
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94CE77AC275E11F1AE7220F1BD833773.roa
File: 94CE77AC275E11F1AE7220F1BD833773.roa (raw, json)
Hash identifier: tqlCVR3HLXGc+Spo5M96UFmW0S9/NSlD9ieVcWKxGuM=
Subject key identifier: BD:21:1C:C3:D0:35:80:28:BD:75:C0:9A:5F:09:30:6C:61:D4:EF:49
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2D5E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94CE77AC275E11F1AE7220F1BD833773.roa
Signing time: Tue 24 Mar 2026 08:51:00 +0000
ROA not before: Tue 24 Mar 2026 08:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137587
IP address blocks: 157.15.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 10:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11614 (0x2d5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Mar 24 08:51:00 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69c25074-a0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:8e:4b:7a:aa:0c:a7:47:25:8e:9e:a9:9b:
e4:c8:25:6c:41:55:29:55:e3:14:23:cd:26:95:1a:
1e:b4:a8:9f:2c:54:ba:45:cb:8a:7f:c9:b1:0e:0f:
a1:b0:db:7e:46:2b:03:fb:c8:a4:00:70:e4:6c:9e:
1d:47:7a:b8:18:b0:b9:f1:ef:10:65:f2:ab:2f:36:
99:2d:59:3a:f6:85:22:b2:ee:f7:0d:c0:52:6e:df:
b4:d9:9b:55:78:61:30:ce:70:b8:0b:e2:d9:7e:64:
4a:3e:70:98:74:0d:84:cb:a0:6a:84:f0:75:59:96:
05:ee:07:69:28:41:1b:87:b9:04:61:98:74:79:8b:
23:4a:ea:d9:45:77:77:47:cd:cb:ee:eb:c7:d4:67:
a1:49:fd:74:4a:25:1f:25:d1:04:2b:d2:1e:bd:66:
39:c3:89:48:d4:21:a8:0e:db:7b:0c:ae:ee:23:ec:
1a:dd:3f:11:3b:40:81:70:76:2b:f0:11:86:fb:9b:
19:a2:4b:1e:d8:cb:f4:9c:cc:77:47:08:6b:15:33:
7b:58:fd:9c:90:37:f3:2c:35:4a:19:c3:a9:0d:32:
b2:11:4d:28:80:2d:ee:0c:7d:8c:29:49:aa:b2:52:
0f:e0:2a:fe:b3:79:41:8e:22:b9:3d:ba:fb:62:88:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:1C:C3:D0:35:80:28:BD:75:C0:9A:5F:09:30:6C:61:D4:EF:49
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94CE77AC275E11F1AE7220F1BD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.34.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:70:b9:27:b4:d5:a4:e1:46:4a:38:fd:88:3a:79:c7:a0:a7:
05:84:45:bf:58:af:ae:29:71:ff:fd:f7:af:5d:9b:07:91:c7:
07:79:17:1e:0e:73:e5:bb:ef:f5:bc:0b:e9:b5:b3:a8:7d:5e:
49:37:ba:7b:39:d7:28:f0:95:82:b5:db:a1:74:e4:f8:0b:69:
20:94:e2:ac:2f:00:56:79:54:d1:3e:73:93:84:b9:a9:69:ea:
31:fa:b3:76:de:01:2e:4e:c2:52:63:b6:4f:cb:9b:44:a1:dc:
b4:9c:b7:72:ec:2c:86:ee:46:d2:f5:f7:99:74:78:0d:f3:5f:
ea:b2:4d:23:f9:a0:42:ce:47:fb:7c:59:4b:59:04:3e:77:7d:
f5:b0:49:62:53:46:86:c5:10:fe:ef:38:51:ee:00:b4:35:78:
e7:b7:7f:6c:ea:47:17:6d:0c:8a:0f:57:b2:05:ab:0d:00:e0:
2a:17:91:51:0f:e8:52:0a:ee:5a:9c:16:27:92:94:ff:95:f1:
d5:7e:13:26:fd:af:ce:02:ea:49:f8:a8:5d:5f:0f:6b:a9:87:
42:14:3a:63:46:e6:d2:04:50:59:9b:8a:a4:a3:29:49:a5:ed:
47:78:21:67:64:37:a6:e0:5a:a2:de:3a:4d:da:fd:bf:7a:12:
0b:e2:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:11:20 2026 by rpki-client