
$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/AEBEA978526211F190265F7DBC833773.roa
File: AEBEA978526211F190265F7DBC833773.roa (raw, json)
Hash identifier: GPfKfNNIXjai1EnUV/N7eUbMHwWj9TZDA5mP+AllUjM=
Subject key identifier: 33:99:55:BF:FA:1B:88:84:80:C0:11:DA:43:F3:32:68:88:91:C2:B9
Certificate issuer: /CN=A91274A4/serialNumber=914130452A5E703BB8EC3C8D886E40F205AA601E
Certificate serial: 05
Authority key identifier: 91:41:30:45:2A:5E:70:3B:B8:EC:3C:8D:88:6E:40:F2:05:AA:60:1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kUEwRSpecDu47DyNiG5A8gWqYB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/AEBEA978526211F190265F7DBC833773.roa
Signing time: Mon 18 May 2026 02:38:42 +0000
ROA not before: Mon 18 May 2026 02:38:42 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 23856
IP address blocks: 160.222.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.crl
rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kUEwRSpecDu47DyNiG5A8gWqYB4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91274A4, serialNumber=914130452A5E703BB8EC3C8D886E40F205AA601E
Validity
Not Before: May 18 02:38:42 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a0a7bb2-dc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:ea:cd:db:8d:52:bb:05:6e:7f:7e:b7:9a:
4f:41:c5:87:3f:5d:e4:d7:6c:c8:d8:18:50:5d:79:
4b:76:91:cf:8c:d4:63:58:4f:b7:5c:d0:18:4c:66:
70:c3:13:87:e9:35:61:7b:a2:c8:37:49:15:c0:2b:
36:f4:6c:09:47:ab:74:73:52:31:d8:90:cc:a6:09:
12:b4:8c:22:c7:32:bc:f6:4c:10:b4:41:3a:0c:3b:
7d:ff:ef:d6:91:ee:ec:2d:02:85:5e:aa:0f:01:d0:
de:6c:a3:8b:16:43:6c:7e:2a:40:c2:98:2e:0a:9d:
1f:f3:39:59:4b:dd:d7:6a:8e:a0:c6:2f:e4:7b:76:
36:44:1a:13:05:87:d0:69:93:f0:40:fd:90:1c:df:
d4:47:8d:80:f0:18:e8:6e:ea:3e:66:31:9d:a5:b4:
0f:14:5d:43:7b:05:71:60:d8:7a:87:43:0a:98:45:
24:c2:47:28:f3:35:1d:c9:45:16:d2:3b:22:50:b4:
f5:f0:dd:cf:aa:56:77:db:0b:fc:68:b7:dc:a6:8a:
fe:9b:13:39:82:e6:3c:6c:1e:7b:91:4f:44:b3:4f:
01:6a:c9:e0:25:d7:86:23:e0:48:a4:01:be:53:f0:
b5:38:9a:60:89:6d:94:99:45:d1:aa:2b:d0:a5:19:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:99:55:BF:FA:1B:88:84:80:C0:11:DA:43:F3:32:68:88:91:C2:B9
X509v3 Authority Key Identifier:
keyid:91:41:30:45:2A:5E:70:3B:B8:EC:3C:8D:88:6E:40:F2:05:AA:60:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kUEwRSpecDu47DyNiG5A8gWqYB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/AEBEA978526211F190265F7DBC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
160.222.0.0/18
Signature Algorithm: sha256WithRSAEncryption
01:7e:df:7f:79:ee:e6:26:bd:c5:3a:53:86:88:e0:2f:06:0c:
c4:75:b9:c5:84:45:a7:3e:c0:24:a2:e3:ea:04:f8:0f:af:1f:
cd:7e:55:ae:b1:8a:29:ba:2b:79:a7:66:f6:2b:2d:31:47:f1:
87:9f:0b:ce:3d:50:9c:47:ee:b1:3a:c2:46:e7:8f:3c:02:1b:
85:fb:95:f7:eb:95:74:de:1c:2f:b1:e3:f9:87:00:a2:a0:2a:
31:ff:ad:d6:2d:a4:d0:cc:eb:76:0d:77:df:b3:8b:8d:73:68:
d8:41:ce:24:4c:ec:4f:e7:69:30:41:c5:f7:c6:37:0e:c1:20:
19:4b:c4:e4:2c:21:a8:e4:af:eb:5e:81:b8:24:e7:b5:b6:11:
ee:d2:2d:52:e6:f1:08:f5:30:ad:38:a7:7b:8b:e5:39:0e:5d:
9a:b2:54:4f:d3:eb:ed:12:c1:de:ca:07:9f:90:1f:73:4d:cd:
8e:86:30:3e:dc:0a:64:be:74:72:58:1e:64:3b:6e:82:a5:b9:
de:3f:76:93:d0:a3:47:3f:14:64:7c:0b:61:93:a8:aa:2c:c8:
85:5e:3c:bb:93:b4:cd:66:df:83:cc:09:24:27:3e:56:fb:73:
73:11:2b:47:f3:5e:dd:59:56:4a:47:b1:c1:50:e7:08:51:cd:
9a:e5:3a:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 12:52:59 2026 by rpki-client