
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/18E343FA3A3411F195AC72659C833773.roa
File: 18E343FA3A3411F195AC72659C833773.roa (raw, json)
Hash identifier: C8YKOWTAFs4AuK1LSCOncUMIINtZQxLs2TqjAQ20XR0=
Subject key identifier: 2C:B2:EC:AF:55:CF:A6:6A:9B:0F:90:41:74:68:BE:34:4D:5B:7F:34
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0C97
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/18E343FA3A3411F195AC72659C833773.roa
Signing time: Thu 16 Jul 2026 22:22:58 +0000
ROA not before: Thu 16 Jul 2026 22:22:58 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 133478
IP address blocks: 240d:c000:f1e0::/48 maxlen: 48
240d:c000:f1e1::/48 maxlen: 48
240d:c000:f1ef::/48 maxlen: 48
240d:c000:f1ef::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3223 (0xc97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Jul 16 22:22:58 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5959c2-f4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:0f:1f:34:11:df:d4:dc:42:a3:51:74:61:
71:cc:2d:33:9f:43:7b:9c:52:87:37:93:18:67:18:
cf:8a:ee:f3:e7:81:c2:ff:9a:a6:4b:06:48:bb:99:
86:95:a7:fb:31:4c:59:5e:f0:8e:8b:f0:4f:7b:c8:
f0:b8:fd:26:49:ec:ab:be:2a:96:09:93:89:7d:17:
6a:cc:57:61:4d:05:51:c1:1a:c3:ef:68:e5:32:8e:
52:3b:76:56:90:a4:b5:fa:82:07:d3:40:26:a7:37:
0f:3f:95:a7:36:be:0a:a2:8b:2c:6c:f9:7b:69:57:
d8:41:65:5d:9b:93:5f:67:0b:e1:4d:32:7e:eb:58:
71:ef:19:0c:d1:15:f8:8e:0f:e4:fb:ee:14:97:51:
ce:f3:cb:26:f1:65:86:67:4d:c5:78:14:59:a5:07:
3f:b1:5e:7d:e3:b9:8b:27:81:2d:51:44:66:36:6a:
1f:05:ed:29:2f:ac:44:a4:5a:53:31:14:83:c2:ad:
f2:8a:fb:f2:b7:88:80:6b:a4:75:09:d3:50:be:40:
7b:3e:b7:9c:44:5f:bc:dd:6f:cb:78:e7:cf:62:8d:
50:b2:fe:ec:32:ce:ed:0c:2b:a5:60:fb:de:c6:5a:
6f:04:6f:a1:4f:b1:c5:25:38:78:23:2c:ba:5f:15:
b8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:EC:AF:55:CF:A6:6A:9B:0F:90:41:74:68:BE:34:4D:5B:7F:34
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/18E343FA3A3411F195AC72659C833773.roa
sbgp-ipAddrBlock: critical
IPv6:
240d:c000:f1e0::/47
240d:c000:f1ef::/48
Signature Algorithm: sha256WithRSAEncryption
76:0c:11:45:44:d9:c3:bc:99:45:73:66:22:a8:d6:1c:bc:27:
8b:6b:07:35:a3:a5:59:c4:96:8a:b2:62:89:10:e1:bb:23:c5:
86:4d:31:99:71:bf:53:3f:56:02:e3:e9:81:f2:db:4a:c9:bd:
49:45:ec:b5:ca:0b:2d:61:52:42:62:62:a2:bd:05:dd:6c:91:
b9:d1:f0:fa:e6:7a:81:9d:a4:d2:30:d4:29:f2:73:79:19:72:
c2:62:d9:e1:36:14:76:62:5a:31:70:58:e3:7e:f3:31:04:14:
43:1c:d0:4c:0e:eb:21:a0:81:76:48:5f:17:d9:2e:00:8a:ca:
df:59:09:7e:93:5c:f2:73:0b:46:e9:ba:83:2d:c9:a7:2f:80:
3f:cf:be:bd:65:e2:b9:d6:b5:84:03:0c:07:ab:87:ea:99:4d:
dd:ea:8a:59:38:ee:d2:51:bc:e9:71:ce:5e:c4:4d:4a:b2:d6:
78:d8:b0:8b:0e:d6:35:48:a4:c0:93:18:f7:2b:83:09:e9:23:
42:32:f8:6c:c7:47:ee:36:ef:0b:35:ed:64:e0:1d:69:a0:cd:
1f:20:e5:d7:6f:8e:4a:91:c6:40:51:e7:03:89:cd:98:b9:f6:
9e:e1:2f:ce:89:a5:40:3d:fc:06:3a:b6:81:b7:86:06:5c:b3:
72:45:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:11:19 2026 by rpki-client