
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/297936B0088611F08C1DB151C4F9AE02.roa
File: 297936B0088611F08C1DB151C4F9AE02.roa (raw, json)
Hash identifier: BT+VI57pQ9Fo8AI+v8FLQurO99Q1ujD/73CZr8OQoAA=
Subject key identifier: FE:53:81:DB:93:71:46:C2:E0:75:8D:A0:DE:E9:1F:43:17:AF:91:35
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 309E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/297936B0088611F08C1DB151C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:15:33 +0000
ROA not before: Mon 06 Jul 2026 16:15:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133640
IP address blocks: 160.191.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12446 (0x309e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:15:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd4a5-3bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:f5:62:db:e7:01:b4:a2:59:e5:88:74:da:
85:ca:b5:fd:05:88:44:5a:53:8e:7e:07:d2:d3:8e:
43:20:2b:5b:f5:55:ea:e2:59:fe:00:57:fb:6a:f1:
48:f1:38:34:d9:37:cf:8f:e1:0e:55:95:e5:36:ca:
ca:27:a0:6e:22:ad:bc:50:96:a9:4f:05:17:f8:67:
d1:54:75:47:db:c9:ca:c6:48:40:4e:f8:c0:03:4a:
7e:31:a4:bb:cf:d1:2f:6e:cc:f4:c4:a9:1c:3d:7e:
29:f2:ad:1c:91:4d:dd:4e:17:36:cd:85:c6:e7:e3:
30:13:6f:72:bf:9e:2f:7b:1b:07:c5:c3:3e:6c:81:
5a:b1:37:76:6d:ff:29:b9:87:91:20:90:48:78:3b:
90:98:47:48:42:12:2a:83:03:2a:f8:f9:0a:fe:e3:
8d:d4:3b:c2:1d:38:d7:85:60:f8:6e:57:8f:0b:83:
38:00:f5:5e:49:9f:3c:dd:61:d2:a5:52:84:12:5b:
4e:0d:32:bd:95:43:57:74:44:d6:33:4e:95:77:44:
f5:3d:7b:d0:92:ed:bb:e5:35:6d:f3:ee:2b:e3:f1:
f7:ad:00:5c:8a:b5:2f:d6:80:79:94:92:7c:73:c4:
ed:d8:2e:4a:2b:3a:63:33:91:28:c6:b7:bd:1f:29:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:53:81:DB:93:71:46:C2:E0:75:8D:A0:DE:E9:1F:43:17:AF:91:35
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/297936B0088611F08C1DB151C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.144.0/24
Signature Algorithm: sha256WithRSAEncryption
62:db:00:67:e0:c9:ba:d9:c1:ca:f8:27:c1:7f:de:fa:30:45:
f8:85:48:7c:76:0b:67:69:4d:c3:7d:26:03:03:68:48:09:9e:
3e:43:57:84:69:48:e9:bf:52:a4:4c:ca:40:8c:1a:b4:47:d5:
a3:91:b8:d7:29:60:c9:d2:c1:ba:ca:73:0d:c9:aa:d0:82:e8:
1b:50:e0:d2:8a:0d:86:57:11:e1:95:b6:ea:0e:b3:2e:a0:60:
8f:85:b8:42:a2:b1:fc:a4:5e:ff:0d:cd:f7:18:d8:3e:95:ed:
ca:8e:4b:58:46:15:8c:22:70:d5:2b:6e:79:56:2e:4c:82:40:
21:a9:5d:9a:85:15:cb:e0:84:cb:cb:fa:e8:b4:87:a1:2d:9d:
08:0c:5b:9a:5b:d0:8e:25:5f:03:4e:0f:27:b4:1e:57:4f:52:
ae:5c:3c:0e:ce:fc:45:36:d7:76:87:63:79:41:df:b8:bb:e7:
20:d8:99:74:d8:2e:0e:cf:65:7b:d0:94:15:ea:49:c1:5f:87:
bb:71:6b:c4:13:59:b9:eb:ef:30:f4:b6:9b:6e:27:11:85:6a:
c8:13:a3:6b:a1:9f:9f:5a:a1:9f:d5:9c:8b:b2:9d:cd:79:c9:
a0:86:c0:2f:78:75:80:05:90:d0:9c:cd:32:97:94:49:1d:cc:
3b:d3:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:48 2026 by rpki-client