
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/990BF0C494B411F192990A883211F970.roa
File: 990BF0C494B411F192990A883211F970.roa (raw, json)
Hash identifier: 5uu2wOVwIYJqlT0ETZ01gzLTknakLcY2YFx53WSL/c4=
Subject key identifier: BC:13:5E:84:1D:08:D5:96:61:75:53:6F:DA:88:59:5E:6B:44:C9:3C
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3294
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/990BF0C494B411F192990A883211F970.roa
Signing time: Mon 10 Aug 2026 12:17:59 +0000
ROA not before: Mon 10 Aug 2026 12:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153786
IP address blocks: 160.236.83.0/24 maxlen: 24
162.4.147.0/24 maxlen: 24
192.232.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12948 (0x3294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Aug 10 12:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a79c177-3db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f7:41:84:bd:bd:15:95:46:c8:23:bb:2e:b7:
ed:97:e7:e8:31:94:3b:1f:f0:82:3b:60:cc:53:15:
4b:ac:eb:31:53:f6:d3:81:c9:48:05:9f:8b:a6:4b:
32:ff:01:13:e9:ca:2f:77:66:d1:0e:1b:95:60:41:
9b:7b:09:4d:cc:e5:ae:59:a8:58:d4:2d:55:65:05:
33:48:c5:12:f8:a8:70:4c:52:07:50:5b:e6:ee:15:
ae:90:0d:cc:5f:c6:24:6a:41:6b:53:71:04:ea:fa:
cb:bb:55:72:fb:81:4d:5a:96:7b:4c:61:a3:c1:09:
f8:ca:4d:ae:cb:16:b0:81:aa:bc:2a:0d:2f:9a:ef:
8f:cc:54:ea:cd:59:e4:16:4c:3e:2f:0d:d5:d5:b0:
26:27:30:70:1d:ab:e3:9e:bc:62:0d:ca:cc:d0:2f:
d3:0d:c1:19:6f:5f:74:61:90:22:5f:9c:7d:63:dd:
e4:2b:d2:35:93:cc:1a:1f:f0:69:c1:3e:8e:16:61:
36:9c:8a:b9:0c:40:1b:b9:e7:26:6c:95:c3:11:d0:
2f:05:23:cf:9e:9a:d8:13:bb:cb:a8:3b:d3:9b:38:
2f:2e:00:2d:99:9a:91:df:a2:c8:13:b1:65:3d:cc:
4e:ed:8d:ef:b3:d5:5b:42:1d:72:ea:dc:1b:0a:f7:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:13:5E:84:1D:08:D5:96:61:75:53:6F:DA:88:59:5E:6B:44:C9:3C
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/990BF0C494B411F192990A883211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.83.0/24
162.4.147.0/24
192.232.56.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2b:7c:a2:11:2d:c9:e8:4d:15:50:fe:96:6b:69:df:b5:c4:
4e:97:7e:ae:87:a7:9f:25:fd:05:13:8a:cf:c6:96:c6:25:6b:
7b:aa:92:82:87:e2:46:d0:aa:93:f9:94:1e:97:0a:9a:5b:16:
a6:f8:a6:5d:12:ff:1b:db:36:26:11:38:eb:8e:b6:57:1f:04:
40:56:2c:ad:4b:9e:9d:9e:3e:40:ea:9b:b2:69:3d:a9:11:7d:
88:b3:cb:83:01:fe:51:8e:69:55:74:6c:4a:df:97:9d:ce:09:
cf:69:85:8a:38:63:cc:e4:e5:9b:65:de:2c:69:4c:95:31:b0:
6d:3c:bc:7b:05:2a:90:38:9e:7a:06:18:5f:c7:aa:b4:02:a2:
6d:01:7a:fc:b8:49:bf:39:3e:52:59:67:61:d8:64:5a:ec:75:
4e:c2:15:0d:75:89:12:7c:0b:f7:b8:31:b0:3d:c9:4e:3c:07:
f7:78:3e:a9:2c:ab:54:ac:e0:7b:f1:dc:24:ff:aa:94:1b:68:
73:76:0c:1c:38:7f:aa:a0:3b:32:1a:65:fa:64:7b:6f:7e:9c:
d8:51:4e:a2:08:4f:4e:55:c1:e3:f3:11:22:70:81:6e:e1:44:
2d:f5:69:56:56:29:e5:e8:21:5c:a8:c7:46:7c:67:b4:ec:81:
79:bf:18:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:25:46 2026 by rpki-client