
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/217537E8B64B11F0ACEA6E59C4F9AE02.roa
File: 217537E8B64B11F0ACEA6E59C4F9AE02.roa (raw, json)
Hash identifier: mYs5SiTZEC3CxgVFufZV5e8qezqKEjTsJ0gYDb5njo0=
Subject key identifier: 3A:A1:4B:83:AD:7D:7E:27:E2:87:B7:4E:8F:4F:A7:0E:4A:37:A2:C6
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CC7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/217537E8B64B11F0ACEA6E59C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:49:50 +0000
ROA not before: Fri 31 Oct 2025 11:17:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149589
IP address blocks: 157.66.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11463 (0x2cc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Oct 31 11:17:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c28e-21c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:20:b6:c3:b4:af:6a:16:4f:39:4d:12:5e:
e3:3c:34:0f:c6:5d:37:71:2c:60:b2:c4:cb:0e:de:
c2:57:64:f4:65:3a:dd:55:76:1a:17:94:df:74:d5:
30:5f:a7:7e:21:cf:e4:dd:68:c6:aa:c1:89:14:89:
3f:3a:30:b5:62:65:33:90:e9:04:c3:12:70:d2:73:
64:d4:f7:e9:7a:74:2a:22:81:b4:16:19:ed:84:d3:
a2:b6:ff:c8:62:06:1a:d2:2b:8c:06:d1:10:8d:65:
72:32:0a:75:5c:74:c8:7f:0f:be:8e:5b:98:95:6b:
d5:4b:25:21:e5:dd:b1:9a:94:3b:d0:65:01:43:e9:
b7:76:69:c7:5e:44:9a:e8:2f:0d:e3:6f:7f:84:d0:
30:e3:a4:51:4f:20:a8:68:b8:02:ab:9d:67:be:d5:
e9:cc:9e:c5:da:82:85:87:33:da:a5:32:39:43:05:
18:cb:48:fc:64:8d:56:53:c6:bb:7e:da:a2:e0:cd:
cb:6b:53:2a:16:e6:99:98:d6:9f:c7:2d:50:cc:2d:
5f:ac:f2:83:10:54:a1:e3:85:3c:04:25:f3:08:05:
f5:b8:8e:76:7d:da:da:3f:b5:37:74:8e:c9:a6:3d:
98:38:2f:70:47:7f:da:fc:64:ea:d1:c2:a0:da:e2:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:4B:83:AD:7D:7E:27:E2:87:B7:4E:8F:4F:A7:0E:4A:37:A2:C6
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/217537E8B64B11F0ACEA6E59C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.45.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d3:9c:c2:b7:0a:a4:7d:ef:e2:4a:e6:26:1b:12:37:74:69:
dd:be:89:e0:e0:30:c5:3b:3f:f7:41:ea:de:9c:6a:20:6f:30:
50:f7:23:0c:88:fe:d5:91:5c:0f:5c:55:ef:34:ea:49:53:a9:
4c:9f:87:0e:5c:f9:7b:0c:64:35:94:9b:82:af:70:58:0a:cf:
84:a4:c5:77:15:8e:bf:8f:ec:06:07:2a:7b:53:66:d6:a0:2d:
d5:21:0b:fe:22:5d:9c:09:7a:92:46:d2:93:35:9e:a1:3b:30:
f8:a6:73:78:26:0f:8e:4f:e9:a4:f9:32:a5:67:c4:2c:2f:8d:
01:f2:6c:a1:b4:af:31:1f:2d:f9:d9:e0:4e:8f:8d:77:58:ad:
f2:1d:04:d3:3c:46:22:fc:7d:2b:c2:ec:38:b8:1b:a8:60:1e:
5b:6d:49:b5:47:11:64:66:91:be:51:21:77:ad:4f:b5:9f:5e:
61:9f:34:ad:6c:87:50:54:09:61:53:b8:c4:59:59:dd:4d:8f:
3e:eb:0f:d9:b5:a8:70:06:8a:67:df:01:f5:54:29:0f:2b:87:
41:b8:57:4c:db:fb:fe:8a:e1:be:88:a7:29:19:36:a2:82:92:
9e:0e:53:1c:8d:ad:eb:23:94:52:37:33:bc:bc:8b:43:8e:e7:
64:45:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:30 2026 by rpki-client