
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FE825FFAC74311EF85A7412EC4F9AE02.roa
File: FE825FFAC74311EF85A7412EC4F9AE02.roa (raw, json)
Hash identifier: D8NY4mJC2Bt4IAobSBmIIy+CtjQJLD99E9IteSNxdUU=
Subject key identifier: 03:06:B8:3B:7A:B2:72:6D:32:93:10:03:D8:2A:31:07:B4:E6:E7:9E
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C0A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FE825FFAC74311EF85A7412EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:45:17 +0000
ROA not before: Thu 08 May 2025 15:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152501
IP address blocks: 157.66.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11274 (0x2c0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c17c-e5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:89:0c:01:10:0a:ff:50:03:7d:4d:ee:2b:
c7:0d:8b:1c:3b:20:57:17:ca:76:79:f3:b9:ad:55:
03:17:be:d9:2c:2c:8b:97:e6:a3:7f:4e:11:70:f9:
a9:40:cb:0b:af:a0:24:bd:56:74:27:4d:22:7e:ab:
f3:80:15:72:e6:42:35:92:0b:a6:19:5e:38:ec:73:
f3:b0:9e:98:c0:85:ad:0d:ac:56:09:5a:14:82:29:
37:8e:cb:a9:17:e7:55:51:f5:d2:10:0d:b7:bd:9a:
d7:fe:ec:9d:a8:13:88:61:c9:a0:44:0a:f7:c8:a0:
7a:31:4f:c0:4e:43:18:1e:63:17:e0:ee:73:5e:86:
38:56:4a:46:48:de:56:f4:1f:8e:e7:2a:66:cd:9f:
e9:74:29:ce:6d:73:25:e8:38:88:dd:07:98:79:a8:
14:1e:d0:c6:e3:2a:a0:2c:31:47:a0:54:9e:eb:73:
58:8d:8b:df:a7:9e:e5:72:69:bb:26:31:c9:21:c8:
17:47:54:f6:b2:6e:8a:2a:09:e3:b6:a1:01:05:bc:
23:8a:09:f6:8d:1b:bc:9b:f7:43:1f:a5:9f:a6:56:
fc:c2:de:df:18:a0:d8:67:fa:19:de:1a:e1:7b:d6:
e0:12:9d:a8:cf:52:48:da:05:75:fc:2e:c3:36:50:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:06:B8:3B:7A:B2:72:6D:32:93:10:03:D8:2A:31:07:B4:E6:E7:9E
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FE825FFAC74311EF85A7412EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f9:71:ee:5a:42:2f:8e:22:f6:7d:0a:6a:46:25:1a:25:9c:
94:cb:5b:b7:e2:67:5d:d2:42:a4:8e:74:03:b7:39:ec:c0:cc:
f1:1c:12:da:ae:51:a5:d9:eb:71:e5:48:db:ac:c6:cb:1f:d9:
d5:9c:74:bd:64:02:a6:d4:60:9a:b9:c2:a6:78:40:05:3a:00:
f6:85:f4:15:f7:a7:81:f9:ec:23:3d:98:c3:89:35:6a:85:33:
0d:7d:bb:dc:1e:15:ff:7b:83:9d:85:1f:e9:be:2e:58:12:e4:
63:36:05:4f:e8:a8:71:43:f1:8e:7f:1d:fc:cc:9e:fc:35:01:
d4:85:70:e5:85:42:7f:7a:31:d3:b9:02:63:6a:bf:b7:73:35:
1a:96:a7:1b:7a:ab:37:c3:df:23:90:0c:fa:35:23:dc:47:24:
ce:1c:ae:7c:7c:84:94:c0:d6:d7:44:b1:37:b5:db:e1:53:d9:
a2:50:46:c0:ab:9c:2c:28:31:ca:3a:5f:22:0d:5c:74:52:a0:
0c:be:46:06:b5:06:6a:98:93:8c:52:63:07:ab:f4:35:83:a2:
d6:42:f7:3d:1a:18:de:df:0d:65:62:05:7b:fb:aa:4a:5b:1a:
a6:26:e6:2c:cb:16:7c:6f:31:e8:55:ba:68:49:eb:72:da:f2:
68:d3:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:37 2026 by rpki-client