
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/2D52500E7B9A11F197E2363C71A30FBC.roa
File: 2D52500E7B9A11F197E2363C71A30FBC.roa (raw, json)
Hash identifier: o5xPauFaUQy8rVXgIB04IjGSZaP2lq1u5QSKCq0PT8U=
Subject key identifier: F9:62:B4:E1:E4:54:42:3E:23:66:4D:19:50:86:04:18:32:B2:96:20
Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial: 0166
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/2D52500E7B9A11F197E2363C71A30FBC.roa
Signing time: Thu 09 Jul 2026 13:29:14 +0000
ROA not before: Thu 09 Jul 2026 13:29:14 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 153365
IP address blocks: 160.191.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Validity
Not Before: Jul 9 13:29:14 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a4fa22a-57a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:aa:e3:78:dc:43:4d:d0:ae:e0:12:76:f4:
53:ea:65:44:fd:3c:66:98:67:ee:53:49:56:c1:a2:
10:8b:a5:d6:db:4b:e7:39:56:31:4a:7c:1d:39:88:
bf:02:74:b9:85:0b:60:e3:54:f4:cc:d4:64:44:97:
e5:b8:9e:4c:43:5e:1a:44:88:28:8a:81:8a:44:f2:
f7:75:a8:fd:67:28:8a:f4:6b:97:f5:f7:df:1e:7d:
ae:5d:f1:81:fc:a3:10:2c:ce:4d:38:a3:50:b6:91:
f1:f4:c6:46:1a:67:52:3f:cf:6d:bb:38:7f:cb:48:
d0:b3:9b:49:8a:91:ff:00:ea:ed:95:68:16:a5:91:
75:3e:9a:5c:4f:b5:7a:e8:f8:b3:54:90:16:50:93:
76:43:9c:0b:89:81:21:86:2f:22:97:83:c8:14:26:
a1:79:df:f5:c3:3c:59:32:7e:99:2c:74:c7:27:46:
c7:b4:6f:47:ea:9f:36:15:3b:86:52:9c:c1:75:33:
65:84:88:3f:03:ff:d0:9d:83:49:24:98:e1:a6:e8:
99:4a:be:d2:fa:28:2b:96:d4:1a:46:a4:06:3a:39:
e1:cc:a4:98:a0:22:99:27:f3:98:34:b4:69:6e:57:
34:9d:81:68:28:c7:4b:d4:bd:64:15:e9:f1:62:88:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:B4:E1:E4:54:42:3E:23:66:4D:19:50:86:04:18:32:B2:96:20
X509v3 Authority Key Identifier:
keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/2D52500E7B9A11F197E2363C71A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:e6:cd:14:92:0e:68:5b:50:6e:8a:8f:21:a2:bd:e4:b9:d7:
69:9a:92:ae:dd:1c:87:62:4f:82:fa:2a:8f:b5:4c:cb:e7:18:
e9:72:63:61:56:56:db:96:75:0d:80:47:cc:e9:d6:59:2a:ef:
77:df:f7:b0:e7:8f:77:76:9b:c5:03:74:58:cd:d2:1a:58:dc:
ac:bb:fc:52:da:48:31:0c:1f:bb:09:01:02:e9:8d:74:44:33:
b0:99:79:50:af:93:1a:50:14:b0:1d:fc:ce:e1:a1:ea:de:4c:
e1:6f:56:f6:c8:28:6e:84:88:94:a7:cd:ff:80:a5:1d:8a:1d:
0a:68:d1:31:02:cb:35:0d:42:a8:85:ef:36:16:1d:a5:9e:40:
81:af:a6:48:60:49:dd:30:fb:a3:ac:33:5f:1f:3f:78:fd:0c:
59:8b:48:e2:3f:d6:37:17:d9:da:c3:42:92:a4:54:87:13:f2:
3b:8e:60:84:c4:ed:3a:ad:ed:b2:28:ee:6a:81:ad:84:21:82:
2b:1e:0a:d2:ad:4a:7b:4e:a6:02:32:a2:36:ec:8b:26:1f:97:
1e:9e:4f:33:d8:9b:2e:ee:15:60:24:99:43:ca:04:f5:ec:76:
b0:43:c2:2b:73:b1:51:82:7d:9b:b1:5e:16:6f:26:89:92:79:
f8:44:24:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:19:24 2026 by rpki-client