
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ED06EA341BA711F19ED09D39093D8C67.roa
File: ED06EA341BA711F19ED09D39093D8C67.roa (raw, json)
Hash identifier: U+4zvi78Yv+MumzY915J7grJ0YzDPW0EFURaOuJbY6k=
Subject key identifier: E0:14:B5:F1:22:B5:A2:E7:5E:0D:B4:AA:07:49:83:B6:3E:12:50:E8
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2D37
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ED06EA341BA711F19ED09D39093D8C67.roa
Signing time: Mon 09 Mar 2026 11:05:48 +0000
ROA not before: Mon 09 Mar 2026 11:05:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133645
IP address blocks: 192.232.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 10:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11575 (0x2d37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Mar 9 11:05:48 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69aea98b-221d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:cb:d2:9c:82:ef:73:fc:cd:0b:71:53:9c:
60:b5:9d:52:bc:fc:02:b8:a0:19:a8:c1:1b:1e:f2:
d6:f8:21:c9:71:a8:7a:00:40:94:6b:47:11:ea:0f:
8f:47:36:93:ec:43:b3:7f:79:4f:ae:43:e1:c6:c3:
e7:5d:90:31:10:bf:7e:e5:a8:db:b4:c5:5d:c1:5a:
af:7b:99:0d:cc:54:25:74:ca:3e:7a:80:86:51:a3:
b0:11:74:bf:99:67:25:32:21:ff:a8:65:aa:8b:b5:
bf:9d:71:04:ae:46:33:d2:4f:02:76:d0:1a:16:45:
3f:65:c8:f6:b5:94:37:1c:6d:43:b8:7f:e1:cc:c5:
4d:04:8d:ae:1a:21:2c:d7:3a:5c:c0:c8:6e:e9:4f:
57:8b:53:74:46:60:22:e2:bb:6c:94:8f:3d:dd:e6:
70:f6:3b:8a:6a:69:d3:11:4a:17:91:ba:2f:77:e7:
db:e7:95:51:a9:3a:79:bf:42:ff:e7:83:77:54:22:
44:d1:22:72:ee:51:c2:c8:bd:0d:2a:1a:37:59:94:
e5:7b:a4:03:32:d4:49:cb:02:bb:5d:40:01:1d:6d:
fc:c0:cd:e9:5c:b3:1d:f6:04:51:70:b7:51:00:95:
4a:0f:b1:56:3c:62:0f:47:86:61:71:89:45:1f:a4:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:14:B5:F1:22:B5:A2:E7:5E:0D:B4:AA:07:49:83:B6:3E:12:50:E8
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ED06EA341BA711F19ED09D39093D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
192.232.57.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d9:3e:4f:94:be:84:e5:a3:d8:cc:37:e5:10:16:00:9f:27:
9e:5c:67:a7:fb:dc:48:38:eb:11:07:ec:9b:b7:78:ab:13:a1:
ca:15:be:75:f1:fa:23:40:c6:17:0a:82:16:6e:9e:6d:bd:d1:
98:3c:22:fd:0c:3e:b4:5d:01:dd:2b:fd:4f:f1:0c:66:52:08:
0e:b3:a2:03:0d:83:64:4c:db:fe:d6:f6:00:fd:0f:e4:3c:e0:
ff:b4:05:75:58:0a:55:3e:cf:ae:ce:bd:9b:da:c9:76:14:a6:
06:0a:83:b5:86:bc:2e:26:90:fb:cb:c3:28:45:d5:e7:18:ae:
18:12:97:7a:0a:b8:56:b7:a1:23:ec:74:90:d8:80:28:a7:f0:
d5:eb:8a:3f:9a:59:16:75:a6:19:88:7c:13:65:4d:97:20:fe:
04:03:ea:0b:b4:ae:5e:c5:a7:67:be:03:34:18:79:83:ab:10:
12:0a:a3:d8:53:c1:66:50:73:d9:c3:fc:3d:ec:92:82:24:b5:
9b:73:52:9f:a7:e3:58:9e:ac:cd:1f:0b:96:28:e6:88:ab:97:
2f:03:c3:10:17:94:2b:73:aa:82:84:9b:74:59:a5:17:4c:42:
32:fa:5a:6d:18:1e:63:1e:16:f1:1e:8b:09:67:36:ec:dc:02:
54:af:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:35 2026 by rpki-client