
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2EE9A7E01EA411F0AFB88E2BC4F9AE02.roa
File: 2EE9A7E01EA411F0AFB88E2BC4F9AE02.roa (raw, json)
Hash identifier: P4p5TJNDLAiHwZTURdgxGCHXM1Gh011yE2mDpbI/SBc=
Subject key identifier: FA:15:6D:3B:23:D8:12:7A:7E:C2:FA:BB:2F:77:ED:9C:FA:5E:81:7E
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F9F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2EE9A7E01EA411F0AFB88E2BC4F9AE02.roa
Signing time: Sun 31 May 2026 16:27:33 +0000
ROA not before: Sun 31 May 2026 16:27:33 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153267
IP address blocks: 160.250.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12191 (0x2f9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:27:33 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6175-b966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:13:e6:83:c0:ec:92:62:ce:f9:ec:7e:ea:21:
66:13:65:19:f3:e8:61:3b:b3:2e:5b:25:72:d2:38:
cd:4d:cb:5d:65:87:24:42:91:b4:ab:c9:59:bd:c0:
b9:bd:58:2e:fc:93:81:2c:db:d2:3c:45:7e:d2:e8:
12:b0:4a:21:fc:2b:a3:91:dc:d7:09:ff:7d:3a:43:
5e:84:47:7f:ab:20:94:71:9b:46:d5:1d:87:d5:5d:
97:91:7e:fa:d2:02:8a:86:5a:e3:b3:4e:7c:1e:16:
a2:be:7e:fc:20:27:d8:a6:76:2d:f1:2b:be:db:ce:
a2:2a:1d:1d:f6:b3:7d:2d:e9:0a:fe:99:56:89:55:
cd:62:a5:e6:03:d3:ab:5a:9f:70:34:1c:86:75:3c:
e4:95:5b:bf:00:06:2f:cb:3f:3d:ae:72:13:ad:fb:
b8:e3:c9:c0:ad:57:0b:e6:a8:6e:97:ac:4e:2e:7c:
b1:f7:ba:f6:33:1f:ed:ad:fe:a8:33:77:df:67:a4:
46:78:1c:16:e6:27:c2:48:a6:4c:fd:63:96:59:ba:
f0:53:dc:c7:06:98:78:12:7d:1d:ea:6a:46:8c:4a:
cf:65:63:6f:22:78:1e:e6:77:d3:96:05:a4:aa:af:
3c:76:ad:44:ac:b5:f8:ed:e6:23:45:66:4c:a6:00:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:15:6D:3B:23:D8:12:7A:7E:C2:FA:BB:2F:77:ED:9C:FA:5E:81:7E
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2EE9A7E01EA411F0AFB88E2BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.148.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:2b:db:67:11:05:45:2a:0c:67:13:d1:4d:36:ca:75:8f:11:
df:56:a8:b0:ca:0a:a3:1f:7b:1b:72:de:91:ef:06:74:f1:9a:
2e:cd:01:00:0c:a1:ac:90:47:fe:61:f2:1c:84:fb:89:5d:42:
47:a1:71:2c:52:3b:25:44:8e:60:aa:6b:95:4d:1b:1d:ad:01:
3f:85:75:0e:41:eb:91:89:69:1b:9a:de:b4:54:14:10:27:a6:
03:6d:3b:5b:f6:58:b1:58:8c:7d:31:df:20:ed:13:9c:af:7e:
52:47:2d:4e:8a:ca:1b:ee:90:f9:16:13:dd:7c:d7:7f:fa:7a:
3f:07:17:13:08:83:aa:a8:d4:d5:83:4a:42:24:08:2b:57:1a:
e6:07:d9:cc:99:ab:1a:71:78:0a:a4:cf:30:6e:24:0a:2a:81:
d9:3a:3a:3f:8a:02:35:5c:f5:92:58:65:e4:e0:2e:69:44:0f:
61:9d:3c:47:61:a0:6e:de:2e:ba:a6:5b:e2:0f:9b:cc:9a:c5:
bf:67:10:02:fa:f5:4a:e3:5b:47:6e:b0:11:62:42:6f:ca:ca:
24:0a:d9:5c:cf:a0:d5:dc:f7:da:64:ee:5e:f7:89:69:63:4d:
92:b3:f6:c1:d2:b3:bf:b8:d1:86:62:7d:4f:e6:ec:fe:36:96:
12:55:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:52 2026 by rpki-client