
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/75E58BA20A3911F0B3D0D353C4F9AE02.roa
File: 75E58BA20A3911F0B3D0D353C4F9AE02.roa (raw, json)
Hash identifier: B9vDn2cXic0x9UHWNbd6QOEXtLaL3pGUayst4VQ1aZY=
Subject key identifier: A2:E0:1A:02:BC:6F:91:54:C5:0E:6D:A8:B0:35:5A:91:24:2C:AE:78
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2BEA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/75E58BA20A3911F0B3D0D353C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:44:28 +0000
ROA not before: Thu 08 May 2025 15:53:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151702
IP address blocks: 157.10.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11242 (0x2bea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:53:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c14c-3047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b7:da:b3:e6:6d:94:2b:b2:3d:3f:a8:19:47:
23:dd:e0:19:2f:df:5d:56:e5:1a:ae:5e:21:2e:fa:
2a:78:1b:45:23:ec:23:75:61:73:18:39:a0:90:5c:
14:0c:b5:91:02:43:25:84:13:1b:64:9d:41:9b:76:
df:df:6c:03:8a:65:72:c3:d3:f0:ea:06:46:be:5a:
1c:7d:fb:76:66:05:73:b2:5e:43:64:9b:0a:22:a6:
b1:36:5e:38:1d:6e:71:85:4a:39:c8:07:d6:b1:91:
39:f5:3f:af:e9:11:bb:2f:f7:cf:c8:14:e2:e5:db:
53:41:c7:bc:8b:f7:a0:4f:9f:f7:1a:7c:47:8c:af:
a4:6f:3e:d6:cd:97:6c:a8:0b:67:b4:9f:df:0f:95:
ea:ae:95:d0:05:89:61:84:0e:03:7a:da:00:85:e6:
cf:de:92:52:b7:c7:55:39:f1:5e:fd:18:68:77:7c:
df:27:02:59:7b:66:6b:66:db:1d:a5:da:8f:be:b6:
d4:6e:8d:f9:4f:92:fc:f8:47:c9:9b:c1:65:bc:aa:
dc:09:1b:bb:fc:f2:0a:61:68:8c:90:9e:90:7e:a1:
de:95:c3:c2:58:9b:36:cc:c2:dc:a5:9b:6d:b1:86:
e2:cc:25:e2:6f:72:d4:dd:dd:08:f0:ab:ee:58:3d:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:1A:02:BC:6F:91:54:C5:0E:6D:A8:B0:35:5A:91:24:2C:AE:78
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/75E58BA20A3911F0B3D0D353C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.24.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:f0:15:8c:d8:35:3e:e9:3e:a8:63:28:2c:68:83:37:cb:75:
bb:13:c1:80:30:09:e8:9c:c5:50:f4:4c:da:ca:5b:85:c7:c3:
35:40:36:db:be:88:84:62:2e:50:a2:b8:37:b2:b9:de:a9:5b:
92:da:23:5b:a2:da:52:82:5e:5d:0c:37:f7:c1:dd:30:2b:5d:
0c:22:4b:cb:4e:97:e5:58:72:73:9d:0e:a0:08:47:e7:f6:b2:
7b:e0:4d:04:82:79:c3:91:b9:00:b1:59:de:be:7f:95:16:33:
de:f0:52:16:77:40:8d:d2:08:ac:6e:4a:1d:6a:fc:b3:d5:5a:
94:16:42:44:cb:a5:6b:87:18:74:42:a1:8e:2d:96:9c:84:ff:
ab:96:0c:81:59:cc:f2:f2:01:6b:6b:0d:14:a5:69:58:d8:af:
67:3c:bf:71:68:ca:41:9a:3c:73:fd:4b:70:b1:cd:47:21:21:
0a:06:8a:77:e0:e8:12:d4:40:00:82:91:96:07:83:b0:c0:d7:
92:cf:03:63:ee:4b:2d:da:aa:3e:73:67:f7:0e:ba:44:ee:21:
a2:c0:cc:f0:b1:2d:0f:12:65:44:12:a8:32:36:7d:42:fe:68:
b8:a6:50:d4:c3:c6:15:68:ba:03:dd:19:bb:08:8b:f0:0f:fa:
f9:d0:9e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:43 2026 by rpki-client