
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
File: BE63E1C2FE1D11EE9E701774C4F9AE02.roa (raw, json)
Hash identifier: qJX8EMEGrZJSohcluLTCJojXI+xDHzhy4CCe+TZbEEY=
Subject key identifier: 84:A2:09:EC:9A:D4:5D:A5:5D:85:45:7C:9B:BF:3E:5F:FA:CE:E2:1F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2BA4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:42:48 +0000
ROA not before: Thu 08 May 2025 15:52:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134926
IP address blocks: 157.20.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11172 (0x2ba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:52:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c0e8-1d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:3a:ba:d6:ad:ee:85:18:24:64:91:2b:df:
59:31:91:7f:2d:c0:4f:45:f9:02:ae:92:d2:46:b0:
e1:10:c8:e6:87:97:b4:c3:b4:15:6f:e9:60:b9:08:
35:ac:74:f6:7b:91:f2:06:db:40:df:28:11:15:80:
01:e0:f6:c3:1c:25:48:9d:7a:6f:42:8c:32:b2:e4:
b4:df:b2:28:ed:e5:cd:d2:fd:14:9a:b6:a8:35:42:
86:81:17:50:5f:38:7a:05:6f:10:b2:a2:19:cc:c1:
07:4a:ed:ad:8b:17:59:c8:ec:8b:46:eb:b3:01:bd:
96:7b:33:9c:c1:4f:dd:4b:6e:b8:77:28:84:af:e2:
fc:bb:95:39:c5:a5:7a:8a:cf:24:b3:36:5c:59:b7:
11:f1:eb:de:0b:6a:77:6f:d1:10:1f:10:5a:ba:45:
fd:64:58:8c:10:91:86:2e:72:9b:57:b0:50:23:83:
c4:bb:94:ee:2b:dc:aa:88:1a:e4:79:50:f1:47:48:
54:56:0e:84:88:b8:fb:f7:78:92:3d:b2:dc:e7:ec:
72:b7:9b:56:93:d6:96:5d:00:20:f2:05:a7:a7:51:
a2:0e:ae:c6:fa:2a:37:b4:5a:6b:c2:52:0c:5f:3c:
74:4f:6b:90:a7:36:e1:87:ce:d3:f6:a7:05:e2:3b:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:09:EC:9A:D4:5D:A5:5D:85:45:7C:9B:BF:3E:5F:FA:CE:E2:1F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.214.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:6c:44:b9:ed:a8:c3:e7:cb:f1:24:18:2e:27:64:46:b6:38:
13:38:88:fa:83:a6:14:be:a5:2d:88:9e:e4:10:3c:e1:e6:ca:
f5:a6:46:f2:37:1c:8d:2d:0c:98:c8:37:ef:1c:41:70:b7:b6:
7a:a1:ae:29:2b:0a:33:2c:bd:13:84:4e:ca:db:2e:62:5a:c4:
6d:d6:2c:c2:df:23:24:c9:b2:ec:40:37:b7:d6:2a:a4:36:87:
7a:ac:7c:53:df:d0:d9:d5:97:3c:fe:18:88:08:45:d8:0f:f5:
6b:d3:4f:ce:5b:06:de:c7:f8:43:35:10:b3:57:a6:37:e5:70:
c1:4c:eb:88:80:3f:65:63:94:3a:62:1e:ed:a8:2c:67:1c:6e:
31:01:39:ee:29:eb:20:cf:3b:ab:14:bc:0a:ac:98:57:aa:36:
24:91:27:34:d6:f7:e3:8a:ef:18:aa:1e:da:6f:33:ad:f5:ae:
d9:90:fa:72:30:a6:0f:70:f1:e3:19:89:a9:72:64:3e:bd:fe:
00:65:28:15:ed:30:c1:7d:c3:df:d0:ed:4a:4a:f7:57:08:c4:
14:d5:c0:7e:5b:d7:ec:d7:60:8e:9a:de:b3:2d:47:ff:22:2c:
c6:b4:bc:77:31:8a:7e:96:bc:df:4f:0f:f3:3f:ec:b8:0a:c6:
8f:0e:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:52 2026 by rpki-client