:ef:8f:d6:f7:d2:19:93:22:2a:
09:ad:a5:6e:51:e7:3a:37:5b:89:98:91:c9:a4:67:dc:e3:30:
a0:f5:d8:90:02:49:cd:9a:67:60:0e:c9:b9:60:40:79:5d:3e:
ff:18:07:a5:bf:60:4a:03:94:dd:16:03:29:6d:da:94:a8:92:
a5:bf:4e:1e:f0:4a:4c:11:2e:b8:67:ee:73:fb:fc:8e:a4:03:
23:d6:8b:cd:1d:5b:0f:82:22:a0:73:a7:ab:1e:9c:67:a7:31:
5d:27:e7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:33 2026 by rpki-client