
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/981259BEE02B11EEB402C50AC4F9AE02.roa
File: 981259BEE02B11EEB402C50AC4F9AE02.roa (raw, json)
Hash identifier: Q5oCAqjN9VnRg6IeW7LHS+jYcceGm0bU4pb8uYYRoFA=
Subject key identifier: AA:B7:24:A9:5A:6B:C0:BB:D7:5E:76:83:09:55:69:95:CC:C1:FD:C1
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2BDD
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/981259BEE02B11EEB402C50AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:44:10 +0000
ROA not before: Thu 08 May 2025 15:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149591
IP address blocks: 157.20.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11229 (0x2bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c13a-cf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:bb:11:2c:d7:7b:e5:31:a4:66:76:cd:bf:
bc:fe:4a:6a:df:44:cd:ba:f0:b2:14:94:66:2f:c0:
f5:7c:da:9f:7b:86:03:e0:8b:3f:6d:91:6e:b2:6d:
8b:e1:69:ba:91:f3:e1:86:69:b2:c0:fb:3f:bf:69:
65:e7:e9:49:36:f9:f3:e7:73:ee:99:ae:6b:00:7b:
c5:24:1f:9d:e3:46:44:55:b5:48:35:31:a8:26:a9:
d2:e4:19:01:37:af:3c:44:bb:ef:29:f3:75:67:c1:
5f:f9:80:fa:64:18:e7:28:5c:6f:d7:04:ac:99:e1:
20:2a:e9:f6:ce:df:e0:0a:a0:92:c5:00:e2:50:8b:
54:78:7f:cd:92:55:1d:de:05:63:cf:88:42:db:a9:
bc:47:45:06:a7:19:ac:a3:e6:44:ca:19:cb:cd:3f:
37:d4:8f:92:29:db:dc:3f:1e:b8:7e:bd:3f:80:53:
99:5e:97:b0:f1:e3:a7:89:71:9e:03:c4:02:bb:3d:
c6:92:1d:01:d1:dc:e7:a5:02:94:0a:e8:2c:ba:ef:
42:96:48:f2:de:42:3d:ca:bb:b4:d4:d6:31:51:b9:
66:06:84:47:bb:78:41:5c:af:56:07:95:d4:02:75:
3f:23:06:bb:95:8b:b5:50:60:5b:86:98:95:b6:8c:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:24:A9:5A:6B:C0:BB:D7:5E:76:83:09:55:69:95:CC:C1:FD:C1
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/981259BEE02B11EEB402C50AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.192.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:66:61:97:63:10:c7:f2:b5:97:61:40:27:82:79:95:35:2a:
80:63:7c:de:2c:ae:0f:57:f4:f5:93:db:16:71:0e:f8:f0:b7:
66:7b:11:7e:f0:6b:69:af:a4:b8:59:0c:07:48:b0:94:14:fa:
ff:60:0a:4e:a1:59:03:45:b1:a9:14:81:0d:ea:7f:96:6f:2a:
0d:d9:70:fa:29:60:1a:f1:46:ac:c1:c6:4c:fb:48:00:f8:18:
4a:c3:a5:f5:ed:7e:7b:8c:d4:9e:8b:56:e1:ce:85:b9:3c:76:
c1:4c:6c:fc:e4:2e:a0:af:c4:b6:b8:b5:5f:d9:4f:ba:72:10:
9b:71:7b:e5:88:b5:a9:22:ad:83:80:0b:5f:0b:f2:93:48:d6:
c9:49:f5:2a:39:49:f9:ed:da:17:15:e5:a0:4b:d6:04:a1:09:
ce:18:2e:94:87:c9:56:f7:08:d8:04:9c:f7:b1:97:e8:9a:c7:
6b:35:fc:20:dd:8f:67:02:c8:e5:83:9b:a0:90:75:2c:0e:1a:
af:47:6e:9d:2f:cd:e1:28:87:06:30:ed:fd:1e:c7:e6:35:01:
ee:11:42:3f:bf:ab:57:5f:4c:62:0d:c1:f1:40:89:d8:40:bb:
ab:28:9f:bd:8f:9f:f7:49:7c:4b:c4:ec:2b:fb:cb:57:38:c3:
75:83:90:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:13 2026 by rpki-client