
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/FDAF18600D7511F19C67C433203D8C67.roa
File: FDAF18600D7511F19C67C433203D8C67.roa (raw, json)
Hash identifier: BKjZPETmmTE+KF1achc790/D55More1QesHxmR/JFm0=
Subject key identifier: E4:C7:0A:B5:B5:FA:DF:8C:38:28:1E:E8:FF:1C:9B:B2:EC:F4:97:F2
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 0691
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/FDAF18600D7511F19C67C433203D8C67.roa
Signing time: Mon 06 Jul 2026 17:54:42 +0000
ROA not before: Mon 06 Jul 2026 17:54:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152491
IP address blocks: 151.158.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: Jul 6 17:54:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bebe2-b200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:45:7c:3e:6d:7c:61:c3:49:14:a9:11:eb:
90:f0:f8:5f:55:29:bb:d8:b6:9a:7e:b2:80:ad:a4:
ad:f4:61:e2:0a:99:44:f8:ce:d7:dd:a5:ec:f9:16:
25:c6:1c:e2:46:8f:9d:99:c3:61:27:ce:56:5a:3a:
2a:9a:e8:67:c3:7d:7e:5b:6a:f2:8b:62:38:40:63:
c1:e6:3c:74:2c:f6:96:ef:ec:8d:6c:04:0e:24:53:
2c:22:1a:07:8b:ef:8f:b2:9e:ab:6b:ad:99:a7:a3:
75:79:1b:08:52:5e:e9:d8:69:df:61:f6:f1:6a:ee:
e3:ed:58:fc:d9:15:d8:55:5f:33:25:8b:5d:f2:00:
e7:e9:b2:50:a1:45:7c:04:39:0a:de:eb:74:ee:4d:
3a:8a:f3:50:2b:a3:3b:f7:71:60:9a:e7:0f:bd:49:
2d:a3:c6:19:e6:32:ac:51:f9:39:58:b8:f4:5b:aa:
a0:86:69:81:80:21:aa:ea:7d:56:4d:5f:e5:56:2c:
1b:4b:c8:ee:ed:81:27:ef:0b:e2:b9:00:63:12:03:
dd:b2:cb:54:57:4d:79:b5:0f:1c:fd:52:cf:be:71:
12:2e:8e:42:de:33:40:94:5d:01:72:6e:63:42:80:
d3:6e:97:7a:b1:14:25:3e:a6:a8:85:c0:fe:be:b3:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C7:0A:B5:B5:FA:DF:8C:38:28:1E:E8:FF:1C:9B:B2:EC:F4:97:F2
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/FDAF18600D7511F19C67C433203D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.138.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:cf:c7:db:b7:5b:4b:d0:b7:99:40:ee:6a:3d:2b:49:9f:30:
c5:5e:47:f5:9e:f5:8c:6f:ef:dd:f4:7b:8a:9b:9b:d6:0e:47:
11:b5:d1:dc:94:6e:c2:17:7c:c3:4e:45:f8:6c:73:4a:79:a1:
77:73:ef:31:10:7f:81:c9:0f:79:ee:57:52:58:d9:8f:b2:30:
4a:12:3c:dd:e0:38:fd:4c:7b:76:70:0b:9f:1a:d4:2a:7d:7b:
cf:87:bc:d5:31:cd:07:d0:79:54:fc:f1:14:59:45:50:fd:c4:
19:79:fb:5d:53:47:c7:83:28:9c:e3:cc:d8:82:d3:7a:15:93:
3c:3b:11:df:77:7e:4b:5a:3d:d6:36:81:18:18:be:39:88:f5:
ae:52:22:8d:4f:5a:3f:c2:4d:70:16:b8:d2:64:84:fb:04:89:
9c:58:0e:40:9c:a1:c0:4f:6d:df:88:3a:fa:0a:53:ba:be:c8:
e9:f6:e9:38:4d:72:52:87:9d:6f:ad:c2:b9:74:ab:4a:e7:c6:
23:89:2b:df:5c:3f:d1:b9:f4:71:2b:aa:2b:19:f2:8d:57:5d:
ca:06:73:2f:48:63:16:ad:d6:d2:06:3c:01:a5:30:cc:08:fc:
44:4b:02:a4:73:d9:ce:43:41:2d:db:34:14:d3:78:ae:a6:98:
27:43:c3:37
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjYwNzA2MTc1NDQyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZWJlMi1iMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo5pFfD5tfGHDSRSpEeuQ8PhfVSm72LaafrKAraSt9GHiCplE+M7X3aXs+RYl
xhziRo+dmcNhJ85WWjoqmuhnw31+W2ryi2I4QGPB5jx0LPaW7+yNbAQOJFMsIhoH
i++Psp6ra62Zp6N1eRsIUl7p2GnfYfbxau7j7Vj82RXYVV8zJYtd8gDn6bJQoUV8
BDkK3ut07k06ivNQK6M793FgmucPvUkto8YZ5jKsUfk5WLj0W6qghmmBgCGq6n1W
TV/lViwbS8ju7YEn7wviuQBjEgPdsstUV015tQ8c/VLPvnESLo5C3jNAlF0Bcm5j
QoDTbpd6sRQlPqaohcD+vrMYUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOTHCrW1
+t+MOCge6P8cm7Ls9JfyMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvRkRBRjE4NjAw
RDc1MTFGMTlDNjdDNDMzMjAzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBl56KMA0GCSqGSIb3DQEBCwUAA4IBAQDGz8fbt1tL0LeZQO5qPStJ
nzDFXkf1nvWMb+/d9HuKm5vWDkcRtdHclG7CF3zDTkX4bHNKeaF3c+8xEH+ByQ95
7ldSWNmPsjBKEjzd4Dj9THt2cAufGtQqfXvPh7zVMc0H0HlU/PEUWUVQ/cQZeftd
U0fHgyic48zYgtN6FZM8OxHfd35LWj3WNoEYGL45iPWuUiKNT1o/wk1wFrjSZIT7
BImcWA5AnKHAT23fiDr6ClO6vsjp9uk4TXJSh51vrcK5dKtK58YjiSvfXD/RufRx
K6orGfKNV13KBnMvSGMWrdbSBjwBpTDMCPxESwKkc9nOQ0Et2zQU03iuppgnQ8M3
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:18:44 2026 by rpki-client