
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa
File: 2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa (raw, json)
Hash identifier: 8ItpkqdzM33resyCZEvC0U2BYb/s9fpul/z5VeC5Beg=
Subject key identifier: 8D:31:04:15:9D:2A:4D:65:1A:B0:A7:5E:91:F1:4E:CB:FC:6D:0B:F7
Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Certificate serial: 80
Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa
Signing time: Mon 03 Aug 2026 09:58:14 +0000
ROA not before: Mon 03 Aug 2026 09:58:14 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 141694
IP address blocks: 160.222.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Sep 2026 07:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Validity
Not Before: Aug 3 09:58:14 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a706636-30e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:86:88:d8:4a:a5:40:2c:06:6c:6a:1d:3a:
84:76:22:d2:7c:0f:30:0c:c9:38:a9:cc:7f:c3:dd:
60:bf:54:46:f9:a6:0f:e1:36:03:a3:89:1a:fb:7f:
2d:e5:8e:00:c8:8f:7b:65:c2:36:d1:67:24:4e:d8:
78:8c:32:c7:bf:34:dc:b6:98:cf:b5:0e:9a:44:67:
a7:4d:ad:e4:d5:03:68:02:eb:91:5d:eb:08:8b:59:
cb:5c:a1:ce:ab:11:83:3b:c9:2b:ef:66:c2:e9:ba:
ed:54:3a:6a:c9:4a:88:92:97:c1:d0:a9:fa:6f:7c:
74:eb:52:45:91:d7:cd:c5:bc:bd:38:98:7d:64:b1:
4b:33:64:2a:9d:f9:10:4b:30:7a:ee:53:b3:f0:70:
ff:17:99:c4:2a:81:46:14:b2:c6:07:18:3c:a1:bb:
7d:9c:d5:cf:d8:54:2a:e8:70:39:0e:ee:c3:fb:4d:
a0:62:9d:96:9f:75:6a:5b:40:9c:28:4e:3b:69:5a:
07:ec:c1:fe:f1:f2:43:24:64:38:5a:20:da:cc:bf:
e6:33:a7:86:08:99:9f:03:e9:a4:bf:68:25:a7:1f:
01:ec:98:ee:ef:7a:93:3a:c6:57:44:3b:a9:ab:00:
b6:f1:61:58:36:fc:ad:ab:6c:34:40:d7:38:9f:a0:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:31:04:15:9D:2A:4D:65:1A:B0:A7:5E:91:F1:4E:CB:FC:6D:0B:F7
X509v3 Authority Key Identifier:
keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.222.193.0/24
Signature Algorithm: sha256WithRSAEncryption
56:40:cc:97:e6:89:be:18:08:cc:bb:69:5c:f4:76:2f:d7:89:
b7:89:24:5f:68:90:6d:03:9f:14:32:6d:f2:08:ca:ef:5e:bc:
5e:64:50:5c:89:9e:c5:f3:bb:54:b5:7c:be:67:fb:7e:bb:70:
79:37:b0:5e:1b:c2:e3:e0:42:51:e4:98:11:d2:f3:4f:98:42:
7d:96:91:64:f3:5c:df:90:a6:55:f2:e9:15:c3:62:26:5d:ae:
1a:9e:45:5a:f5:93:d4:da:80:d2:63:71:41:22:ad:da:0b:de:
f8:2d:3d:b1:97:0c:6a:98:05:39:0a:6d:fd:77:ce:e9:89:db:
5c:e7:8b:f5:7b:0e:f0:44:83:ad:51:4c:60:01:17:c6:8c:d3:
c1:c2:a8:01:83:d5:7e:dd:b4:9a:44:01:6b:72:63:c8:0e:ce:
48:6c:c8:62:38:f9:dc:37:7f:d1:af:0d:a8:0a:9a:8d:d3:ea:
c1:42:22:bd:9d:74:e0:15:3c:93:56:9c:5e:d8:48:00:8b:62:
29:02:76:89:c1:ef:7b:52:fa:39:aa:10:f2:13:4f:44:bd:7d:
68:fd:20:47:13:81:ef:07:30:f6:cc:86:8b:ac:09:aa:56:82:
69:7a:f0:9a:4f:15:75:15:1a:c0:04:40:a5:b2:a5:f4:0a:f2:
aa:95:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 23:59:28 2026 by rpki-client