
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/21F94DCC3A9011EFBD977F28C4F9AE02.roa
File: 21F94DCC3A9011EFBD977F28C4F9AE02.roa (raw, json)
Hash identifier: dIHCjqD+mNYZxLNE+pWBOewyLxxaudEl663hgxoL/mI=
Subject key identifier: C1:C0:76:83:BF:97:51:A0:1D:5E:FC:63:4A:F6:E9:89:EF:29:93:FB
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 313A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/21F94DCC3A9011EFBD977F28C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:20:44 +0000
ROA not before: Mon 06 Jul 2026 16:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151101
IP address blocks: 160.25.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12602 (0x313a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd5dc-8172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:f2:8e:31:a8:ab:8e:75:1b:71:ac:14:7f:
91:d9:4c:b9:f7:76:ee:50:cc:1b:5b:8e:e6:84:41:
5b:a6:98:7c:ca:48:d5:4e:81:dc:14:1e:99:88:ce:
a0:d6:3d:52:3d:2a:ac:d2:2f:f7:c7:96:55:f0:98:
8e:3c:69:a5:09:9d:19:09:16:3a:52:e8:38:6b:ce:
0e:bf:fb:ab:05:53:b8:0a:3f:eb:3b:9c:bc:6b:80:
03:40:0e:e4:09:e5:00:df:2d:44:1b:8f:92:89:e0:
21:14:55:4c:e1:31:c8:40:f8:3c:9c:7c:25:cd:e9:
67:3b:8f:24:9e:bb:2d:59:a1:5f:ff:fc:ca:8f:f2:
c0:64:dc:34:50:4d:9b:05:1e:92:63:39:63:2d:c1:
ef:66:e2:79:b1:0b:61:a7:b4:ce:76:76:75:71:00:
91:30:9e:e6:57:41:1f:70:62:8a:5e:33:a6:69:aa:
55:c2:5c:9c:26:1a:b4:99:f7:4a:91:37:91:27:8c:
da:c1:91:35:67:ad:87:6f:12:c9:ba:f0:d5:97:85:
27:1b:6b:a7:d0:86:b9:fd:53:e8:42:01:2a:fa:d7:
0f:fe:e0:d2:1a:31:d6:a2:85:4e:de:e9:56:a9:65:
1e:b7:f0:f5:36:4d:4e:dc:66:99:2a:70:47:50:41:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:76:83:BF:97:51:A0:1D:5E:FC:63:4A:F6:E9:89:EF:29:93:FB
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/21F94DCC3A9011EFBD977F28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:19:09:77:95:c7:e5:27:b2:d8:b6:de:80:11:88:6d:15:4b:
a2:90:c5:58:81:6b:52:6b:a1:43:5d:3c:c2:e7:43:ef:89:0b:
ee:80:74:14:e1:ba:ea:7b:fa:3b:99:db:04:8e:01:f7:82:cf:
3e:d3:d2:bc:4d:2b:0d:ad:98:32:b6:28:c8:af:88:3a:9b:0d:
eb:d1:27:f5:fe:10:a6:f8:9a:8c:21:5f:7e:0e:4d:ad:71:9c:
f8:f3:ea:9c:d3:f7:e7:ce:6f:16:26:32:b6:95:ab:a1:1d:db:
48:b5:45:84:ae:b8:6a:c8:d5:9e:b8:43:67:68:7f:6b:e2:83:
a8:d7:d2:95:f1:3a:b2:dd:9b:a3:3b:a5:32:dc:42:2c:57:9b:
e5:57:b9:27:04:84:f8:13:6b:00:bf:a0:e9:8c:18:b5:54:47:
10:93:60:92:ef:d8:d6:2f:b4:57:a1:a2:c7:2f:be:e1:65:aa:
7c:01:21:65:2d:cd:8e:26:58:1a:3c:62:5a:fd:51:eb:db:8e:
63:7f:c2:6e:4d:f8:4b:64:c8:77:22:56:ae:10:e6:80:99:27:
b9:56:bd:73:9d:78:45:e8:56:56:65:3e:b4:e1:4d:8c:ed:51:
cd:20:a5:ec:9e:d2:03:2e:89:54:1c:ee:11:fb:c3:2f:89:09:
e6:7c:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:33 2026 by rpki-client