
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
File: EB4DFDD619B511EF90608063C4F9AE02.roa (raw, json)
Hash identifier: ulyiwm0/SI8ClFSgMcpWTwRgjOSuX7YqBEo2oIbnKNw=
Subject key identifier: 9A:A1:D9:E1:29:65:B5:DB:B6:75:9A:45:40:9B:6B:FF:91:23:32:00
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C12
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:45:32 +0000
ROA not before: Thu 08 May 2025 15:54:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152510
IP address blocks: 157.66.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11282 (0x2c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c18c-1629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:39:eb:5c:96:9f:33:c5:83:96:b6:57:89:e8:
f7:f3:c7:4d:dc:e8:43:e2:25:d3:d2:2b:34:dc:1a:
78:70:88:9d:32:f0:69:fe:7b:23:08:4e:e6:38:98:
af:2f:67:6d:03:1b:0a:eb:2a:96:14:4f:e2:51:3c:
54:ff:49:7f:02:71:c1:96:09:54:99:9e:4f:55:ef:
75:2b:2f:8e:ad:0f:01:b2:31:0b:02:ad:b9:b3:23:
13:19:4d:e2:c0:03:7e:b5:c0:dd:03:d1:40:1e:79:
7f:1c:11:55:2e:03:ff:54:9f:20:35:25:80:2c:1c:
36:b9:2c:5c:b2:17:6c:3c:de:f4:98:ff:66:40:94:
02:bf:2f:ec:0e:53:96:cc:06:c5:ce:c0:1b:b6:2f:
95:26:89:10:04:c6:6c:40:15:0d:64:fe:e7:ea:92:
ad:84:44:b2:36:a7:16:de:e8:c7:e3:d2:8d:2b:c7:
91:b2:51:0b:e0:49:c6:b2:af:a2:cf:b9:ba:52:01:
75:b5:fb:70:2f:2b:f4:b0:03:d3:94:3f:96:43:27:
c5:c3:87:4e:b7:44:6f:8e:9d:c9:13:17:83:4a:a9:
8e:0a:70:21:95:dc:f1:e7:74:b7:be:26:86:f3:27:
c4:f6:87:50:f5:b9:f4:21:03:16:4c:4c:49:a2:5c:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A1:D9:E1:29:65:B5:DB:B6:75:9A:45:40:9B:6B:FF:91:23:32:00
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.191.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:1f:a6:21:2a:84:5a:bc:61:4e:83:62:29:73:90:f2:de:87:
8d:6b:da:9f:77:4e:d3:87:b7:e9:47:99:bd:4f:c5:11:2f:e5:
89:2a:fa:d8:9c:2a:d4:6f:8c:70:0f:f4:4b:24:fb:02:01:7e:
be:98:c3:cf:bd:95:13:45:26:38:ca:4c:13:19:25:38:8c:5b:
61:74:b2:b0:de:e7:35:6c:b9:b2:7a:70:ba:f4:bd:bf:0c:0c:
95:d6:0f:86:e3:55:15:e0:fa:1d:ef:ce:04:d0:c4:0b:8c:32:
0a:18:16:fa:08:77:f9:b7:c7:96:c4:a1:35:ab:df:ca:ae:62:
f1:72:43:bf:6c:07:0d:e1:f3:93:79:1e:b8:e1:fc:b2:2d:2a:
28:70:fc:32:e8:c9:20:cc:2a:f9:74:82:3f:d3:7b:07:ac:b0:
5e:04:65:17:e6:2b:97:d3:e6:99:0f:0c:21:42:e5:51:11:a9:
24:97:da:8c:aa:ec:6e:c7:3e:fd:29:8a:b6:5e:3b:e9:8d:51:
1c:4e:78:1c:70:42:45:0b:89:15:34:72:1b:48:e7:e3:63:1e:
0f:4c:03:65:8a:d7:33:80:33:81:e0:d3:80:a5:12:30:96:7a:
90:1c:30:6f:2b:78:61:40:c2:1e:4a:31:24:41:b8:f6:47:77:
31:6f:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:55 2026 by rpki-client