
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3930C7CE7FE411EF91A46F21C4F9AE02.roa
File: 3930C7CE7FE411EF91A46F21C4F9AE02.roa (raw, json)
Hash identifier: wixrd68CdjZPbzWmITr5250iIWr/2ZHHY7RZL9vkjqA=
Subject key identifier: A1:97:F5:7A:57:8D:49:88:60:17:92:80:C2:6F:16:46:CC:6B:B0:61
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 31AA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3930C7CE7FE411EF91A46F21C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:24:27 +0000
ROA not before: Mon 06 Jul 2026 16:24:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153221
IP address blocks: 160.187.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12714 (0x31aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:24:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd6ba-56d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:dc:30:4f:25:34:a3:40:3c:b8:ce:c4:2e:
c7:43:c9:de:b1:63:c9:ca:d9:0d:63:5a:40:2e:9e:
ca:bb:f3:79:db:21:2c:f6:a3:a8:9f:40:d9:5c:d9:
0e:2a:13:b9:47:e3:83:1e:12:be:ae:0b:01:6e:89:
b4:91:d4:04:43:4e:f4:39:a9:16:3e:4a:50:93:d9:
7e:13:db:04:e5:75:01:14:17:7e:ca:6b:47:56:39:
a5:f7:7d:1d:31:3b:2f:cb:b1:90:c6:a8:3a:7c:2b:
46:e4:03:4a:a8:da:6f:02:fd:51:f2:ca:78:33:71:
0d:ca:91:fe:0c:5e:71:32:80:ad:ff:96:17:82:d1:
77:d9:8a:c4:27:c0:c8:98:4a:7c:42:80:16:41:d2:
81:f9:56:6d:2f:97:0c:ce:d8:5f:cc:bb:65:65:a0:
99:9b:25:43:82:8b:c7:eb:62:b4:e1:89:a3:0d:ba:
ab:5f:4c:7c:86:dd:20:7e:1c:16:e6:77:61:ce:3e:
51:77:4d:f3:75:b1:11:15:a5:14:8e:63:3c:c0:01:
84:46:25:47:0f:d6:51:2a:4b:04:32:5c:09:e1:2a:
f6:04:07:a4:e4:f2:ed:bd:d1:28:fd:cd:6e:4b:cc:
b1:a0:64:26:ee:53:c5:64:36:99:67:54:53:c5:5c:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:97:F5:7A:57:8D:49:88:60:17:92:80:C2:6F:16:46:CC:6B:B0:61
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3930C7CE7FE411EF91A46F21C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.68.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:77:ae:77:7d:20:91:b5:8d:33:73:3a:70:1b:da:4a:e3:58:
2d:d4:47:2c:23:0b:6d:0c:3a:13:46:8b:86:91:f4:10:cd:1c:
74:1e:2f:72:3c:56:fe:d4:07:19:31:7a:c0:69:9f:54:ab:29:
43:8b:ca:3f:3e:e1:50:62:75:db:03:c4:53:4d:d6:21:8a:21:
0e:7d:37:3f:f6:5a:8d:6b:b6:4c:4c:dc:89:67:44:50:68:63:
90:14:36:5d:e5:3f:87:52:26:48:d8:b5:a7:9c:2c:e4:d2:67:
ea:3c:63:76:48:c0:1d:e2:07:c5:58:88:e0:9e:83:dd:cb:c1:
64:c4:8a:11:6c:fa:73:b8:0f:d3:e7:81:20:96:33:45:ac:eb:
84:05:02:c9:e2:7c:86:d1:5c:b5:7f:d9:b6:9b:62:d3:3f:11:
ea:2c:54:db:f3:a9:cb:e9:36:11:45:48:cf:50:ab:bd:42:d4:
b6:49:fb:3e:0c:e3:58:b8:8f:da:3b:5a:b2:2a:1b:3b:6a:88:
57:84:6f:92:89:6f:3c:85:1f:e1:cd:f8:b8:d8:27:15:bd:77:
99:5d:c6:06:e1:b6:91:0b:f0:92:5c:7a:42:85:a2:3d:f4:34:
cf:80:71:50:7d:0e:02:2c:93:e6:3f:51:96:80:ba:74:6d:43:
8a:35:25:ec
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYyNDI2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDZiYS01NmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw5HcME8lNKNAPLjOxC7HQ8nesWPJytkNY1pALp7Ku/N52yEs9qOon0DZXNkO
KhO5R+ODHhK+rgsBbom0kdQEQ070OakWPkpQk9l+E9sE5XUBFBd+ymtHVjml930d
MTsvy7GQxqg6fCtG5ANKqNpvAv1R8sp4M3ENypH+DF5xMoCt/5YXgtF32YrEJ8DI
mEp8QoAWQdKB+VZtL5cMzthfzLtlZaCZmyVDgovH62K04YmjDbqrX0x8ht0gfhwW
5ndhzj5Rd03zdbERFaUUjmM8wAGERiVHD9ZRKksEMlwJ4Sr2BAek5PLtvdEo/c1u
S8yxoGQm7lPFZDaZZ1RTxVybfwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKGX9XpX
jUmIYBeSgMJvFkbMa7BhMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzkzMEM3Q0U3
RkU0MTFFRjkxQTQ2RjIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoLtEMA0GCSqGSIb3DQEBCwUAA4IBAQDKd653fSCRtY0zczpwG9pK
41gt1EcsIwttDDoTRouGkfQQzRx0Hi9yPFb+1AcZMXrAaZ9UqylDi8o/PuFQYnXb
A8RTTdYhiiEOfTc/9lqNa7ZMTNyJZ0RQaGOQFDZd5T+HUiZI2LWnnCzk0mfqPGN2
SMAd4gfFWIjgnoPdy8FkxIoRbPpzuA/T54EgljNFrOuEBQLJ4nyG0Vy1f9m2m2LT
PxHqLFTb86nL6TYRRUjPUKu9QtS2Sfs+DONYuI/aO1qyKhs7aohXhG+SiW88hR/h
zfi42CcVvXeZXcYG4baRC/CSXHpChaI99DTPgHFQfQ4CLJPmP1GWgLp0bUOKNSXs
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:00 2026 by rpki-client