
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/19D852C853EF11EF838B8354C4F9AE02.roa
File: 19D852C853EF11EF838B8354C4F9AE02.roa (raw, json)
Hash identifier: dmwbHi1tc0XMv9OCH0eFklsU2JbH9aUVNppAHtWM5ps=
Subject key identifier: 70:0C:A5:FE:0C:67:74:06:2A:8A:AF:62:5C:44:7A:36:82:CD:D2:85
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F54
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/19D852C853EF11EF838B8354C4F9AE02.roa
Signing time: Sun 31 May 2026 16:25:12 +0000
ROA not before: Sun 31 May 2026 16:25:12 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 152525
IP address blocks: 160.25.136.0/24 maxlen: 24
160.25.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12116 (0x2f54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:25:12 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c60e8-3f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:7c:88:60:d7:dc:1b:82:03:16:b9:9e:9e:
46:08:07:49:78:fb:ce:3a:0e:5c:8f:fb:cf:09:ce:
9e:0f:16:31:38:d4:f7:f8:3b:af:70:69:d2:bd:35:
63:3f:71:f8:a0:90:a8:93:94:05:ac:fc:b9:dd:07:
bc:26:0e:45:c2:10:1e:6f:00:42:04:42:f3:94:ba:
82:76:d1:9a:17:f5:54:65:f7:69:81:ef:4e:ac:fc:
12:b4:d3:4a:0b:12:13:8b:1b:c9:02:30:28:06:21:
ed:17:1c:23:f1:da:28:0a:e7:29:67:2b:66:8a:22:
15:6d:66:f8:b1:b0:94:0a:fe:4c:17:77:eb:70:3f:
4e:bb:6e:17:1b:77:0c:d2:11:2d:d3:a0:85:c9:bd:
e6:02:27:98:b4:ef:1d:04:34:36:b8:d0:c6:f3:aa:
22:63:62:aa:43:95:df:f9:33:e9:8e:00:fc:98:14:
08:47:86:5e:6d:40:29:50:fc:c1:ee:f2:3d:10:1c:
bb:8d:e0:16:bf:81:c5:e5:0a:45:7d:14:3e:cd:86:
aa:5e:f2:17:e9:c3:e2:64:82:4c:e5:a7:79:0d:39:
ab:b7:67:5b:53:69:77:93:d8:e2:ff:51:b6:05:d4:
7f:32:58:d6:15:b7:77:f1:bc:17:10:7d:de:e8:58:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0C:A5:FE:0C:67:74:06:2A:8A:AF:62:5C:44:7A:36:82:CD:D2:85
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/19D852C853EF11EF838B8354C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.136.0/23
Signature Algorithm: sha256WithRSAEncryption
55:ed:93:89:8a:65:60:b4:80:da:c2:2c:e3:c3:66:84:8b:57:
3f:35:7e:34:54:a3:b9:c9:ea:04:11:69:73:ca:27:4f:b8:36:
87:0c:6e:00:f6:71:c4:49:d6:db:c4:eb:4e:3d:54:ad:35:25:
5e:23:59:e2:05:9c:d7:51:14:2a:ff:6f:f6:ef:37:0a:58:b3:
cf:06:23:fb:4f:5c:0e:a1:e0:5c:49:53:7b:ce:6d:1f:a7:b5:
b0:7e:7f:4f:41:81:83:11:3f:5f:29:ca:c8:01:98:30:09:c9:
c2:b2:ca:37:81:66:76:6a:e7:d3:55:9a:b0:6a:76:31:db:04:
b9:0a:e8:7b:ef:2b:2f:1b:0a:d1:af:bc:99:cb:99:17:56:e1:
cd:30:d8:c6:fc:bd:a4:3a:15:31:cf:c6:de:6c:9f:d7:cd:41:
06:c7:3f:63:61:b8:bc:18:ef:63:ae:7e:ca:a0:9b:78:db:83:
45:2e:a2:0a:59:06:39:b9:41:0b:ba:a7:f2:20:e6:e8:f5:9a:
dd:11:35:d9:2d:53:41:da:1c:6f:6e:83:03:f7:a4:4f:a8:f9:
c4:a4:9c:1f:17:cc:8f:47:90:7d:86:bf:86:bd:e7:be:62:8d:
50:de:66:5a:34:69:f9:98:82:d8:22:8f:ba:92:56:a2:9c:cb:
11:5e:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:42:02 2026 by rpki-client