
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/BA97D3D6899F11F18FB0DA873C11F970.roa
File: BA97D3D6899F11F18FB0DA873C11F970.roa (raw, json)
Hash identifier: utRoLEkLuZ8/VYFnLqAi74EZAeKUy+Uy8JeUOd3Q7Bw=
Subject key identifier: 69:46:E9:4D:A6:25:15:12:16:48:90:CD:01:1E:D4:D7:19:33:4D:81
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 06A4
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/BA97D3D6899F11F18FB0DA873C11F970.roa
Signing time: Mon 27 Jul 2026 09:44:15 +0000
ROA not before: Mon 27 Jul 2026 09:44:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137210
IP address blocks: 151.158.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1700 (0x6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: Jul 27 09:44:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a67286f-d31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:31:00:e7:1b:86:6a:84:a6:e7:cf:3e:75:
71:ac:c5:79:76:86:ba:5a:98:d7:dd:b9:4a:68:d6:
25:95:cd:c7:3b:9d:e3:f7:70:19:df:bd:d0:70:e0:
33:58:f7:20:44:76:a7:52:d8:ca:4f:4d:fd:8e:24:
36:fa:2e:1a:cb:2f:f9:b7:63:cf:86:64:eb:d5:1b:
d3:91:cd:81:cb:45:d1:97:0c:d7:c4:f3:09:15:47:
15:07:18:97:d6:75:ff:b4:1c:3b:3e:f5:ae:aa:bc:
a2:50:9a:f7:48:39:ce:69:68:25:07:9f:83:d7:18:
a1:7b:66:23:10:7a:c8:66:96:63:0f:ea:ac:a0:ba:
da:18:5c:b9:e3:ef:d6:be:50:11:76:20:36:24:e0:
4f:6b:fb:c3:1e:9e:99:9c:19:68:7a:dd:3f:16:91:
ce:5c:f4:4b:15:28:37:2c:61:71:70:53:e3:64:39:
7d:12:c4:f5:be:8f:a0:68:93:e4:ff:6f:e5:73:d3:
07:8c:83:a1:5c:f0:8c:7c:c0:66:22:c1:f0:e2:80:
96:2b:0e:c5:f9:81:e0:fc:ca:20:9e:d1:1a:20:39:
7d:82:8e:e8:90:48:ff:89:03:b3:da:75:00:f3:ea:
6e:51:a9:ba:36:87:a9:7b:d4:06:01:5f:45:45:dd:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:46:E9:4D:A6:25:15:12:16:48:90:CD:01:1E:D4:D7:19:33:4D:81
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/BA97D3D6899F11F18FB0DA873C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.185.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2b:95:1c:40:cc:71:0f:bf:dd:26:29:c3:bb:c4:21:ab:9b:
db:8a:bf:91:b7:27:31:9e:fb:d7:f2:a5:e3:c3:53:18:11:3c:
4a:a4:e3:8c:47:f3:ca:35:92:d7:e8:8f:57:24:5b:15:b7:99:
67:51:11:26:21:a9:88:cb:d6:47:90:1d:64:e4:08:52:33:ff:
a2:2a:a0:f2:bb:4b:21:a3:f8:a1:71:c7:43:a2:4c:b0:b4:d9:
01:f0:e6:a5:20:40:7e:96:b0:55:23:4c:ee:b7:2e:f2:a8:e3:
c3:5d:66:8d:ab:fc:ba:fc:d9:66:bb:34:6f:2b:23:d1:87:90:
d0:83:df:60:be:2c:ae:14:a1:17:56:b6:50:dd:a5:8a:11:38:
6d:dd:61:32:0c:39:56:39:8d:28:07:8c:29:2a:77:a0:36:88:
39:f2:39:79:58:92:22:d7:37:0c:58:fd:3f:2a:c0:8c:10:9e:
e7:d5:3a:fc:e9:34:ed:1e:03:68:ee:64:8e:0c:7d:6d:19:5a:
b6:3c:81:60:43:c1:2a:6e:d7:e9:a6:46:fe:cc:fa:3a:e4:08:
14:52:e0:ad:88:68:48:55:07:3f:fd:8e:15:ca:8d:f3:26:b3:
e1:db:f4:c0:15:ba:58:38:27:9a:48:40:58:e3:2a:62:9a:0d:
4f:be:9a:67
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjYwNzI3MDk0NDE1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY3Mjg2Zi1kMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHQxAOcbhmqEpufPPnVxrMV5doa6WpjX3blKaNYllc3HO53j93AZ373QcOAz
WPcgRHanUtjKT039jiQ2+i4ayy/5t2PPhmTr1RvTkc2By0XRlwzXxPMJFUcVBxiX
1nX/tBw7PvWuqryiUJr3SDnOaWglB5+D1xihe2YjEHrIZpZjD+qsoLraGFy54+/W
vlARdiA2JOBPa/vDHp6ZnBloet0/FpHOXPRLFSg3LGFxcFPjZDl9EsT1vo+gaJPk
/2/lc9MHjIOhXPCMfMBmIsHw4oCWKw7F+YHg/MogntEaIDl9go7okEj/iQOz2nUA
8+puUam6Noepe9QGAV9FRd29zwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGlG6U2m
JRUSFkiQzQEe1NcZM02BMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvQkE5N0QzRDY4
OTlGMTFGMThGQjBEQTg3M0MxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAl565MA0GCSqGSIb3DQEBCwUAA4IBAQBJK5UcQMxxD7/dJinDu8Qh
q5vbir+RtycxnvvX8qXjw1MYETxKpOOMR/PKNZLX6I9XJFsVt5lnUREmIamIy9ZH
kB1k5AhSM/+iKqDyu0sho/ihccdDokywtNkB8OalIEB+lrBVI0zuty7yqOPDXWaN
q/y6/NlmuzRvKyPRh5DQg99gviyuFKEXVrZQ3aWKETht3WEyDDlWOY0oB4wpKneg
Nog58jl5WJIi1zcMWP0/KsCMEJ7n1Tr86TTtHgNo7mSODH1tGVq2PIFgQ8Eqbtfp
pkb+zPo65AgUUuCtiGhIVQc//Y4Vyo3zJrPh2/TAFbpYOCeaSEBY4ypimg1Pvppn
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:42 2026 by rpki-client