
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7099A354108211F1B8BE851C313D8C67.roa
File: 7099A354108211F1B8BE851C313D8C67.roa (raw, json)
Hash identifier: hKh92vIyKXevAYFStDC8psA0ZlOkqsaoG4drmztVgRY=
Subject key identifier: 63:0E:E7:F4:16:A7:B7:1C:DF:0B:3F:34:52:2C:3F:76:3E:A9:D7:B1
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 05D9
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7099A354108211F1B8BE851C313D8C67.roa
Signing time: Sun 01 Mar 2026 18:52:13 +0000
ROA not before: Mon 23 Feb 2026 06:39:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154512
IP address blocks: 151.158.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 06:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1497 (0x5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: Feb 23 06:39:45 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48adc-5245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:73:c5:ea:20:8f:a3:78:9c:fe:1e:68:8a:
03:55:7e:a0:3d:89:50:d1:13:26:a9:b4:c6:00:3f:
b9:d8:fa:5c:a4:6b:61:4a:4d:4a:f9:04:fd:30:1a:
8f:6a:91:6c:4f:ac:72:d6:b1:22:ac:9f:11:77:28:
38:5f:a1:59:0f:34:de:56:94:cf:80:d0:09:2b:4d:
d5:a5:a7:07:38:b5:97:0a:43:4c:57:12:e2:94:b9:
f3:3c:b6:ae:21:e2:19:92:e5:fd:6b:41:36:db:3d:
4c:43:1a:55:ee:0f:f0:63:8d:7e:61:8b:ba:03:c2:
03:fb:07:0e:17:41:26:60:b9:bb:b7:46:48:88:fb:
02:b2:8b:c4:a8:39:3d:ad:ff:95:d0:ab:64:a4:f6:
fa:75:e6:d7:70:8b:f8:d6:15:4e:0e:2e:0b:cc:34:
dc:10:2d:0a:f7:9e:b1:2f:2f:e9:61:c1:db:1d:44:
e0:9e:cc:d7:0c:18:15:18:7c:30:46:70:b9:0f:ee:
3c:7e:ac:bd:8d:70:b5:e8:19:be:d7:d4:b4:5b:c2:
b2:f7:df:ae:86:1c:35:0d:78:83:0e:d9:02:4e:7c:
f8:99:a2:d2:98:da:8a:13:9c:86:9f:c3:35:c8:98:
32:d8:54:71:de:ef:76:93:2a:0e:03:74:06:52:7c:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0E:E7:F4:16:A7:B7:1C:DF:0B:3F:34:52:2C:3F:76:3E:A9:D7:B1
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7099A354108211F1B8BE851C313D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.184.0/23
Signature Algorithm: sha256WithRSAEncryption
db:e1:a7:cb:2a:b4:da:7f:f8:0f:4f:ba:0d:fe:22:e2:87:87:
67:f1:d0:78:c7:11:04:53:a0:fb:5d:81:6a:57:69:5c:27:1e:
88:d0:ef:10:97:24:64:37:e0:05:3e:68:70:58:e1:a7:1f:eb:
7d:bb:ba:d8:87:d2:6d:e4:68:d2:84:ba:f3:aa:13:31:3c:05:
14:f5:ad:10:a1:25:99:4f:03:02:0f:78:44:85:82:c4:d4:ab:
68:54:63:f3:56:8d:42:52:57:37:6c:e4:37:f2:83:71:3d:fe:
15:56:48:32:c3:ff:b3:dd:a3:61:ff:31:8c:01:c6:fe:14:7c:
aa:97:e0:16:26:58:aa:19:1d:4c:cb:0a:aa:d8:38:e0:ae:ef:
dc:05:a1:93:8e:b0:4a:a8:7b:12:6b:9c:c1:b0:e2:69:f6:3b:
cc:54:2b:1a:77:fd:b4:7a:ad:c9:a6:ea:42:b6:5e:f2:71:35:
33:5c:19:f4:35:b1:75:3d:86:28:e7:c5:00:cf:a4:f3:72:7e:
87:76:2d:80:19:a4:0a:db:82:3e:27:c7:65:a0:38:83:c0:ef:
aa:04:81:4b:60:ca:a3:3b:08:ec:59:f8:01:c2:1f:3a:37:3a:
9e:71:97:a9:28:7c:0f:45:1e:af:94:f1:d1:a2:25:8c:ee:db:
9c:9a:29:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:03:24 2026 by rpki-client