
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa
File: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (raw, json)
Hash identifier: nfTKSNk8+JIF1suVRpltXmeig8lRuHVZl1vGZQqNkWI=
Subject key identifier: 25:58:3C:93:4B:9F:B6:F5:59:D8:19:BA:A4:58:D4:6C:59:68:46:93
Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
Certificate serial: 0180
Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa
Signing time: Wed 05 Aug 2026 06:54:43 +0000
ROA not before: Wed 05 Aug 2026 06:54:43 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 138580
IP address blocks: 160.30.9.0/24 maxlen: 24
160.250.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl
rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 03:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
Validity
Not Before: Aug 5 06:54:43 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a72de33-9daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1b:95:ad:37:46:36:b5:90:61:4f:32:36:d8:
a6:0c:a5:d1:0b:a6:4e:1b:75:e1:1e:09:66:4e:53:
5a:06:21:be:84:1a:67:12:df:d7:68:c9:e2:76:fb:
cb:da:46:ea:f4:0b:5b:d7:73:e8:b0:11:92:34:ff:
9f:05:50:e6:e1:a5:f9:0e:dd:52:00:6f:dd:1b:25:
71:6f:ca:91:f9:3e:75:b3:48:da:17:1d:00:a7:d0:
60:4a:da:d3:a9:83:07:0a:5d:7d:50:34:36:0d:42:
d8:34:35:39:a7:a6:9e:7d:fd:d5:34:6c:e6:88:26:
d8:07:e5:23:27:18:72:bf:c4:1f:1f:91:6d:e3:b5:
94:d3:3e:44:45:7c:f0:ff:13:c6:69:f2:33:be:24:
6a:28:4b:b9:a0:8d:41:2f:e0:6b:52:86:3b:f7:93:
87:87:e7:ff:b2:fe:72:53:ea:d5:21:05:9e:4e:45:
a5:4f:5c:66:7d:32:24:38:d1:43:94:d7:72:d5:4d:
cd:d0:16:af:d5:02:69:36:63:9a:c5:81:0d:6c:b0:
6a:61:af:1b:30:c1:6e:76:6a:c7:dc:65:6c:75:e4:
15:db:12:85:40:a9:d8:30:ea:cb:b1:a6:6e:42:b8:
83:94:ae:3a:8e:82:7e:27:a0:7d:34:84:2b:b1:9b:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:58:3C:93:4B:9F:B6:F5:59:D8:19:BA:A4:58:D4:6C:59:68:46:93
X509v3 Authority Key Identifier:
keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.9.0/24
160.250.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:34:f9:a7:71:ae:c5:0a:e4:86:f9:01:95:05:0c:3c:0a:f8:
61:49:6e:c0:8b:e9:83:3d:d6:64:8a:cb:0e:38:82:c0:4c:03:
05:e4:a7:38:e6:00:6b:5c:35:09:bb:70:73:ad:d9:ec:4d:61:
af:85:17:56:27:76:ca:23:3b:f4:2d:c9:85:8d:e6:2f:82:99:
1e:4f:21:96:26:4e:04:68:2a:9d:22:92:34:99:50:29:e7:65:
81:5e:93:15:6d:85:ba:2c:4b:6c:b0:ca:9c:b1:74:ce:f3:bd:
df:7a:53:fc:58:c4:06:65:ea:93:0b:96:8f:a1:e3:12:fd:f6:
a6:81:a9:16:b5:8c:7d:4b:e5:5a:de:20:bf:c7:d3:cd:23:6a:
98:ef:15:8c:80:a0:d6:a2:07:73:4c:a2:d7:1f:3f:5d:02:20:
89:2c:7c:7c:a8:48:f1:9b:62:5b:e8:f6:ef:a6:58:0d:14:2b:
49:49:cd:fe:b5:12:a7:03:13:fb:a0:0f:88:4f:e2:f1:82:32:
e6:42:96:71:c2:38:16:75:04:e9:b6:3c:48:a9:3a:84:1f:e8:
f0:f7:48:13:ef:f9:a3:7a:6b:a4:f1:0e:e4:f8:02:af:15:a4:
25:f1:1c:a4:31:4a:29:e5:ff:22:e2:a7:d2:e0:31:1d:3a:d0:
af:50:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 05:37:36 2026 by rpki-client