
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa
File: 1B6234F8C6C411F0B021E76AC4F9AE02.roa (raw, json)
Hash identifier: R1Vha147Zi8KYJd/QlxquUKrPW+f5KkMpZVan6j/8qM=
Subject key identifier: 35:E5:F2:92:2D:9A:63:C7:37:12:F2:E9:E8:83:BF:A8:0D:A5:02:D5
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2FBA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa
Signing time: Sun 31 May 2026 16:28:20 +0000
ROA not before: Sun 31 May 2026 16:28:20 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153950
IP address blocks: 144.79.227.0/24 maxlen: 24
160.25.111.0/24 maxlen: 24
165.99.212.0/23 maxlen: 24
192.232.32.0/24 maxlen: 24
192.232.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12218 (0x2fba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:28:20 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c61a4-5f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:8c:d2:97:2a:d5:b5:a9:ca:0e:8a:04:8b:
34:dd:3c:73:ea:8c:ad:c6:33:dc:48:fe:ba:d5:b2:
c3:e4:53:cb:21:e9:f7:57:9d:13:27:77:a8:10:9b:
cd:4b:00:fc:50:26:d7:1b:08:b8:17:d1:ea:be:da:
d7:e1:1e:bf:cf:4a:d5:93:ea:d3:1c:26:0c:f4:3d:
ac:be:76:d6:f7:01:ed:46:30:d8:3f:5e:8f:7c:ff:
03:64:ca:cb:56:f9:be:5f:ab:27:3a:79:8d:9e:88:
3f:96:79:46:09:ee:a5:0f:f8:2d:a9:f0:37:9d:cd:
30:c0:02:d9:54:47:e8:ae:f1:2f:cb:0c:37:c7:2f:
77:d4:7e:57:e6:5c:a1:cc:ea:e5:fa:e1:12:36:79:
33:1b:1e:ca:57:8e:5b:ee:4f:8c:12:d7:aa:df:f8:
07:6c:47:8e:f1:ab:d4:d2:63:f3:cd:32:36:3d:fd:
7e:53:a6:08:8a:27:b2:da:25:77:93:1b:be:7f:cd:
dd:6b:2c:21:d9:4e:65:4d:b1:c0:4d:52:9e:96:1b:
84:8b:68:dd:ab:3e:7a:14:34:04:82:a5:f9:c4:6d:
66:b7:9e:41:c8:32:85:f9:59:ac:91:6a:e7:d5:22:
eb:3b:c6:73:45:f5:27:a7:6d:a3:44:1f:fd:8c:9f:
0f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E5:F2:92:2D:9A:63:C7:37:12:F2:E9:E8:83:BF:A8:0D:A5:02:D5
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.227.0/24
160.25.111.0/24
165.99.212.0/23
192.232.32.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:b8:34:f1:c0:a4:35:a0:ce:a9:1b:a6:66:72:e9:f9:a8:6d:
40:d6:23:ac:13:71:b6:96:fd:08:ea:a1:59:66:04:87:18:93:
42:fe:2c:32:ab:e5:5c:3d:51:9f:27:87:84:e6:ca:6f:49:1a:
03:19:56:8a:b0:b8:9b:28:1d:40:6a:a2:28:b8:79:d2:2f:3a:
2d:23:a3:d0:b2:c2:b7:9f:04:93:da:c1:c8:27:b7:3b:34:d2:
9f:be:dd:32:4b:d4:c1:81:46:25:28:d1:b7:02:06:56:e4:75:
f2:0f:ef:55:b6:4f:cb:30:c5:63:b3:3b:52:1b:d6:0c:22:34:
46:cc:1c:83:9e:a6:bf:e4:d0:58:cf:36:e9:b0:b6:04:e1:43:
71:c1:8f:0b:72:47:d2:8f:4d:bb:da:2c:37:b3:cf:8b:ae:8d:
41:74:bc:09:5d:6c:29:f0:e9:a7:f5:7a:c4:dc:4f:6d:a4:06:
b0:8f:9b:ae:fa:9b:4d:05:79:c7:a6:7c:b0:2a:33:75:e9:d5:
16:1a:67:fa:89:ae:10:ef:34:1e:3e:ff:a4:9b:86:53:38:15:
17:2e:17:f0:ed:04:a2:a6:eb:92:44:bb:01:c9:10:0b:d5:f0:
34:5e:e9:e0:f1:38:2c:15:c0:50:37:04:30:64:6c:7d:86:b2:
05:1c:ba:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:14 2026 by rpki-client