
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/E611D250118111F1BD19AAF2323D8C67.roa
File: E611D250118111F1BD19AAF2323D8C67.roa (raw, json)
Hash identifier: z55nxPlhbtL11SvF70H5TAGI4+4Xj3SBtnkVzyIbwx4=
Subject key identifier: 8E:11:30:1B:D6:03:AA:72:1F:2E:4D:14:83:8D:CA:2B:C5:F0:C4:27
Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Certificate serial: 82
Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/E611D250118111F1BD19AAF2323D8C67.roa
Signing time: Mon 03 Aug 2026 09:58:20 +0000
ROA not before: Mon 03 Aug 2026 09:58:20 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 16509
IP address blocks: 160.222.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Sep 2026 07:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Validity
Not Before: Aug 3 09:58:20 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a70663c-69bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:f1:d2:a3:45:ce:bd:32:65:01:e3:ae:8e:
38:ae:ff:6c:03:08:79:2a:df:38:6c:47:66:19:5f:
7c:aa:c9:9c:52:1d:e3:4f:4c:15:3d:74:d2:52:ed:
f1:f0:a1:e2:c7:a6:17:db:8f:74:3f:d3:36:94:0e:
f1:ab:01:a6:36:a6:45:4e:b5:83:e4:58:9c:33:7f:
a2:ec:94:5b:f5:c2:65:38:41:da:7a:9f:82:73:e5:
4e:ee:e2:91:8d:52:5f:d5:af:4a:fd:14:18:b8:9e:
17:2c:88:09:4d:8b:68:9d:db:2f:c4:b0:4b:ca:6c:
10:ff:b5:31:c2:37:55:29:b9:ba:c1:23:e6:83:1f:
4e:c4:3c:16:38:33:01:cd:79:0d:db:fa:d3:41:e1:
61:63:2c:59:31:66:bb:fa:2a:ee:e7:5c:45:3b:1f:
fc:60:39:f2:1a:a0:13:c0:93:9f:59:11:51:39:c6:
c9:28:67:32:e4:34:12:56:4e:44:49:e8:db:2c:91:
be:c7:ec:9f:b0:5f:69:9c:65:18:d2:36:29:9c:34:
e6:28:18:97:2c:46:b1:34:12:a9:6f:41:ea:0b:b5:
d6:65:ae:65:24:60:7a:6f:bb:88:c2:99:17:eb:2a:
51:82:01:68:dd:26:ae:c3:a1:34:2d:90:38:9c:05:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:30:1B:D6:03:AA:72:1F:2E:4D:14:83:8D:CA:2B:C5:F0:C4:27
X509v3 Authority Key Identifier:
keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/E611D250118111F1BD19AAF2323D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
160.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0e:e5:4c:45:99:a5:47:bf:e6:fb:8c:f9:fb:8d:70:4d:a9:
0e:06:d5:fe:b9:52:49:73:dd:25:c9:b8:42:a0:d3:b3:1b:05:
db:a9:0b:79:94:53:e7:31:90:32:be:27:79:92:d0:f9:5b:47:
99:dd:01:0e:8e:85:ad:be:11:1f:60:3f:a9:7e:95:fc:09:4f:
ad:22:44:44:02:19:87:f9:55:84:c1:12:b6:f4:cf:91:d1:95:
ba:42:e1:4a:b9:bb:73:e3:56:07:c3:36:81:30:e1:7d:c0:20:
b1:74:b8:6a:7f:91:b7:07:26:f5:3b:e9:0c:44:c6:75:78:10:
73:93:c0:03:a9:1e:36:58:e1:ce:03:06:83:8a:bc:ca:3e:00:
73:64:43:bf:c2:54:d9:f2:3f:fb:07:17:7d:c7:81:8e:f8:46:
c8:7e:67:00:d0:22:1b:25:da:74:7b:27:c4:2b:6e:78:eb:2e:
6b:1a:ec:f6:35:74:7d:c6:10:bc:ee:68:8b:ed:a1:87:b2:9e:
13:38:fe:a9:2f:77:d0:3e:55:da:e6:1f:b3:b1:06:2c:5c:d0:
a3:96:c0:bd:15:df:36:a9:1d:75:8c:8a:e2:5f:c0:58:cd:2e:
c4:bb:6a:6a:9a:cd:52:6a:dd:c4:63:4e:3a:cb:d5:c5:a7:0e:
af:8a:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 01:21:19 2026 by rpki-client