
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C325B458EF9611F093C4B61F666F56BC.roa
File: C325B458EF9611F093C4B61F666F56BC.roa (raw, json)
Hash identifier: mmAvhPw8AQMU1z+3DcghSdO1WLm7V2ka71Ryylb/etY=
Subject key identifier: 20:85:56:E5:61:A8:D5:B8:AE:05:58:EA:0A:86:E6:D0:2C:8B:E1:A5
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CF7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C325B458EF9611F093C4B61F666F56BC.roa
Signing time: Sun 01 Mar 2026 22:50:55 +0000
ROA not before: Mon 12 Jan 2026 09:12:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154466
IP address blocks: 144.79.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11511 (0x2cf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 12 09:12:05 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2cf-451a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:d7:7f:22:55:ca:57:ed:44:24:74:b2:bb:
9a:bf:57:ce:80:61:45:5e:d0:92:b8:3a:87:4e:e3:
ff:51:cb:bf:d7:51:95:05:e9:6c:63:05:fc:95:b3:
49:96:54:09:c5:84:e4:42:a3:c0:08:6a:c4:9a:f3:
82:6f:36:83:38:0f:c9:37:9d:70:89:1a:b4:b3:5a:
e8:27:3c:83:11:18:ad:cd:43:f0:7c:80:e4:ec:ef:
e1:11:4a:34:cf:71:e7:dd:11:4a:a6:71:93:6a:48:
29:3f:6f:5a:32:d2:a3:cd:ad:28:91:6d:69:4c:b6:
84:15:df:4d:e4:a1:63:8c:c9:ee:a1:aa:d9:92:7e:
d3:e6:15:b4:13:ac:48:2a:86:bb:83:b1:be:ae:4f:
ba:57:80:5b:ee:61:77:2a:42:90:8a:08:72:ea:dc:
40:0d:a8:b1:31:72:b2:34:c1:d0:f1:d2:31:1e:89:
d7:ef:5e:7c:60:45:c7:90:f4:f9:fd:51:28:be:4b:
e3:0e:05:21:bc:60:85:ec:72:d1:07:7c:ac:90:bd:
d8:65:65:e5:2d:91:0e:a8:bd:94:2f:c4:5e:4e:11:
d1:58:6c:d7:38:3a:a8:2b:04:c5:19:81:13:fa:c9:
e0:9a:36:7e:e5:5d:79:d6:ff:5a:af:06:6f:02:d7:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:85:56:E5:61:A8:D5:B8:AE:05:58:EA:0A:86:E6:D0:2C:8B:E1:A5
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C325B458EF9611F093C4B61F666F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.198.0/23
Signature Algorithm: sha256WithRSAEncryption
99:b6:71:07:3a:12:a0:47:88:a0:3c:09:1b:06:e6:2a:47:1a:
14:90:1e:bc:d3:8b:43:bd:a2:a0:ec:bd:ca:11:63:58:99:70:
45:86:0a:99:4a:e8:b8:18:44:e1:d1:c7:a0:37:a3:b2:c3:89:
0e:9a:49:28:f2:37:45:0c:71:58:4f:88:0e:10:a1:61:aa:b2:
1f:0f:2f:ab:f8:a9:94:98:55:1e:9b:9b:96:4a:22:8e:a1:d1:
6d:58:34:b7:fa:2c:b1:cf:eb:8d:1e:9d:d3:d2:36:19:e6:7a:
61:a4:8d:4a:ad:74:20:dc:58:5e:25:15:26:96:ff:1b:e5:ac:
18:45:22:a2:ce:48:1f:6e:1a:36:e4:6e:ef:c1:6b:ba:40:2e:
49:1c:5b:04:13:5d:25:b7:52:44:6d:7c:b0:1e:7d:e7:0e:df:
4f:97:44:94:ee:03:a6:cf:69:19:1b:4a:e1:5f:82:cb:b2:e6:
e3:de:5d:b0:c1:dd:02:fd:77:35:4d:53:14:8b:f0:93:d5:81:
5e:ed:9d:2b:70:ba:b6:8a:9d:ad:48:f3:06:6b:b0:9f:32:74:
3f:ae:70:a6:a2:c7:d4:65:2a:5f:05:89:33:f6:76:42:b0:68:
81:90:de:95:d8:9c:fc:c7:fd:b6:66:27:25:6c:2b:95:fe:38:
be:01:95:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:00:28 2026 by rpki-client