
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa
File: A2EC7F44DC0111F0AD21AAB7586F56BC.roa (raw, json)
Hash identifier: gTLDQEjjcO7pBXHuB64/UUJi03dYbnbfZkY9D/gVsIE=
Subject key identifier: AF:AA:3A:7A:50:2A:A1:9A:B6:C3:6D:2E:0B:C8:D7:FA:D8:97:E2:9A
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CE7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa
Signing time: Sun 01 Mar 2026 22:50:33 +0000
ROA not before: Thu 18 Dec 2025 11:06:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154426
IP address blocks: 144.79.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11495 (0x2ce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Dec 18 11:06:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2b8-f7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:e0:6e:ae:30:5a:f1:a8:30:91:87:ba:91:
b9:da:6a:55:a5:ea:2f:86:41:a8:01:27:6d:e7:ff:
d4:7d:6d:5d:3d:7b:36:74:1f:96:f7:1e:b1:97:65:
9c:e2:29:9d:25:4e:58:ba:7b:08:47:74:32:4d:da:
64:8a:3a:f4:a0:75:fa:65:c2:4e:8e:ab:16:8b:53:
30:c5:6a:4e:93:b1:e4:3c:0e:de:05:44:86:57:24:
c9:07:41:8b:59:64:8e:de:de:47:2f:a3:ce:37:90:
27:d6:f9:b6:47:55:a0:76:78:76:33:54:f5:d6:c8:
3f:d5:48:69:93:3b:81:8d:dd:f0:38:d5:67:aa:ba:
ff:53:65:3c:95:9f:38:ed:83:4f:46:35:67:10:15:
db:08:ad:aa:00:5f:19:93:1c:ab:20:3c:9a:e3:fb:
f4:b7:3b:20:6e:ac:f3:fc:b6:bf:7e:f7:eb:27:79:
9b:58:55:da:cf:b9:0d:25:e3:80:00:73:7c:b8:89:
de:49:01:7c:5c:e1:b2:46:b1:a4:69:c4:bc:43:e8:
8c:52:68:20:92:fb:a5:54:6a:2e:bc:94:0d:ad:97:
79:75:d8:43:50:c6:6e:d7:15:3b:d6:8e:b1:20:7e:
54:c1:ae:94:db:7f:28:72:eb:a4:dd:af:ee:e3:07:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AA:3A:7A:50:2A:A1:9A:B6:C3:6D:2E:0B:C8:D7:FA:D8:97:E2:9A
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.114.0/24
Signature Algorithm: sha256WithRSAEncryption
60:16:61:21:51:f9:3c:7f:5c:e6:69:d3:1b:89:be:e4:e9:b9:
67:0b:ea:a1:ba:9c:6f:b1:fb:8f:d2:7f:34:32:34:57:2e:36:
0a:43:b8:56:5f:91:4f:e9:87:1e:53:41:cf:45:db:ec:de:37:
10:13:1b:ca:d0:f5:6a:17:ef:61:14:83:62:7a:16:35:d0:d1:
a0:71:dd:87:8f:f5:6b:a3:4e:0b:4c:f0:e2:18:85:2b:91:ae:
e9:47:f5:0a:d5:ce:05:61:2f:2b:d4:24:72:28:ee:5e:2f:df:
c4:fa:da:cf:56:fb:83:dc:f8:4c:db:f8:8e:56:98:65:e6:a2:
39:70:36:73:d1:b4:33:6c:b6:20:48:27:dc:44:b9:dc:6e:80:
6b:94:a4:62:81:40:f6:03:35:fa:13:0b:57:81:f3:2d:56:0f:
05:ba:e4:b9:3e:4a:f3:96:88:77:9a:7d:de:14:19:c7:30:6e:
98:b5:f0:76:ca:9c:d0:b1:51:87:ce:dd:52:77:1b:6b:a7:8f:
ce:89:4c:3e:a5:f8:2b:7f:f2:e8:65:fa:b2:8e:6a:ef:1d:37:
19:b3:79:e7:60:c0:1a:a8:54:8e:b4:2b:d4:a4:18:e8:45:ff:
a6:34:1a:57:aa:5f:40:37:13:a5:fc:e2:50:dd:23:67:d4:71:
0a:1d:24:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:48 2026 by rpki-client