
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/36B4144C8FA211EF8EBEBC7BC4F9AE02.roa
File: 36B4144C8FA211EF8EBEBC7BC4F9AE02.roa (raw, json)
Hash identifier: njf3Jmho3Ov/eTBpT6/7QNnu16kHsftrWPChCFreWyQ=
Subject key identifier: C4:D7:9B:AF:DC:C8:41:25:F6:8B:46:39:98:73:E9:12:87:A4:DD:F5
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30D3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/36B4144C8FA211EF8EBEBC7BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:17:21 +0000
ROA not before: Mon 06 Jul 2026 16:17:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137107
IP address blocks: 160.187.78.0/23 maxlen: 24
162.4.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12499 (0x30d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:17:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd511-49b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:53:b1:b7:2f:6d:a5:bc:ab:11:c8:a4:dc:
53:77:79:65:ea:02:73:cb:4b:25:98:3d:3c:db:78:
c9:b4:d7:57:70:ac:6a:75:f7:60:06:ae:b4:ae:18:
e3:c2:10:70:ec:f2:b9:9d:04:04:ed:30:f9:ab:db:
0b:12:c3:21:3e:cb:9e:3e:40:0b:9d:5c:94:34:77:
a2:03:3e:9b:68:54:7c:be:71:ed:21:2a:7f:03:82:
15:0d:68:14:ba:e7:e1:5e:d5:40:e5:52:1f:31:81:
34:d8:34:d2:5f:6c:63:9f:8a:2f:7d:3f:1f:9c:23:
17:36:50:b0:73:7b:42:2c:39:70:7d:a1:39:c6:e3:
22:25:c7:6e:2f:78:cd:ff:53:63:0f:72:b3:4c:af:
6c:50:f7:b7:2a:20:ad:c8:dc:fa:ed:00:f8:97:82:
ae:4f:83:ab:da:5d:23:b2:aa:56:a6:aa:df:c3:98:
78:33:f5:fd:08:27:52:0d:45:d1:86:06:03:7b:22:
0a:66:bd:1b:20:81:5d:69:a7:d4:2a:ec:c5:bf:77:
5f:8e:a9:2a:0d:19:38:71:7c:45:73:5f:9f:7e:0f:
af:4e:0c:85:48:86:42:5c:e2:18:63:a5:91:ad:66:
ad:31:47:49:91:4c:5e:32:a6:1a:96:fc:e9:03:e2:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D7:9B:AF:DC:C8:41:25:F6:8B:46:39:98:73:E9:12:87:A4:DD:F5
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/36B4144C8FA211EF8EBEBC7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.78.0/23
162.4.10.0/23
Signature Algorithm: sha256WithRSAEncryption
67:ec:bc:18:3d:9a:93:22:4c:23:c6:07:88:82:69:db:87:ab:
31:5a:c2:7b:3e:a5:1a:fb:06:2c:a9:1d:ea:c9:c4:b6:ab:31:
7d:3f:aa:cb:5e:be:1c:4c:31:3b:4e:19:35:e2:ff:a5:49:3d:
7a:8a:4d:9e:60:e2:09:3f:e2:16:e5:5f:36:f6:9d:f9:5f:77:
fe:ad:4b:bb:7d:bb:59:30:b2:18:8e:60:0f:f9:dd:92:62:1c:
22:41:54:45:72:3a:d4:12:c1:89:6d:3f:41:4e:c8:cf:59:26:
5d:88:23:fe:ea:a2:a3:97:d0:4a:20:c6:da:ec:91:3c:14:65:
74:6e:bd:b9:50:77:16:0e:9c:e4:ea:47:0f:3f:59:7b:65:0b:
c7:48:ed:85:fc:68:54:5c:54:60:7f:48:f1:09:96:50:0e:f0:
58:09:40:d8:a6:6a:e6:9d:f6:b5:f4:57:42:69:27:c6:34:e3:
f6:c5:12:12:af:d8:28:bb:79:06:55:27:56:13:d0:83:3f:2d:
3d:d2:33:95:5d:29:0f:8e:18:bf:d6:64:5b:31:08:bb:08:c2:
0f:8b:73:8a:06:4c:92:51:21:1a:79:d5:ae:a2:cf:12:a9:79:
ec:de:fd:94:5e:e8:4c:bd:45:03:de:31:4d:b7:29:5b:66:17:
1f:bf:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:09 2026 by rpki-client