
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A809B2600E411F1990281B8376F56BC.roa
File: 4A809B2600E411F1990281B8376F56BC.roa (raw, json)
Hash identifier: 9gZqVEP6yiaWYFBGHG0ur5rG7aa6nxxXUdZqeohoMGU=
Subject key identifier: EC:C7:B9:FD:A7:DC:DB:5A:CC:E4:4F:62:46:1C:E5:74:DA:E7:32:F0
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2D0B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A809B2600E411F1990281B8376F56BC.roa
Signing time: Sun 01 Mar 2026 22:51:23 +0000
ROA not before: Tue 03 Feb 2026 09:39:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137085
IP address blocks: 157.66.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11531 (0x2d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Feb 3 09:39:53 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2eb-0b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:1f:bd:97:40:64:1d:7a:93:87:95:b1:0f:
ff:69:51:76:c3:1a:87:0e:90:b9:f0:45:b1:d1:b2:
88:ab:eb:1c:ae:60:ee:4e:4b:cf:7c:17:ae:58:51:
1d:9c:7e:af:49:97:63:36:90:c3:2a:b0:d1:34:bf:
ff:79:40:44:2b:04:e5:87:0f:53:5d:fa:47:33:a6:
b1:12:a1:98:f1:93:27:3b:2c:25:f6:fe:e4:4b:6d:
ef:23:27:46:1c:79:c4:93:1b:6f:9e:16:be:ab:4b:
10:fa:a0:87:7d:e6:55:61:a4:00:39:df:0d:28:9d:
a6:67:49:9a:bb:0b:6c:f7:de:26:71:00:68:f1:99:
78:46:e4:20:0b:5a:f8:8b:a6:c5:69:03:c2:b7:12:
05:99:40:5b:00:dc:08:f0:53:71:2d:59:6b:86:ab:
0f:05:2a:18:e2:19:2e:46:cc:48:ad:62:24:c8:4a:
48:84:75:11:a0:02:f3:a8:a4:ea:0a:ef:d8:25:c7:
ef:ea:c8:7d:12:f6:d9:90:df:cc:68:1d:59:4c:27:
db:ff:8a:25:c1:8b:eb:45:b6:c5:a0:3d:62:97:a5:
47:1a:03:ee:5c:a4:82:70:9f:8c:c7:aa:6a:e0:1e:
b2:d4:38:ce:2e:77:8f:11:ba:90:c5:69:2c:06:c8:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C7:B9:FD:A7:DC:DB:5A:CC:E4:4F:62:46:1C:E5:74:DA:E7:32:F0
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A809B2600E411F1990281B8376F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.74.0/24
Signature Algorithm: sha256WithRSAEncryption
03:81:a9:90:52:fb:f2:bb:73:2c:03:38:e7:eb:b7:74:12:d1:
55:4e:d8:bc:26:27:55:03:37:bc:fd:b0:04:35:3d:49:c7:43:
00:c3:57:5f:4c:c0:b1:d6:43:17:66:d9:df:67:70:8b:e3:ee:
6f:31:49:d6:06:ea:2f:d5:6b:22:a8:9c:69:66:50:fc:34:13:
8c:d6:5a:45:13:2c:ea:1d:f9:73:7f:c1:86:ab:d9:65:e2:85:
fc:23:7d:9e:58:05:1e:d7:b0:5f:8b:d0:20:8c:9e:40:d2:c1:
8f:7d:00:10:cf:c8:e0:2b:ce:37:3b:bc:7f:da:6b:f8:4d:b6:
6d:ce:b7:7d:29:01:62:98:ce:5f:a3:ca:d7:aa:ab:5e:fe:2e:
6b:71:c6:fd:64:01:b4:74:84:ba:9f:5f:75:34:9c:f8:5f:a8:
1b:e1:eb:1c:1e:26:f1:21:e8:62:08:50:f1:33:94:25:37:ab:
5e:72:49:45:43:cc:dd:07:80:d5:2e:84:30:7c:e1:e7:1f:8c:
63:05:e0:f5:2d:71:af:04:ba:6c:78:cc:5a:3c:b0:d1:bf:9a:
a9:de:47:f4:e6:76:0d:2d:70:18:e3:64:70:6a:f5:92:4b:2f:
e0:e2:c9:76:0c:fb:72:ad:c9:f6:7c:3d:82:b0:42:b0:17:9d:
0f:d2:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:31:38 2026 by rpki-client