
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CD4087BA8B3B11F1BC2587994211F970.roa
File: CD4087BA8B3B11F1BC2587994211F970.roa (raw, json)
Hash identifier: Kg1lYDuvCyPWRkWvIQgJlm9sTJDwpiLAkjKm18X89Oo=
Subject key identifier: 50:09:C0:0A:FB:A5:3D:32:D5:54:C9:15:9B:08:A9:F1:77:26:EB:9C
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 325E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CD4087BA8B3B11F1BC2587994211F970.roa
Signing time: Wed 29 Jul 2026 10:53:59 +0000
ROA not before: Wed 29 Jul 2026 10:53:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154754
IP address blocks: 160.236.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12894 (0x325e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 29 10:53:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a69dbc7-e770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:93:6f:00:7c:6b:cb:7d:33:42:d2:c6:f4:
fe:f3:dd:2e:f0:4f:36:51:1a:aa:88:be:c2:82:d2:
32:e9:01:47:a3:bc:41:85:e0:42:3e:28:2c:95:36:
06:37:21:94:1d:59:95:b2:c4:25:4a:ef:6c:85:3f:
35:c9:5e:10:06:7f:3d:22:a4:b5:80:e8:26:56:fd:
8d:32:43:a7:40:8f:b4:d1:d1:51:7e:2b:70:da:16:
2a:4c:a7:a3:35:22:b3:d7:c6:e0:54:0a:25:93:14:
1f:f9:f2:3a:fb:cc:a2:24:aa:e6:17:17:00:0b:00:
f3:92:12:cc:0e:3b:8a:cd:ab:87:19:6f:40:4f:62:
9f:92:13:18:d4:8e:57:96:47:a2:09:b5:32:4c:b9:
58:a5:d4:41:8f:df:21:c6:93:ef:67:75:6d:2a:a3:
31:be:dd:81:fc:f7:38:7e:ce:44:5b:3f:70:35:be:
91:b6:70:f7:f1:e1:14:6d:86:80:19:1b:22:2d:7b:
92:38:29:25:41:a2:fe:4e:99:2f:fb:b2:7e:2c:1a:
05:46:58:a7:18:d8:4d:8c:eb:ce:b8:0a:6e:9f:8b:
a5:6c:38:c0:48:e8:f2:f1:2c:4a:f4:59:31:88:81:
49:6c:5a:40:8b:e5:a0:02:b4:f1:bd:a2:fe:d9:cc:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:09:C0:0A:FB:A5:3D:32:D5:54:C9:15:9B:08:A9:F1:77:26:EB:9C
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CD4087BA8B3B11F1BC2587994211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.76.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:0c:d5:ab:f8:81:d7:03:33:92:e5:db:d4:27:6e:9b:9b:58:
79:28:95:ad:28:cc:e2:08:06:8b:b9:4c:ac:67:1a:a4:b6:c9:
b4:e7:89:7f:6a:9b:e1:2e:2c:58:2e:ff:32:0d:94:48:04:18:
99:d6:f4:e7:7c:81:f9:e5:ef:d6:d0:fb:db:01:2b:96:da:42:
68:ea:57:25:c1:e1:83:37:50:c3:30:0f:c5:4f:50:90:33:99:
1c:7b:1e:ab:40:e3:11:a4:b4:1e:10:a0:eb:7b:7c:d9:0f:57:
d9:7e:bf:3d:5f:6c:c1:01:83:21:f5:ae:ff:9d:ec:6b:94:31:
74:98:c9:51:d4:d6:6d:bc:61:00:f7:d7:6a:18:24:a7:f8:ff:
ea:80:56:f9:e3:3f:41:ec:e6:84:02:17:bd:51:da:4d:53:8b:
fa:18:79:38:6e:e2:70:b3:77:a6:3d:a4:e1:63:01:c1:b2:56:
88:4e:36:cc:32:61:1e:e8:35:01:ed:e0:b5:4d:08:61:09:64:
45:7d:b6:19:25:96:4a:cb:11:a3:e2:c7:0c:a7:fd:b9:8a:ea:
20:ef:1a:68:2d:a7:67:34:6d:96:ac:cd:a4:a2:79:35:55:aa:
d8:61:dc:9c:0a:81:a0:d6:1a:2e:6d:64:8f:ef:7d:6c:79:b2:
a3:44:9e:8d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzI5MTA1MzU5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5ZGJjNy1lNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3JOTbwB8a8t9M0LSxvT+890u8E82URqqiL7CgtIy6QFHo7xBheBCPigslTYG
NyGUHVmVssQlSu9shT81yV4QBn89IqS1gOgmVv2NMkOnQI+00dFRfitw2hYqTKej
NSKz18bgVAolkxQf+fI6+8yiJKrmFxcACwDzkhLMDjuKzauHGW9AT2KfkhMY1I5X
lkeiCbUyTLlYpdRBj98hxpPvZ3VtKqMxvt2B/Pc4fs5EWz9wNb6RtnD38eEUbYaA
GRsiLXuSOCklQaL+Tpkv+7J+LBoFRlinGNhNjOvOuApun4ulbDjASOjy8SxK9Fkx
iIFJbFpAi+WgArTxvaL+2cxvLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFAJwAr7
pT0y1VTJFZsIqfF3JuucMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0Q0MDg3QkE4
QjNCMTFGMUJDMjU4Nzk5NDIxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoOxMMA0GCSqGSIb3DQEBCwUAA4IBAQAtDNWr+IHXAzOS5dvUJ26b
m1h5KJWtKMziCAaLuUysZxqktsm054l/apvhLixYLv8yDZRIBBiZ1vTnfIH55e/W
0PvbASuW2kJo6lclweGDN1DDMA/FT1CQM5kcex6rQOMRpLQeEKDre3zZD1fZfr89
X2zBAYMh9a7/nexrlDF0mMlR1NZtvGEA99dqGCSn+P/qgFb54z9B7OaEAhe9UdpN
U4v6GHk4buJws3emPaThYwHBslaITjbMMmEe6DUB7eC1TQhhCWRFfbYZJZZKyxGj
4scMp/25iuog7xpoLadnNG2WrM2konk1VarYYdycCoGg1houbWSP731sebKjRJ6N
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:25:38 2026 by rpki-client