
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/ECB98052057511F1AF941BA6343D8C67.roa
File: ECB98052057511F1AF941BA6343D8C67.roa (raw, json)
Hash identifier: BhWp6Gp20ESYJmlCsx6pBHB0Y//h97prbxzd0+L2/q8=
Subject key identifier: 59:4D:54:E8:73:C6:26:66:BA:F1:2B:16:33:44:7E:E8:82:89:43:70
Certificate issuer: /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Certificate serial: EF
Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/ECB98052057511F1AF941BA6343D8C67.roa
Signing time: Mon 09 Feb 2026 05:12:27 +0000
ROA not before: Mon 09 Feb 2026 05:12:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 153384
IP address blocks: 160.191.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Validity
Not Before: Feb 9 05:12:27 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69896cba-1a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:05:4c:2f:08:82:89:3c:7d:94:c0:cb:f2:
bd:50:29:57:d4:f4:30:b2:b5:f2:d9:08:56:22:68:
67:91:8b:4b:e7:30:e0:63:81:45:98:15:50:87:97:
ef:fe:ca:b4:ad:05:ce:fd:98:f5:87:ca:1d:48:d5:
e3:7d:f0:a0:db:26:df:1a:e7:3f:67:ac:4b:8c:43:
a9:64:0d:d5:bd:e5:99:7d:ff:46:3e:72:66:a1:80:
e7:aa:b2:ec:25:03:33:c9:60:68:e0:49:99:b7:da:
68:02:39:9e:57:8e:3c:b8:99:fb:f9:9e:a5:84:5e:
af:8c:4e:1b:17:7e:ee:73:ce:a8:79:a1:fa:7f:70:
81:26:74:24:4e:e4:49:e7:07:b4:71:13:ce:a4:fa:
7f:b0:92:ae:af:a7:8f:00:86:31:e3:e7:55:54:8d:
eb:bb:59:4a:64:be:18:57:e7:19:f6:d4:1b:ef:95:
a9:76:91:9f:fb:b7:11:0d:5b:ad:5d:32:81:76:a3:
d7:5d:58:59:ec:77:ac:fd:4e:a0:71:fd:dc:da:18:
96:e0:4c:98:7b:34:8e:96:46:85:3d:f6:a2:cb:c3:
6e:94:bc:7f:f8:c6:bb:0c:c5:77:a0:e7:38:c6:74:
3e:5f:f9:6e:12:04:9a:f6:0e:ce:fa:2a:7f:80:e1:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4D:54:E8:73:C6:26:66:BA:F1:2B:16:33:44:7E:E8:82:89:43:70
X509v3 Authority Key Identifier:
keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/ECB98052057511F1AF941BA6343D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.140.0/24
Signature Algorithm: sha256WithRSAEncryption
66:31:3b:58:3f:92:e1:fd:3a:70:74:62:dc:46:a9:86:fd:e4:
9e:63:2c:8d:15:ef:ae:f3:5c:b1:cc:c2:ab:6a:ed:69:9b:30:
b9:b5:6f:30:2b:2a:3b:03:ff:83:43:d8:2e:c5:6d:9b:1a:b6:
04:75:62:73:47:dd:c7:5b:56:5c:bb:4f:ed:ae:55:1b:ce:73:
b8:c0:57:f0:d2:5f:33:27:2b:fa:3b:7a:22:0f:66:cd:77:b6:
90:da:47:4b:cb:cc:4a:88:bd:7d:a5:9e:b5:32:98:8f:af:82:
03:c2:df:30:83:ee:70:d8:47:0f:f9:f4:c7:fe:29:65:72:a0:
ce:85:61:62:70:0d:75:ba:0a:9b:62:b5:f6:14:05:93:83:4b:
5d:ef:ae:62:37:c5:68:1c:8c:f0:b2:09:07:c9:84:ce:41:dd:
6b:40:db:85:f4:68:23:55:bb:2f:49:ae:55:d0:7a:a0:35:27:
9a:73:32:fc:41:38:93:25:b6:e2:c7:91:08:d1:e5:d4:63:e6:
66:a7:8e:a6:d6:fc:75:f1:1f:1b:e1:48:11:6d:8a:2e:7b:43:
fa:2f:6f:77:38:78:cf:34:5d:3c:2c:57:96:ab:0f:18:bd:01:
e1:95:f0:50:64:4a:e2:8d:4e:4e:e2:16:e3:49:e2:71:05:8a:
6e:07:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:49:18 2026 by rpki-client