
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/1603FF2C6AE911F1B5ED47487247A888.roa
File: 1603FF2C6AE911F1B5ED47487247A888.roa (raw, json)
Hash identifier: 3qfyehPx18iZ+nZ3Fp3nstIPk0IChqfQZsM3HoTDXwU=
Subject key identifier: 26:1B:B5:A7:55:92:81:28:B2:7A:3F:05:F5:43:AD:58:58:D2:BF:EB
Certificate issuer: /CN=A9112F94/serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B
Certificate serial: 0C
Authority key identifier: 73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/1603FF2C6AE911F1B5ED47487247A888.roa
Signing time: Thu 18 Jun 2026 07:42:22 +0000
ROA not before: Thu 18 Jun 2026 07:42:22 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 154720
IP address blocks: 160.236.8.0/23 maxlen: 23
160.236.8.0/24 maxlen: 24
160.236.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl
rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112F94, serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B
Validity
Not Before: Jun 18 07:42:22 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a33a15e-6b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:0b:86:03:82:4e:24:c1:3a:3b:20:0d:10:
78:96:b0:b1:4e:09:c3:b3:60:de:3d:89:67:ec:3d:
fc:33:b8:ae:56:31:ad:70:fa:d9:08:dc:97:a6:27:
a1:38:62:b0:99:fb:8d:32:6f:95:36:6d:4a:41:88:
87:6e:97:e2:80:dc:f8:ec:36:0f:95:c8:47:42:94:
4a:9f:c0:31:94:1f:0a:fa:0c:5e:01:bc:73:c0:7f:
a5:c6:1c:53:c8:9e:02:b7:76:d1:8f:a8:44:57:0e:
eb:bf:b8:d0:50:71:11:cc:c2:0a:ee:e6:98:33:57:
f1:8c:f8:bd:07:05:bd:9b:20:ca:3e:33:88:5e:a0:
d1:41:7c:29:01:c5:18:90:62:04:77:88:41:ac:5d:
5f:cd:e6:aa:d6:bd:ba:1c:7a:2b:16:71:d2:55:7d:
57:0d:b6:f7:34:b9:d2:2c:2e:84:39:80:12:1b:b4:
76:ed:ba:1d:0e:b5:9e:76:2d:7c:8a:41:69:65:de:
48:98:23:16:dd:22:cf:05:9a:b9:a1:29:e7:3d:22:
65:b8:1b:a1:38:d5:f2:77:df:8f:9f:7c:ea:e8:02:
99:13:6e:e7:5a:4a:49:c3:3d:48:9d:dd:a3:9f:eb:
1c:e2:08:1d:6e:7b:9e:31:a4:12:67:ea:0f:99:ba:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1B:B5:A7:55:92:81:28:B2:7A:3F:05:F5:43:AD:58:58:D2:BF:EB
X509v3 Authority Key Identifier:
keyid:73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/1603FF2C6AE911F1B5ED47487247A888.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.8.0/23
Signature Algorithm: sha256WithRSAEncryption
75:96:9b:cc:80:f0:47:38:3d:00:59:14:8a:42:59:19:92:86:
cb:4d:29:43:18:cb:0f:06:42:f4:fb:a0:8a:a4:93:87:f2:17:
f3:5f:9d:44:d0:fe:c0:f6:c2:73:4f:eb:47:5f:d8:ff:1c:eb:
43:37:d1:b6:4f:04:c8:80:9c:96:71:e7:97:2e:94:bc:b9:92:
62:aa:b3:92:f6:96:de:22:cc:ff:3b:b4:36:59:71:7f:e6:3d:
67:12:12:0e:69:2d:00:39:8e:2b:20:79:3b:d9:2a:fe:07:91:
01:41:65:ac:54:f6:2f:ad:3e:c6:09:1a:25:05:01:0f:40:01:
61:4b:00:f6:68:c8:14:de:f3:1c:12:ad:2f:ce:42:bf:28:76:
31:6e:8f:0c:69:47:32:fe:93:c9:a5:c0:9b:04:0d:b7:fe:9a:
01:10:79:02:fd:2a:a4:44:08:2c:7a:b4:55:41:b5:28:1b:40:
c4:73:2c:9b:a9:ba:c3:c5:cb:d1:87:63:1d:f1:a7:f4:d6:7f:
15:3c:2f:7f:b3:68:b8:4d:6c:1d:a0:bf:5a:f2:a1:dd:b4:5f:
ea:ca:ff:80:2e:ea:07:da:c0:e3:65:d7:c8:ef:08:0a:eb:3f:
bb:2a:33:13:5c:c2:91:83:75:f9:a9:3a:54:48:01:d6:13:58:
85:a5:23:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:50 2026 by rpki-client