
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/80DF22B2013311EFB38DC94FC4F9AE02.roa
File: 80DF22B2013311EFB38DC94FC4F9AE02.roa (raw, json)
Hash identifier: 9zGb3GL63OgtNiSUzVlFesl8GG1okgbbHcyzMHFowj4=
Subject key identifier: 63:52:D5:13:4C:FF:99:A1:65:C6:ED:49:0A:A2:5F:9B:18:BF:89:3E
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C01
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/80DF22B2013311EFB38DC94FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:45:02 +0000
ROA not before: Thu 08 May 2025 15:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152488
IP address blocks: 157.66.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11265 (0x2c01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c16d-b622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:c7:0f:79:dd:65:b8:82:25:98:d1:7e:23:
c6:fd:e4:3f:13:5a:2a:ea:ed:6a:2a:48:11:3d:73:
7d:76:c0:3e:41:d0:e6:33:ac:3b:5a:a8:2b:4b:4e:
a6:c0:27:02:d2:e5:b1:74:35:b6:1b:a5:d8:cd:38:
fd:ee:da:c4:98:ab:2a:30:50:87:69:eb:a0:9e:31:
85:c7:27:98:24:18:8d:1c:19:56:43:3a:4c:9e:9f:
84:2c:6f:50:bb:ec:8e:59:76:da:e1:85:7c:c7:cb:
1e:32:0d:aa:9a:9a:0c:d5:6e:f3:58:f0:07:1e:b0:
f1:44:b0:11:71:f6:86:4f:a4:79:99:da:b0:62:23:
08:1a:76:3e:52:24:74:c7:80:08:23:5a:af:48:88:
a2:a2:1e:82:87:21:2e:2b:3e:1b:cc:de:ef:c5:23:
a6:5d:a9:74:07:ef:6d:6b:19:a8:d9:b5:0f:5f:03:
3c:2b:df:db:47:04:c6:25:c1:3d:ad:93:8d:79:71:
04:89:1c:69:23:f5:19:68:ee:57:70:99:96:dc:b5:
60:51:8a:c5:2e:0b:9b:5c:af:ac:e8:9d:23:18:21:
32:20:de:07:15:94:d3:be:db:bd:82:3d:3a:05:d9:
ab:9c:cb:ba:da:45:3f:92:03:5f:4d:55:4a:47:de:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:D5:13:4C:FF:99:A1:65:C6:ED:49:0A:A2:5F:9B:18:BF:89:3E
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/80DF22B2013311EFB38DC94FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.144.0/23
Signature Algorithm: sha256WithRSAEncryption
04:94:f2:ba:f7:bb:26:83:e2:71:c6:bf:e9:0c:9c:bd:47:47:
b8:40:30:d7:2c:b4:ef:f3:79:63:c4:5e:e1:58:6e:56:64:6e:
4d:04:37:fc:f5:02:a9:28:ec:7c:bd:95:c7:32:6d:da:66:82:
77:f9:38:53:fd:ba:34:8d:9b:2a:a0:9d:10:8e:7f:18:b4:b9:
83:3f:cc:07:da:27:43:48:4c:eb:a2:aa:0b:9d:f1:5a:33:11:
19:b3:7f:4a:ba:91:fe:ba:34:72:df:8a:54:e9:02:93:63:6e:
43:48:b3:e4:21:40:65:dd:05:37:2d:a9:4a:24:26:73:d0:d3:
1d:4b:db:df:01:8c:cb:e3:7e:f4:5d:cb:1f:95:d3:99:97:fb:
64:a5:41:f7:db:13:be:56:cd:f2:b6:5e:ba:37:27:5a:c3:13:
06:b7:d8:ba:95:af:a3:f0:fb:9c:28:7e:11:81:44:72:98:65:
bd:90:6d:b8:3d:61:63:a1:48:96:bc:34:28:86:b4:03:4c:81:
28:5b:37:c0:e4:6d:da:fd:a7:e5:85:c0:82:32:b9:55:33:2b:
46:7b:9d:11:21:fd:f5:df:c3:c4:0e:64:09:8f:c1:fd:74:2a:
28:68:e6:de:fb:ee:c6:dc:d7:e4:e9:a0:a7:b8:61:d3:4a:e6:
24:01:f9:d2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1MzU0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzE2ZC1iNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtsvHD3ndZbiCJZjRfiPG/eQ/E1oq6u1qKkgRPXN9dsA+QdDmM6w7WqgrS06m
wCcC0uWxdDW2G6XYzTj97trEmKsqMFCHaeugnjGFxyeYJBiNHBlWQzpMnp+ELG9Q
u+yOWXba4YV8x8seMg2qmpoM1W7zWPAHHrDxRLARcfaGT6R5mdqwYiMIGnY+UiR0
x4AII1qvSIiioh6ChyEuKz4bzN7vxSOmXal0B+9taxmo2bUPXwM8K9/bRwTGJcE9
rZONeXEEiRxpI/UZaO5XcJmW3LVgUYrFLgubXK+s6J0jGCEyIN4HFZTTvtu9gj06
BdmrnMu62kU/kgNfTVVKR94VJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGNS1RNM
/5mhZcbtSQqiX5sYv4k+MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODBERjIyQjIw
MTMzMTFFRkIzOERDOTRGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnUKQMA0GCSqGSIb3DQEBCwUAA4IBAQAElPK697smg+Jxxr/pDJy9
R0e4QDDXLLTv83ljxF7hWG5WZG5NBDf89QKpKOx8vZXHMm3aZoJ3+ThT/bo0jZsq
oJ0Qjn8YtLmDP8wH2idDSEzroqoLnfFaMxEZs39KupH+ujRy34pU6QKTY25DSLPk
IUBl3QU3LalKJCZz0NMdS9vfAYzL4370XcsfldOZl/tkpUH32xO+Vs3ytl66Nyda
wxMGt9i6la+j8PucKH4RgURymGW9kG24PWFjoUiWvDQohrQDTIEoWzfA5G3a/afl
hcCCMrlVMytGe50RIf3138PEDmQJj8H9dCooaObe++7G3Nfk6aCnuGHTSuYkAfnS
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:30 2026 by rpki-client