
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa
File: DB8A251A059411F18B30AAF03F3D8C67.roa (raw, json)
Hash identifier: gCDqJJPz2bW/8tDV0pnQ3VuTJlbB6RUmm1YWQgs+eGU=
Subject key identifier: 77:8A:7B:B5:5B:DE:04:E2:E4:5F:1E:BA:70:63:47:06:67:86:77:8B
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 068E
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa
Signing time: Mon 06 Jul 2026 17:54:37 +0000
ROA not before: Mon 06 Jul 2026 17:54:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150589
IP address blocks: 151.158.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678 (0x68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: Jul 6 17:54:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bebdd-98d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:2a:dd:30:07:46:8a:b7:3d:5f:80:d0:95:
90:13:04:63:ff:30:76:85:cd:c1:e3:a7:66:2b:00:
b3:dd:ea:63:6f:de:c4:e2:79:5c:d5:db:53:69:7c:
ac:15:7d:ed:92:32:b1:17:3d:eb:ac:e7:57:75:52:
51:dd:4a:3c:d3:ec:1c:33:74:b9:d7:ec:f3:ac:71:
bb:e9:22:f3:94:55:79:ad:51:81:ac:b1:78:65:1b:
3f:aa:fa:e0:39:c3:df:29:ec:fe:f2:49:f9:d4:cc:
6a:19:65:9a:76:11:c0:11:5c:fa:21:d7:06:6e:06:
63:b2:d4:90:fa:76:0d:ba:c7:58:eb:33:d6:99:6a:
db:8f:42:09:25:95:59:2b:40:93:b0:55:01:5f:8f:
28:08:1d:02:2e:fd:9e:dc:91:ba:03:42:64:d1:c6:
1e:24:5d:ac:eb:d9:e1:8a:3a:22:5c:47:3f:80:6a:
a9:bd:70:2e:b9:25:37:a8:34:57:b2:97:d3:33:fa:
92:7d:3d:7e:f3:ae:c7:4d:46:f4:ae:b4:f4:d8:1c:
2e:99:0b:4f:e3:0c:5f:31:1a:08:1e:2a:db:19:74:
79:b7:a1:16:d0:37:1e:00:6a:9e:e1:fa:5e:b6:2f:
b9:40:55:bc:6e:69:9b:08:40:0b:09:ee:50:8c:b3:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:7B:B5:5B:DE:04:E2:E4:5F:1E:BA:70:63:47:06:67:86:77:8B
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.32.0/23
Signature Algorithm: sha256WithRSAEncryption
27:34:f8:19:2a:75:53:60:6b:9c:63:76:11:0c:17:97:01:0e:
c5:70:e6:58:27:9b:33:cb:4e:a0:4e:d2:3b:e0:49:d5:b0:1b:
7b:b4:32:d9:3e:ac:2d:01:c9:f9:8c:d2:c3:5f:35:d6:e9:03:
85:10:63:1d:c3:22:86:b7:bb:d5:fa:7b:06:09:84:7f:cd:71:
39:34:eb:00:4a:85:db:d4:ab:99:fa:01:27:ab:fb:3c:2e:c4:
00:a4:ed:18:cd:29:0b:ea:68:2b:ad:27:f2:07:03:4f:cc:17:
8a:44:01:c2:39:0c:64:7e:13:aa:0e:cc:76:bc:77:3d:ed:c1:
ce:f2:6f:09:99:59:31:89:29:1b:78:63:fd:15:cb:76:fd:ee:
1b:d1:c3:d3:f3:13:40:d6:8a:ab:50:a8:d4:1f:24:d5:93:a7:
03:b9:6b:01:94:0a:68:4a:fe:49:c8:70:82:6f:24:2b:85:63:
df:ad:51:f0:5e:c1:10:e5:71:9e:ab:d2:f7:85:cb:57:1b:d8:
7e:ba:a9:c8:73:45:be:38:13:d1:00:a3:a0:bb:ac:19:7e:53:
d2:59:1c:2b:ca:d5:00:bc:fb:85:77:4f:2f:8b:48:2e:ac:07:
2d:35:16:5a:5e:c3:1c:03:a7:f7:d9:04:b9:32:8b:42:cf:21:
2e:a1:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:23 2026 by rpki-client