
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A857108FE9011F088AEB2895E6F56BC.roa
File: 7A857108FE9011F088AEB2895E6F56BC.roa (raw, json)
Hash identifier: wbVKns288GJz1ovUeAuz/yTYd/L/Q0LoC9xd67bVjTI=
Subject key identifier: 86:CA:5F:C1:4E:59:24:77:F7:25:78:AC:10:BC:02:FC:1A:41:5E:E2
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2D0A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A857108FE9011F088AEB2895E6F56BC.roa
Signing time: Sun 01 Mar 2026 22:51:22 +0000
ROA not before: Sat 31 Jan 2026 10:34:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154390
IP address blocks: 144.79.30.0/24 maxlen: 24
144.79.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11530 (0x2d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 31 10:34:53 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2ea-de6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:ca:65:8b:5c:10:08:10:70:25:0a:5d:7e:
d3:12:3f:98:a3:96:e3:11:a9:9f:ee:31:0c:4b:0f:
64:c4:3b:27:b6:34:a6:f0:05:52:52:0b:b1:b1:9e:
f4:d4:28:e8:d0:f1:81:43:1e:8e:09:88:43:6c:89:
a9:ba:ad:62:38:85:00:88:2f:59:02:96:36:0c:40:
14:f8:51:1f:93:6b:0d:16:7d:db:68:94:58:40:90:
9a:0b:be:49:53:b6:94:78:19:fb:0c:f7:c6:6d:43:
09:8d:ca:92:9b:2c:1e:4e:6b:2c:49:14:f7:bc:df:
39:f8:78:b8:94:6d:95:64:2e:6f:3d:47:1c:56:96:
6b:50:04:37:90:53:1d:bf:da:70:92:27:08:09:42:
a4:df:4a:98:13:f3:6b:4b:14:bf:09:ed:54:0a:d6:
32:5f:df:58:f0:ce:1a:68:3e:5f:b5:db:c0:78:fc:
03:0e:24:a4:1f:e3:a0:e2:66:fa:55:d5:27:c6:f7:
ba:42:84:66:0a:84:08:c7:c4:5a:a0:0a:e2:ad:00:
bd:38:4d:a5:77:5c:38:a6:1f:ca:99:65:a3:f9:d9:
d1:ee:3d:c0:8f:b4:53:11:d5:d1:ce:0e:2e:4e:5e:
09:9d:a7:d9:88:a9:40:a1:f7:c4:85:79:5e:88:a5:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:5F:C1:4E:59:24:77:F7:25:78:AC:10:BC:02:FC:1A:41:5E:E2
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A857108FE9011F088AEB2895E6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.30.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:d4:80:39:e0:57:74:57:5c:e3:ee:1a:87:14:a9:f0:18:e1:
d3:f5:e7:37:ea:e1:fa:9a:a6:b0:d6:d9:33:cb:38:f1:4a:b2:
79:2c:a9:8e:ce:48:cf:b3:12:ae:62:06:48:3c:e5:e5:2d:ef:
fa:80:7c:19:5f:de:f5:2b:9e:86:52:aa:8a:67:eb:9f:c9:13:
20:9f:76:e0:e3:d1:16:25:7b:2e:92:49:60:86:6f:be:45:88:
8a:ea:2c:b1:cf:e1:00:66:f0:f2:19:68:8b:84:ac:12:65:85:
5f:35:0c:e8:08:e4:bc:6d:16:e7:a5:6f:90:9a:f2:ae:4c:ce:
dc:f0:d7:c2:61:21:63:06:86:cf:a3:c4:56:fd:1a:4e:eb:a9:
05:d9:da:7f:a6:86:0d:ff:d3:68:ea:70:ea:e5:e9:16:62:5d:
54:9f:94:cb:2e:fb:e6:24:eb:32:fa:17:a0:2f:4b:7e:83:54:
6f:2c:d3:fa:16:74:03:a2:03:45:b3:c3:7d:a9:20:a2:07:71:
76:1b:8f:39:98:93:e8:b3:74:6d:9f:dd:a7:aa:eb:92:9d:9f:
84:f8:d5:d4:7f:18:80:b3:89:f8:7a:9d:80:34:f2:a8:1c:b8:
03:e9:72:7c:f3:0e:6a:ed:17:a2:9d:8a:2a:8a:ba:f3:15:c9:
54:3b:af:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:07:11 2026 by rpki-client