
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/250868B0120A11F19C6ECD9A173D8C67.roa
File: 250868B0120A11F19C6ECD9A173D8C67.roa (raw, json)
Hash identifier: TAYuko9P0Xzoao5Epl6aUCs+4kV6zPNwnj0XoG7Egkw=
Subject key identifier: 45:5E:F5:16:B5:10:90:4E:1C:FC:CB:5A:36:24:D2:02:75:4B:40:DB
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2FAF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/250868B0120A11F19C6ECD9A173D8C67.roa
Signing time: Sun 31 May 2026 16:28:00 +0000
ROA not before: Sun 31 May 2026 16:28:00 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153786
IP address blocks: 162.4.147.0/24 maxlen: 24
192.232.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Jun 2026 09:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12207 (0x2faf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:28:00 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6190-26f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:93:38:71:c3:65:cc:f1:e3:d7:b3:fd:1d:51:
6e:56:92:14:f6:da:ac:75:67:70:87:ad:6a:e2:3d:
22:76:53:ec:e9:43:33:1e:87:13:f6:34:91:9d:90:
0b:e7:56:41:5a:90:72:6b:5c:a9:1c:3f:d8:6d:80:
b8:6a:11:2c:26:21:c9:3b:13:42:f8:a2:db:26:1c:
f7:32:57:96:88:81:cf:e6:82:3f:9f:59:52:1e:80:
17:29:69:07:d7:04:01:1b:32:80:dd:be:59:5a:45:
b6:55:12:47:5d:03:8f:b0:0b:c0:55:76:5a:64:07:
65:6f:68:a5:f7:b0:56:b2:d7:04:e8:61:9f:6c:99:
58:ee:55:4a:a4:06:76:91:61:b4:e6:e8:23:11:54:
22:a9:c6:b8:77:eb:a9:16:4b:e3:90:6a:3f:32:8f:
36:0c:fb:13:48:19:a5:94:7e:65:b4:bd:b4:65:a6:
e3:e0:7e:eb:45:8f:17:86:96:01:85:7d:68:a1:4e:
9a:43:0d:1e:72:4d:3e:46:65:b3:01:a0:c2:c9:3d:
10:cf:2b:a5:9f:d8:23:73:29:2b:93:e0:41:27:97:
53:54:3a:ba:d2:7e:4a:d9:fa:95:5c:92:0a:5d:d1:
96:8b:a0:c0:71:5a:43:57:67:77:95:59:87:1b:9d:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5E:F5:16:B5:10:90:4E:1C:FC:CB:5A:36:24:D2:02:75:4B:40:DB
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/250868B0120A11F19C6ECD9A173D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.147.0/24
192.232.56.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6d:95:a5:f7:32:4e:77:c8:cc:6a:7c:c4:03:64:dd:01:19:
c4:0f:53:31:c3:30:6a:71:3c:44:76:95:de:fc:64:ae:a3:51:
d3:ae:da:dc:a2:43:0e:ad:26:97:e9:dd:a8:fb:95:73:23:04:
fa:43:b9:ae:9f:f4:5c:8e:b9:b2:f4:1b:60:f6:a6:ac:74:26:
d0:00:2b:8d:16:27:d0:8b:28:ea:0f:f1:7c:64:77:b2:7d:a1:
c3:7d:67:21:c7:ae:d3:4a:a4:37:ce:37:7b:ad:87:1c:16:f4:
04:a4:eb:ec:71:9a:69:3f:62:73:bf:7f:95:be:ee:6e:5a:3d:
7f:18:c6:44:2f:79:20:dc:b6:21:5d:7b:46:26:b3:48:18:e0:
70:ac:0c:56:02:a8:db:90:c3:3e:7a:6f:1e:45:0c:dd:0b:58:
b9:6d:16:d2:5a:7b:e4:74:c9:cb:ed:d4:b7:40:74:66:d3:32:
45:d9:d7:e1:f2:d6:63:2b:ae:49:b2:fe:95:82:0f:54:98:95:
36:71:ec:aa:f9:9b:d9:e3:64:da:64:33:91:7a:b4:5d:1a:6c:
d8:44:ff:ca:c8:b0:77:13:a4:12:44:ba:a1:a6:8e:19:e1:80:
e0:58:d0:f4:ce:0c:2e:90:88:bd:1c:02:6f:57:10:86:5a:06:
54:34:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:11:28 2026 by rpki-client