
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2DE55F42840611F1B4C7D26A97A30FBC.roa
File: 2DE55F42840611F1B4C7D26A97A30FBC.roa (raw, json)
Hash identifier: FRuRraeUrJv1k4UvmwaYPXLVUk02VDnLdeHLTYAyG8M=
Subject key identifier: DB:58:CF:9C:2B:87:B2:52:9C:6D:FC:09:BF:12:87:53:01:76:5F:32
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 324D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2DE55F42840611F1B4C7D26A97A30FBC.roa
Signing time: Mon 20 Jul 2026 06:42:30 +0000
ROA not before: Mon 20 Jul 2026 06:42:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146943
IP address blocks: 160.187.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12877 (0x324d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 20 06:42:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a5dc356-d1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:e6:a0:71:22:b3:c2:bb:63:ec:a0:3b:63:
69:59:6b:4d:17:20:b8:0c:65:89:8c:96:de:94:b3:
6b:d1:dd:8a:c8:1c:02:ed:c2:8a:7b:ae:95:85:bb:
46:b8:9b:ba:15:46:8f:d1:4b:4b:52:d8:2b:1b:2c:
2a:81:f2:55:97:f2:7b:b2:0a:e9:c5:31:a6:19:a0:
92:06:5f:d2:5f:17:6b:f0:00:91:99:c1:56:c6:87:
8b:5a:77:62:03:59:86:3c:2c:96:01:33:69:39:f5:
ee:8d:43:28:6a:70:6a:0d:e4:c1:db:ab:a4:95:f8:
b6:42:18:32:86:45:c3:48:51:fd:d5:ca:31:93:f8:
04:21:07:bf:62:6c:9b:13:2b:2a:c8:5d:39:16:0e:
1a:9b:c4:2b:97:23:14:e6:ae:59:cc:70:2f:9c:10:
dc:b5:bc:af:05:12:12:5c:56:ca:1e:af:93:9d:ff:
8d:04:94:ad:e7:73:03:2a:61:8e:03:e7:31:0a:ef:
a1:b9:9c:1c:c9:65:99:3f:d4:10:8d:83:07:1c:c1:
a9:54:70:c9:f2:db:8d:5b:3e:e7:93:7c:41:a6:41:
08:58:fa:91:3c:a7:42:19:e5:45:58:c9:3d:97:87:
57:99:0b:41:cd:ce:f1:2f:fe:dc:98:c1:77:93:7f:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:58:CF:9C:2B:87:B2:52:9C:6D:FC:09:BF:12:87:53:01:76:5F:32
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2DE55F42840611F1B4C7D26A97A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.49.0/24
Signature Algorithm: sha256WithRSAEncryption
76:29:c5:dc:ba:13:19:f8:33:1f:f6:4c:d8:bf:f7:26:25:66:
d6:3c:59:4a:0e:80:0f:13:c0:ea:9c:b4:a5:58:44:37:45:d8:
29:bf:a5:e3:76:0c:90:c5:f4:69:f3:6f:44:4c:70:da:ea:60:
ef:f3:04:57:9b:64:c1:d8:a5:71:b7:f7:ac:67:35:40:62:b3:
4d:e0:b4:07:0c:be:02:95:5b:26:10:a3:d4:2d:c1:da:ac:fe:
e6:c1:99:af:47:25:fd:41:8b:28:8c:1a:26:b7:9a:1c:77:d1:
dc:96:ef:c2:07:67:5b:54:48:9c:a9:03:81:14:1a:42:31:5f:
a7:f9:52:1e:d8:9d:d6:03:5b:a6:a3:0f:ce:9d:fe:37:91:f1:
74:5f:47:68:0d:6e:a5:0a:9d:99:27:db:b3:fe:c6:c5:01:d5:
73:95:74:05:3e:c9:b9:f9:c0:cd:8e:78:b0:5a:6f:69:44:1f:
ce:db:d0:72:76:90:84:82:09:e0:2f:ae:5d:8f:40:55:33:bc:
63:0b:f0:64:55:a2:cd:53:62:db:0c:aa:c9:99:0b:74:c6:aa:
2f:3e:ec:8b:2f:27:33:1d:e1:eb:73:9f:45:4d:ca:64:bd:05:
e1:de:f7:2b:d9:4f:ee:17:39:99:37:58:8f:8d:98:18:57:d9:
1b:8b:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:05 2026 by rpki-client