
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/637A68DAE8F111EE97648F87C4F9AE02.roa
File: 637A68DAE8F111EE97648F87C4F9AE02.roa (raw, json)
Hash identifier: uw8c7/x+LW54sWtfU4fshMIHcCL1cBeoLOLBgsQyn7w=
Subject key identifier: 03:8B:FD:80:68:59:9C:73:3C:36:3F:CE:8E:7D:A5:72:BF:DF:E7:C6
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C13
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/637A68DAE8F111EE97648F87C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:45:34 +0000
ROA not before: Thu 08 May 2025 15:54:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152512
IP address blocks: 157.20.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11283 (0x2c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c18d-122f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:0b:83:e8:62:9b:87:57:d5:a8:78:d3:74:
b8:7a:04:4c:06:db:9d:68:23:48:2d:53:36:3d:1f:
f1:6b:39:4b:82:20:f8:ae:99:6b:59:1a:8b:85:cb:
13:c3:4a:08:cf:b0:c9:aa:7c:6a:1d:12:57:28:6d:
32:1b:14:c2:4b:83:2d:91:97:36:5b:70:e6:2b:e2:
60:c3:7e:78:e8:57:60:6e:38:0a:7f:3e:c7:95:51:
93:36:e4:7a:a6:66:7c:1f:68:87:9d:00:da:a9:36:
01:f8:59:2d:46:f2:b0:6a:fb:f7:3f:2f:22:10:d6:
12:69:f9:94:db:ae:d8:0a:96:3f:f9:8b:d0:53:11:
ca:7f:23:2a:30:c6:35:71:62:64:7b:9a:47:00:68:
07:87:4d:df:23:68:1f:28:74:e8:95:17:98:77:ed:
d8:15:6e:6c:b0:3e:9f:2b:b6:01:bd:ec:56:e5:c7:
86:67:0e:fd:c0:33:60:6a:84:0c:90:ef:d1:d0:d1:
1f:e9:9f:52:d6:e6:dc:f9:c8:83:8b:7c:24:23:1e:
fc:8c:5e:a6:c6:5d:3e:f4:a7:3c:7b:ad:25:cc:05:
9e:b5:f3:ad:36:89:9f:18:99:57:66:ed:c3:6b:15:
6d:72:e1:46:e7:b5:da:cf:c7:4f:a2:d1:fb:4d:b0:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8B:FD:80:68:59:9C:73:3C:36:3F:CE:8E:7D:A5:72:BF:DF:E7:C6
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/637A68DAE8F111EE97648F87C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:de:46:95:ef:b9:7f:88:32:cc:2c:db:3a:47:52:af:ed:40:
12:c9:70:db:de:28:03:1b:03:18:d2:c5:61:4e:2b:9e:00:59:
d6:d9:68:24:77:bb:dc:2b:d9:81:78:6a:98:27:2a:53:78:57:
22:a4:7c:94:9a:d2:09:e5:44:7d:32:11:18:63:6c:e6:ac:ea:
b6:6c:a3:39:68:ea:3a:db:32:63:f3:48:77:ab:37:20:d3:4d:
8d:52:80:50:3a:a4:97:e3:9a:13:06:92:35:eb:4f:53:fe:54:
f6:35:4d:e4:47:7f:29:00:1c:16:19:ea:0f:88:85:a8:9e:cf:
f5:b5:c2:39:39:f8:b7:b3:e7:53:c9:a7:28:fc:22:71:d0:73:
c6:a7:cb:d3:45:ab:eb:54:9c:cd:65:de:4c:b5:52:59:73:ee:
ed:5d:69:1e:00:30:8a:be:f1:1d:45:8b:d2:0c:96:89:eb:e1:
a3:70:12:40:1f:c1:7f:f9:5d:bc:b0:18:d1:f1:9a:a5:31:a7:
ff:9c:96:30:66:b0:3c:20:fe:6f:bd:6f:78:48:1c:8d:22:d9:
45:e0:8c:5b:85:1f:3f:fe:45:b4:d4:8b:1e:24:6c:f7:60:cd:
8b:31:d8:d2:3a:e9:0d:8c:80:a6:33:90:0f:26:41:00:61:ce:
78:48:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:49 2026 by rpki-client