
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/24CD77AA968211EF8D4B2A1CC4F9AE02.roa
File: 24CD77AA968211EF8D4B2A1CC4F9AE02.roa (raw, json)
Hash identifier: j5T5w97ElV1cmjh1qb3kjRS3ymlSwMzMl0QV6u5KLkw=
Subject key identifier: B4:22:51:0C:DD:1F:D9:31:AE:75:B8:66:79:3B:43:92:25:64:96:65
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F8D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/24CD77AA968211EF8D4B2A1CC4F9AE02.roa
Signing time: Sun 31 May 2026 16:27:00 +0000
ROA not before: Sun 31 May 2026 16:27:00 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153240
IP address blocks: 160.191.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12173 (0x2f8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:27:00 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6154-7b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:9a:57:4d:25:0f:78:d0:ec:b7:68:f7:b5:
5c:4b:db:cb:34:f9:73:cb:0d:47:f5:12:30:72:fc:
0b:48:e0:9f:9a:42:01:4c:53:34:2a:2e:cd:2f:8a:
9f:b5:e1:e4:ae:dd:eb:9a:ec:d1:4b:cd:46:c8:db:
d6:78:b6:b8:eb:0d:3a:67:b0:60:dc:9e:58:2d:ee:
6c:55:1f:96:c6:26:88:9d:6f:1f:4c:b4:bc:9e:ab:
ca:11:b6:cc:85:cd:47:af:36:9e:a7:3f:e9:b0:91:
99:58:a8:5c:16:1d:e2:64:e3:fd:77:30:45:2f:e9:
11:f3:52:3b:7d:83:ec:3a:65:40:98:72:27:e5:71:
a9:bc:b0:6e:2d:20:78:1d:b2:a9:3a:96:ea:f0:6a:
da:2a:16:d9:1e:93:ae:2b:f2:eb:88:01:93:7c:18:
02:58:3b:d5:12:fc:a7:13:04:88:cd:1f:67:6a:9e:
be:0d:82:ec:6f:a9:84:4b:e1:35:66:a1:a7:fb:b0:
64:25:80:26:2e:81:e8:39:be:e6:95:65:0e:33:89:
11:56:49:e6:2d:ca:95:55:fc:db:23:a7:a4:be:a2:
72:dd:5a:aa:d8:73:3c:b2:ea:d8:b9:d0:53:83:00:
d0:7f:86:53:bd:60:5d:6d:18:4e:58:43:cf:92:f2:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:51:0C:DD:1F:D9:31:AE:75:B8:66:79:3B:43:92:25:64:96:65
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/24CD77AA968211EF8D4B2A1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:a9:6f:21:2e:76:a3:03:e1:fe:7d:c7:99:9f:01:33:53:45:
ea:15:0a:51:8f:90:4c:ff:98:07:9f:6b:6a:7b:a9:4d:d9:7e:
2b:30:3c:9e:67:40:8e:e5:ff:f2:9b:55:83:ee:64:b2:d6:b2:
2d:1b:11:36:ad:bd:64:fd:ba:1e:cc:48:09:fb:ee:51:80:a6:
95:9f:5c:c7:d2:a6:ee:c5:92:e2:11:85:2b:93:4a:32:16:c2:
5c:89:da:9f:3d:90:3d:58:55:fa:de:95:cb:ea:ca:d1:f8:2b:
5e:80:b7:31:e4:8a:73:3f:12:89:b3:67:23:07:ef:46:e1:5c:
60:bc:92:47:f9:04:0b:4e:ae:60:79:fd:cd:7e:3c:d7:99:13:
f2:ea:c2:a5:95:3d:40:b7:e2:df:96:e3:95:0c:cd:ad:1d:95:
10:64:fd:f0:8f:21:ff:f7:42:28:7a:f1:80:e2:d9:a6:a6:fd:
07:39:1d:dc:be:05:d7:ba:54:ab:9b:8a:f4:ca:51:f6:e3:b5:
cf:9f:d8:13:80:b9:41:db:50:fb:24:65:5a:7e:fa:07:53:d2:
61:e4:90:77:5b:f8:bc:50:0e:73:ac:9b:a4:42:fd:7b:e8:5c:
86:6b:eb:2d:d9:a0:0d:ec:70:25:f1:08:4f:57:1b:8d:a7:86:
49:63:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:14 2026 by rpki-client