
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/78E70772B90E11EE95522F7FC4F9AE02.roa
File: 78E70772B90E11EE95522F7FC4F9AE02.roa (raw, json)
Hash identifier: Ndrguyvjm0VNr/otT/vyMqtTe4SvJIcqY+R/NAW9xv0=
Subject key identifier: CE:20:E1:60:24:3F:05:74:1A:35:A5:4E:F3:22:4E:1C:AE:DE:89:69
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2BEE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/78E70772B90E11EE95522F7FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:44:33 +0000
ROA not before: Thu 08 May 2025 15:53:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151718
IP address blocks: 157.10.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11246 (0x2bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:53:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c151-4189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:49:82:78:82:cb:22:18:1b:b8:64:41:74:
69:89:f3:28:22:9d:f5:06:c4:c5:08:c2:36:14:25:
1a:e3:e6:5f:b8:99:d9:36:42:3f:4f:a4:e4:b9:7d:
63:f7:98:c5:8a:33:66:0b:13:46:c2:96:90:ec:09:
f5:49:23:6a:26:a3:64:67:4c:cc:d7:ba:8d:ad:40:
bd:28:a0:4c:3b:56:b7:70:f3:d8:16:70:eb:2b:e1:
d2:34:66:db:22:34:f6:a5:a8:7c:c6:95:7e:4b:3b:
1c:1f:74:56:6c:39:66:9f:53:a5:c1:f3:4a:66:cd:
f0:b5:2f:6c:e2:04:bb:82:0e:51:e8:c4:ca:5f:a5:
14:fd:e8:6e:a6:d2:aa:1c:b3:24:6e:71:eb:71:88:
c8:9a:4b:97:08:05:16:2b:cf:0f:4e:d8:77:67:34:
82:1e:dc:bf:85:bc:9c:bc:55:a4:29:a1:5a:d9:ea:
15:31:df:3d:83:9f:a4:22:74:45:6f:f2:a5:95:1d:
cb:1f:6f:fc:cc:d2:6d:e9:72:2a:0d:0a:f5:97:e6:
f0:f4:6d:50:d8:d5:86:5f:0b:de:b8:2b:39:fb:47:
73:d6:18:56:95:43:01:e6:78:b4:1b:f8:93:a9:c2:
9d:ea:cd:d0:24:6d:46:e5:87:64:97:25:b7:f4:9f:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:20:E1:60:24:3F:05:74:1A:35:A5:4E:F3:22:4E:1C:AE:DE:89:69
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/78E70772B90E11EE95522F7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.56.0/23
Signature Algorithm: sha256WithRSAEncryption
25:ed:88:d0:92:7f:17:d8:15:13:c4:66:4f:ea:ee:6e:ba:80:
5a:0b:ee:e4:ce:97:87:23:6c:a1:3f:a3:0a:60:17:6c:e6:6e:
bd:bf:7d:90:c1:ff:44:03:8e:5e:31:c5:e9:e3:17:77:7f:cc:
aa:7c:af:86:32:0c:2d:98:06:d1:37:17:9d:8f:66:18:5b:d3:
c6:c5:e3:65:21:f4:7c:f7:7c:08:89:4d:8b:4a:4c:4a:57:8b:
4c:1e:0f:8c:c2:7a:bb:d2:45:14:d2:7a:59:12:ab:ed:b5:1a:
35:1f:49:1a:54:20:77:ef:23:ff:b4:33:85:de:64:57:e2:ac:
53:02:18:79:e3:f7:e8:f7:12:04:9c:5e:39:bd:84:19:2a:7f:
b1:9d:9b:00:dd:46:e9:b6:cc:3f:b8:b8:be:a5:73:28:a1:97:
96:f9:cf:0e:07:ac:05:95:7c:94:8a:87:41:4f:07:e0:ce:20:
51:bd:e1:ae:23:11:ee:77:ad:76:e7:7c:a5:67:dd:e9:67:80:
28:6f:f2:1d:c3:e7:31:eb:99:82:da:01:5a:e4:95:fa:c4:e2:
10:01:25:8c:b9:e0:30:cb:87:88:37:36:fa:40:55:85:79:7b:
3b:4b:68:72:8b:5c:73:ac:f6:af:cf:b0:03:1d:7f:a0:ad:9c:
f1:45:a1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:24 2026 by rpki-client