
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/03251AD631A911F18EF27FEAB5833773.roa
File: 03251AD631A911F18EF27FEAB5833773.roa (raw, json)
Hash identifier: 5mMNHyeK31fyUgJK0bJby3lA3EUY+YB2y55NPffE0PI=
Subject key identifier: B3:07:5C:8F:4D:75:12:D6:9D:0C:53:E2:51:36:59:89:09:3D:03:0F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2D76
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/03251AD631A911F18EF27FEAB5833773.roa
Signing time: Mon 06 Apr 2026 11:09:00 +0000
ROA not before: Mon 06 Apr 2026 11:09:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135817
IP address blocks: 157.66.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11638 (0x2d76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Apr 6 11:09:00 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69d3944c-9e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:3c:e1:76:8a:db:0c:87:a4:ad:93:10:c5:
29:d4:de:4e:8e:45:28:44:59:a3:aa:76:88:c4:79:
f9:8d:e7:b3:65:1a:3e:22:70:ed:55:9b:51:df:14:
c6:de:40:b9:ff:46:63:b6:f9:79:ed:7b:3b:f2:56:
38:c4:c6:e9:cf:da:9f:96:46:a8:83:b8:33:b4:21:
91:97:ec:1b:7f:7b:30:44:f4:80:9b:ee:1d:bb:fa:
bb:87:5d:51:56:1f:6d:51:25:a3:a3:84:04:d0:b0:
51:bb:80:fe:7e:be:7c:7d:c7:d3:47:dd:7a:02:dc:
70:0d:9d:ec:45:f3:a2:72:11:a3:43:56:d5:41:60:
d4:82:e4:05:7b:37:2e:b7:c5:59:d7:1c:4c:13:35:
97:ab:39:e0:1d:02:46:3e:e1:67:a6:9f:5b:9c:85:
66:f1:8f:6b:8c:41:dc:16:be:72:df:a3:b6:7c:1a:
93:a3:23:bf:b3:80:50:52:8d:fd:49:58:9e:36:c0:
8d:8a:fb:30:0f:c2:6b:51:c3:78:fb:aa:b8:a5:44:
57:4c:55:c3:4d:84:08:07:de:32:72:f8:bb:aa:48:
33:27:15:40:8f:91:e4:97:c5:94:18:b5:60:31:48:
3d:ad:c7:82:c3:b2:76:06:bf:6a:80:be:9f:fc:20:
b0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:07:5C:8F:4D:75:12:D6:9D:0C:53:E2:51:36:59:89:09:3D:03:0F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/03251AD631A911F18EF27FEAB5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.32.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7c:8b:d1:08:81:ea:1b:6f:cc:c1:84:11:53:00:33:50:1a:
6d:ef:23:31:98:86:a6:7f:aa:22:aa:df:4e:8c:0a:ac:36:6d:
b2:bd:ad:44:9b:39:36:61:0f:cc:81:90:85:86:a6:89:19:a4:
43:9d:17:8b:72:6c:80:b9:33:47:5d:ed:38:0d:04:0e:ad:18:
f9:d6:2f:c2:e4:66:0f:c3:f5:f0:13:2d:2f:17:72:21:a0:a6:
1c:1d:5c:54:f0:53:c3:5f:9a:a4:ad:83:68:67:86:86:89:0b:
ed:9d:58:87:4d:80:cc:55:90:4c:ee:2a:da:02:00:a8:77:f2:
7d:64:e9:00:3f:d4:71:91:6b:87:7e:82:4d:ca:7a:f0:62:aa:
f0:91:d6:93:a2:cf:46:f4:57:23:be:0f:2d:15:f3:7b:af:ea:
85:73:d3:53:12:8c:67:84:da:8b:30:f1:4b:17:26:cf:65:86:
1b:58:73:f2:be:4e:73:12:77:65:70:e8:88:90:8b:eb:9c:31:
fe:65:66:ac:8e:8f:00:5e:55:47:7e:af:7e:01:35:fc:7e:c7:
bd:ea:99:e3:07:c2:52:12:f0:f3:ca:18:d0:6c:24:df:51:06:
59:a7:78:05:7c:c8:12:cd:d6:65:f6:e4:11:b8:3b:5e:16:c5:
54:6b:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:32 2026 by rpki-client