
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56494EB6DD5F11EFA1B96834C4F9AE02.roa
File: 56494EB6DD5F11EFA1B96834C4F9AE02.roa (raw, json)
Hash identifier: ksxcSKMS2c3he7mg3BK7o2HRl0R5T6h2GcNBlPfWlhU=
Subject key identifier: F9:61:E4:A7:36:7D:EF:5E:2E:23:57:1E:DC:27:68:21:D4:F9:9A:8A
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 317A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56494EB6DD5F11EFA1B96834C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:22:52 +0000
ROA not before: Mon 06 Jul 2026 16:22:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152522
IP address blocks: 160.22.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12666 (0x317a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:22:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd65c-7e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:bf:2e:1f:ef:f7:61:4a:2b:1a:48:b0:18:
57:58:33:63:75:67:7c:77:7d:26:e3:3a:57:d6:7c:
a1:b3:77:28:f7:8b:8d:5a:13:02:5e:9d:fd:55:d1:
3c:a1:16:0f:19:97:b1:8c:1c:04:e8:78:b7:d0:65:
b8:50:6e:45:29:6e:fa:11:eb:16:34:4f:00:0b:98:
44:82:fb:3c:9f:0c:f7:db:11:32:a3:9e:6a:0a:c6:
e5:47:9b:82:6a:f1:d0:c9:3a:9d:f6:11:e7:0f:5b:
5c:4d:70:09:e7:6f:74:02:66:98:56:49:ed:ad:28:
cb:4e:0a:52:e2:49:01:06:b4:d5:59:5c:98:2b:11:
c5:32:62:5b:44:3f:87:e1:fc:d5:73:78:57:3f:b4:
05:29:e0:99:99:71:15:25:ef:ea:91:da:41:2c:57:
8f:fa:2e:46:c4:e3:f8:e9:6d:06:d0:5e:4c:5f:88:
d4:6f:2e:bc:4b:41:f8:b9:6c:2a:5c:4e:c6:f3:cc:
ee:d3:f1:b8:a9:9c:32:0b:71:13:af:26:84:2e:4f:
ee:1b:d9:7e:96:b2:25:e2:4a:69:84:19:c3:e7:f0:
98:28:19:a9:02:ba:ae:92:55:f4:21:87:c3:aa:54:
f4:9b:e8:6a:06:f5:85:97:3f:a2:0a:55:af:f5:ee:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:61:E4:A7:36:7D:EF:5E:2E:23:57:1E:DC:27:68:21:D4:F9:9A:8A
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56494EB6DD5F11EFA1B96834C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.86.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f9:52:e3:b9:18:04:18:50:5c:21:bd:78:e6:e8:64:97:aa:
dc:7e:6f:6a:34:53:9f:74:10:72:75:d0:db:9e:5b:c9:00:34:
a6:4e:fa:7f:50:ef:48:d1:75:30:a1:9a:3a:cb:45:ed:ef:a4:
b1:c2:61:d5:c1:9a:9e:20:aa:ee:d5:5c:15:01:d6:96:60:03:
99:08:42:0c:a7:d7:f0:61:a0:40:87:b2:2f:11:88:fb:7a:fb:
7a:fc:50:93:3a:80:5f:b7:72:36:2e:c0:63:72:9b:24:81:f8:
c1:01:ab:f6:43:97:48:f7:f3:75:2a:3a:41:8f:22:49:3e:9d:
f9:39:b6:be:cb:55:77:04:30:27:49:71:fc:49:79:40:de:68:
0e:dd:bd:25:2f:47:c7:5b:ae:63:52:81:5a:f4:9e:78:71:be:
3d:ee:73:2f:da:92:7a:57:65:5c:3b:86:32:bc:2a:bd:e2:0b:
ac:1b:2b:31:0d:42:84:cd:2b:29:82:d9:2b:15:a8:4e:2b:f6:
aa:e2:fe:d9:b3:0d:f5:06:58:34:c8:d9:95:e9:d8:90:9d:49:
6f:d2:99:11:b1:12:3f:8c:fb:b4:93:ec:a9:62:c5:cd:3b:36:
ee:6c:77:87:21:26:ce:80:60:83:d3:f9:16:41:41:aa:74:25:
c5:27:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:23 2026 by rpki-client