
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B00B870C9D5211F1ACE60D8B5311F970.roa
File: B00B870C9D5211F1ACE60D8B5311F970.roa (raw, json)
Hash identifier: qeIXd/RLq6t60mtft0O06sMTBXdQWIoFe1pifDYs3sc=
Subject key identifier: C7:2F:A7:DE:42:2A:A8:9E:65:A7:1D:04:2B:73:06:B0:40:98:1A:CD
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 32AA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B00B870C9D5211F1ACE60D8B5311F970.roa
Signing time: Fri 21 Aug 2026 11:23:09 +0000
ROA not before: Fri 21 Aug 2026 11:23:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 160.191.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12970 (0x32aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Aug 21 11:23:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a88351d-4d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:fd:90:b5:78:39:f1:96:c9:3a:81:3a:40:
34:44:94:5a:07:8f:90:7e:7c:8a:36:a4:e7:40:81:
99:de:1b:0c:aa:c4:62:59:1e:17:8b:12:75:a8:7c:
b3:38:fa:d2:a6:31:bf:d5:20:d8:d2:42:5b:aa:ab:
99:38:cb:9b:7c:d4:e9:b3:8b:d3:b1:04:3f:bf:04:
48:14:73:25:c3:a8:80:19:c9:a7:bd:18:15:fa:00:
05:88:b5:46:47:cf:8f:3d:8e:1a:9b:29:00:c2:f7:
5f:a9:67:9e:fd:46:85:ba:02:00:f4:ba:0d:f3:cc:
e7:c2:15:2f:c6:dc:e7:37:bd:fb:e7:2b:c3:3d:2d:
d3:43:d3:34:0b:1e:96:f6:a2:52:93:d9:f9:5a:58:
96:7d:11:d0:1c:79:44:7e:45:2c:e4:f8:81:6d:82:
28:99:05:4b:eb:8d:5a:2e:90:37:75:76:1c:29:d1:
82:e8:2d:0a:0b:14:48:12:ee:d4:4b:72:74:6e:f1:
33:95:ea:64:49:6b:d6:77:94:0c:8f:2a:e2:36:d6:
b3:08:b0:fc:66:6f:62:69:6b:9c:a4:3e:2b:c7:a3:
e8:bf:29:fe:4a:96:bc:d9:66:c3:94:bc:98:6f:de:
23:ca:c7:31:64:69:86:f8:df:ad:c6:9f:3e:03:36:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2F:A7:DE:42:2A:A8:9E:65:A7:1D:04:2B:73:06:B0:40:98:1A:CD
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B00B870C9D5211F1ACE60D8B5311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.144.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c0:c7:1f:79:5d:68:ba:d3:c4:dd:57:4d:06:5e:01:14:ed:
4e:b1:ff:49:92:96:c2:94:11:4e:e8:7f:d7:c6:77:e4:5e:80:
fb:29:65:6e:89:61:ab:9d:90:b7:a0:79:46:97:c8:28:9f:52:
88:ed:d6:fc:e9:92:96:ab:2a:5c:bc:1c:71:d6:2b:1d:93:a6:
15:3d:a9:12:2b:3a:eb:8f:9e:07:41:db:84:9a:5e:ac:35:96:
e1:81:71:27:8a:16:4a:0d:6b:5d:fd:fb:60:b5:01:62:04:1f:
35:8b:3f:60:31:e5:bd:10:66:45:97:2a:77:db:9f:28:d8:cb:
7d:f5:da:61:b8:ed:a1:c7:08:f4:9e:66:b5:9a:5a:95:21:d4:
75:c3:4b:fe:a5:4a:83:d8:6d:88:5e:9f:0e:54:a8:d1:da:dd:
38:5b:07:cc:22:ec:7d:e1:12:9f:0d:3a:85:97:4e:fb:9c:91:
bc:84:62:99:4c:29:f5:25:ef:62:ff:29:ac:fd:81:63:4d:f2:
bd:51:42:6f:ab:19:b1:cc:92:a2:70:80:b1:dc:e0:f8:c9:38:
71:4e:bd:42:dd:31:84:de:91:36:69:fd:c8:b6:8f:99:e0:b4:
1e:c3:76:77:81:75:e6:be:7a:98:22:7a:d6:f5:0a:d4:b6:45:
42:fe:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:25:32 2026 by rpki-client