
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa
File: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (raw, json)
Hash identifier: h1GjFRWsL8zm9w/JK18XEZpcDgp9Hd5wn7O3sw9gPUM=
Subject key identifier: 86:3C:71:7F:5B:71:60:74:AC:D5:F3:C1:CE:30:BE:E6:07:63:C7:AB
Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Certificate serial: 01EE
Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa
Signing time: Wed 06 May 2026 09:32:52 +0000
ROA not before: Wed 06 May 2026 09:32:52 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 36007
IP address blocks: 45.130.164.0/24 maxlen: 24
45.130.165.0/24 maxlen: 24
45.130.166.0/24 maxlen: 24
45.130.167.0/24 maxlen: 24
45.151.152.0/24 maxlen: 24
45.151.153.0/24 maxlen: 24
45.151.154.0/24 maxlen: 24
45.151.155.0/24 maxlen: 24
74.113.232.0/24 maxlen: 24
74.113.233.0/24 maxlen: 24
74.113.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Validity
Not Before: May 6 09:32:52 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69fb0ac4-5168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:cb:e7:d9:2d:6b:8f:6e:ad:fe:3c:a2:7e:
ae:81:e5:c7:fc:64:c1:ac:7f:64:02:e7:30:5d:1c:
5f:0f:9b:9c:92:4f:4f:c2:52:54:c1:0c:0d:c9:f7:
ff:29:b5:9b:df:3c:4f:45:0d:d8:26:c8:91:b4:68:
37:ae:d9:32:7c:a4:3b:1b:af:c6:ab:4c:ed:64:10:
49:14:88:fd:39:da:76:49:cb:ce:af:7a:7e:9e:16:
61:bf:6b:f9:84:05:f6:91:c8:dc:4d:a7:4b:1e:d6:
c5:b6:d0:e0:19:23:57:17:4f:1e:86:39:ca:dd:37:
62:46:5b:2f:96:07:1e:4c:e9:1a:68:aa:a9:e7:78:
02:74:60:ce:81:95:d0:74:88:56:6e:c7:d0:ee:62:
e7:5d:ed:0c:36:00:16:8c:ff:4b:37:33:32:c4:53:
12:50:fa:ee:b5:fe:a8:e9:ca:05:da:1b:7d:17:e7:
6f:ce:57:9f:4a:2c:3e:87:dc:9e:62:a7:12:59:8d:
83:b3:01:63:f4:3e:05:63:de:26:8f:fd:10:c8:ce:
25:da:06:d0:6a:b0:c4:ef:8b:8c:f9:91:81:da:b3:
12:8f:f4:93:41:7b:cf:02:35:66:52:34:e8:53:ed:
9b:d1:6f:cc:3e:b1:1b:82:59:33:c2:4e:6a:6e:69:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3C:71:7F:5B:71:60:74:AC:D5:F3:C1:CE:30:BE:E6:07:63:C7:AB
X509v3 Authority Key Identifier:
keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.130.164.0/22
45.151.152.0/22
74.113.232.0-74.113.234.255
Signature Algorithm: sha256WithRSAEncryption
7d:b0:96:45:50:fe:6d:44:7b:f8:df:fb:ef:2b:6e:35:a0:8e:
39:c0:17:66:c2:1a:3e:ce:58:c1:53:71:5a:9b:d6:98:6c:6b:
5d:b0:5e:a9:42:b7:ef:a5:03:d4:36:ee:d4:de:b0:66:9c:2d:
4d:9d:4a:43:7f:82:b8:f8:aa:57:69:50:b7:86:86:4d:0b:2d:
a1:d7:0d:62:80:96:fa:2b:b1:af:b6:44:2a:5c:9f:7f:d2:56:
35:fb:14:da:e9:5d:ad:96:5b:3a:13:fc:5a:8d:94:b0:75:79:
da:7f:b8:88:1b:ab:b9:3c:24:d3:08:7e:f4:91:6e:8a:b1:fc:
d9:2e:41:18:9c:68:be:db:cb:78:1e:62:4a:cf:ca:d8:84:ed:
d2:41:d9:0c:8f:1e:9d:13:e2:c6:35:e8:f1:37:ec:f6:a1:d5:
fc:9d:64:a8:ba:7a:e1:41:a9:d3:e0:b5:98:34:f9:f1:43:23:
b0:a8:ab:ef:6e:6e:17:34:a8:0b:c5:a0:86:cb:0a:96:3e:e0:
95:d4:5a:90:1d:bb:3a:1b:66:45:30:aa:58:85:cc:5c:dc:fd:
de:0c:ab:e9:f2:0d:3c:01:26:7f:08:d7:8f:c2:fb:23:91:87:
30:f7:51:77:db:9e:89:b6:14:c0:be:0c:c3:4b:9a:40:d1:78:
7f:e3:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:59 2026 by rpki-client