
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa
File: DB8A251A059411F18B30AAF03F3D8C67.roa (raw, json)
Hash identifier: SBSfsDpKl/lvqVEjdgGHbdzCI5Fl+6Fw3TjACuxE6n4=
Subject key identifier: 22:65:A4:67:78:5F:C3:31:62:49:DF:AF:5E:0E:5F:BC:FF:23:6D:4B
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 05D0
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa
Signing time: Sun 01 Mar 2026 18:52:05 +0000
ROA not before: Mon 09 Feb 2026 08:53:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150589
IP address blocks: 151.158.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: Feb 9 08:53:52 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48ad4-2e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:24:cc:ec:16:e0:b1:03:5b:9a:12:9e:fe:66:
00:b1:8d:58:e6:35:63:96:69:a6:c5:73:6b:e8:81:
2b:f2:ce:ba:0a:45:6a:52:be:c0:4d:ee:26:52:c5:
e3:28:ca:50:ac:11:8e:de:a4:ac:73:ed:59:4e:ef:
bc:a0:4a:10:ee:a1:68:28:4f:3a:44:ca:60:d7:01:
cf:9e:e1:80:1c:79:98:67:67:ee:c5:1d:00:b3:93:
d8:ca:f6:19:97:c5:24:14:76:67:72:c5:ff:85:a4:
fa:b9:81:ae:aa:68:bb:51:df:b7:c9:14:e4:50:57:
77:1f:3a:e2:f7:8b:39:dd:7d:9e:f8:a9:07:86:f4:
c6:4c:53:11:13:88:22:ff:a8:d2:e7:e5:73:bb:14:
b1:64:ad:e0:a0:47:35:ee:22:35:33:5e:a5:a9:a4:
67:9c:1a:80:82:8e:23:c5:a5:9f:fc:b3:7b:12:f0:
8f:c7:ae:56:53:ab:71:e2:b6:29:27:47:c9:29:06:
eb:77:2d:54:36:ee:78:d1:a9:5c:16:6f:30:c1:68:
e8:6d:99:f0:6c:4c:73:cc:0c:01:40:a2:0a:09:da:
16:0c:ae:96:ea:22:b0:a0:fd:1a:4c:5f:38:df:a7:
3a:df:13:62:a5:6a:fc:a3:0e:04:b9:aa:c7:83:cb:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:A4:67:78:5F:C3:31:62:49:DF:AF:5E:0E:5F:BC:FF:23:6D:4B
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.32.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:20:c1:cc:fc:a1:0b:a3:90:06:2e:d2:62:48:b9:14:24:39:
c5:2a:d1:e2:fa:9e:9f:eb:2f:11:41:ae:73:d0:73:d8:34:7e:
6b:19:9d:00:28:c5:3c:e3:da:17:43:b2:ff:89:76:40:e4:9f:
d6:b6:8e:8b:08:3c:c2:8d:1e:04:b3:45:20:ef:1a:f9:34:84:
48:76:37:44:33:44:ef:fe:a0:2c:d7:91:c7:f7:01:5a:eb:2e:
aa:9a:b9:b5:b6:07:e1:97:d6:4b:b9:b0:94:7a:70:b9:99:88:
c4:b3:54:e0:0e:75:cc:19:5f:ba:51:7f:71:2e:75:55:c5:2d:
ba:7e:92:d7:98:4a:ee:95:b3:dd:f0:94:ba:f3:f5:3b:5e:5c:
ad:83:45:1c:3c:d2:92:e1:5c:c1:14:7b:31:d8:2b:dc:1a:b5:
5c:4c:62:80:55:6f:47:b2:e3:6b:0f:39:2a:c3:33:0d:d9:db:
76:35:1c:37:9f:e8:47:ad:2d:cc:ff:58:f8:e1:4f:2b:ea:ba:
d1:b7:81:7f:6b:e2:15:02:16:2c:a1:0c:1b:4a:b9:c8:04:5e:
6a:d2:2a:6b:7f:13:dd:be:b7:db:da:d5:42:92:ff:22:37:72:
77:57:bf:d6:6e:ad:92:5a:85:24:4d:69:11:7a:bb:7c:a7:37:
a5:14:58:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:20:05 2026 by rpki-client