
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/8056379A118511F1AFA21CD3333D8C67.roa
File: 8056379A118511F1AFA21CD3333D8C67.roa (raw, json)
Hash identifier: a+0zEEh0IkQBVa10yTGuRhVRnpnLL42o4daj18Tc6Gk=
Subject key identifier: BE:CB:3C:1D:BF:C9:CC:DB:87:30:7E:F0:B3:27:8A:AA:6A:56:DF:56
Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Certificate serial: 2F
Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/8056379A118511F1AFA21CD3333D8C67.roa
Signing time: Mon 02 Mar 2026 13:08:31 +0000
ROA not before: Tue 24 Feb 2026 13:34:11 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 14618
IP address blocks: 160.222.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Validity
Not Before: Feb 24 13:34:11 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58bcf-b2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:88:0a:c0:60:55:26:2b:8e:ae:2f:66:39:
ae:9d:19:b2:a9:7b:e4:21:b3:d7:cb:3e:fd:7a:55:
14:d3:c8:06:8e:f1:22:47:58:eb:4d:61:13:e5:43:
45:5c:90:96:00:ea:f3:4f:b2:ec:65:da:c9:c9:fc:
eb:14:60:14:71:01:23:86:90:b9:d1:a6:a5:51:06:
ab:a4:9c:ed:20:3d:3b:d1:dc:33:1a:57:d2:40:3b:
2b:55:e8:57:c7:cc:4e:7a:a7:5b:72:3f:09:38:71:
fa:75:43:c6:ab:ef:f0:91:2c:8e:f0:ff:58:cc:a3:
ce:de:3e:6f:40:ee:ec:b3:c6:99:28:63:a8:5c:db:
9a:35:e1:db:83:40:6b:2a:06:4a:f5:9d:4c:11:3b:
85:68:65:d2:83:d8:f1:cc:93:70:cc:12:b2:62:2b:
d5:e8:ea:08:0a:19:38:ed:0a:f4:b6:24:92:b7:e2:
f3:b6:c3:89:34:eb:97:a8:3b:b8:ba:ad:76:e8:2d:
31:38:6b:e3:7a:b4:92:02:6a:2d:9d:52:b8:1c:ef:
6d:0d:5b:30:d1:0c:04:a9:66:98:6a:db:ab:92:26:
5b:00:f3:a6:a8:c3:de:d0:d0:53:f2:5c:64:c5:11:
a2:5c:3a:07:6f:69:c8:c1:41:00:46:42:d9:5c:09:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CB:3C:1D:BF:C9:CC:DB:87:30:7E:F0:B3:27:8A:AA:6A:56:DF:56
X509v3 Authority Key Identifier:
keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/8056379A118511F1AFA21CD3333D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
160.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
34:62:d5:6d:f3:18:54:6c:ab:16:5d:9b:cf:9e:0d:b3:1a:01:
98:b0:63:a7:42:c1:6d:1c:36:65:35:68:9f:75:3b:a8:2c:10:
a9:d8:23:16:f3:d4:01:9f:c5:6d:72:a8:06:52:10:24:5a:81:
fb:40:00:f0:fa:f8:4b:5d:2a:5b:81:94:1f:69:40:5a:c6:0d:
02:01:a8:4a:a2:1e:ad:13:9c:ec:7e:40:6c:5b:7e:78:5e:dd:
65:6c:de:aa:a3:56:c2:0d:41:20:cf:5a:f1:5c:57:ea:73:7d:
1b:4e:ac:7a:35:1f:5b:69:60:0b:a9:96:6b:53:ee:6c:98:cd:
0f:94:fa:61:3a:33:7f:d9:bb:ca:6b:98:49:e0:6e:b3:0d:1c:
f0:76:54:e2:4b:79:e0:60:37:18:f3:a3:db:6f:26:3f:b2:1a:
dd:f1:3b:b6:e8:b0:c7:be:ae:81:c4:1b:df:cf:bc:00:94:86:
17:6c:7e:0a:40:01:b4:f0:3e:d1:0b:c1:f0:13:3c:41:e4:5e:
f7:d6:9f:b0:63:3e:3a:ad:f7:6b:5c:d1:29:36:ae:c8:c8:91:
01:53:e9:b7:1f:29:a7:69:a1:60:9e:bf:79:a1:92:22:ea:f3:
2f:c2:71:7a:c5:8c:fc:72:1e:6b:65:86:9a:f0:1a:fb:6e:51:
1c:33:e0:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 11:31:04 2026 by rpki-client