
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56A321D62F9811EFBE3F3324C4F9AE02.roa
File: 56A321D62F9811EFBE3F3324C4F9AE02.roa (raw, json)
Hash identifier: a7eGh+woMAsu6UfX8Z6jhQXqGSMf2YN4+m8TeE5KiCs=
Subject key identifier: CE:65:F0:E9:23:E8:23:9D:66:9E:A3:5E:AA:8F:41:D4:53:17:BB:10
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F5B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56A321D62F9811EFBE3F3324C4F9AE02.roa
Signing time: Sun 31 May 2026 16:25:26 +0000
ROA not before: Sun 31 May 2026 16:25:26 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 152535
IP address blocks: 160.22.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12123 (0x2f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:25:26 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c60f6-591b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:62:70:e4:27:d2:d2:8f:14:da:b6:a7:85:
ea:ce:24:02:16:a0:2e:cc:bf:f9:36:06:7d:aa:72:
8f:1a:64:08:97:70:b5:ba:88:e2:1e:e1:04:9b:7c:
42:0a:61:8e:b1:e8:83:e5:eb:e4:6e:50:96:c9:f1:
02:be:bf:9d:60:c2:ce:24:f3:10:c0:b0:ef:9e:5b:
fd:90:8d:73:68:50:3a:78:55:28:c1:f1:bf:e9:e2:
2d:8a:89:bc:6b:24:10:98:9d:bd:74:6a:17:bb:07:
5d:19:56:96:de:c7:3e:df:60:b3:bf:f1:d6:8b:81:
dd:6c:63:ee:b0:40:92:08:59:11:04:0c:9d:7a:30:
ab:44:78:06:49:a9:ad:8b:24:22:be:be:91:44:5d:
5d:25:d8:da:b0:21:69:a0:2d:81:66:0a:72:d5:3b:
75:99:00:57:d6:c3:b9:85:ff:89:05:2c:15:2f:6d:
2e:ce:a1:ee:f4:a8:5b:df:72:c8:12:63:7f:f5:ae:
a4:a4:82:e1:4b:bd:c5:2f:06:2d:d9:42:60:c3:f4:
e9:de:08:54:e8:ad:da:70:89:9f:e3:92:44:2d:62:
7d:ef:03:8c:ac:47:d1:f0:17:ae:31:a7:90:03:68:
ee:e2:06:2a:1f:d0:0c:64:e2:be:d4:8d:6e:c2:5c:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:65:F0:E9:23:E8:23:9D:66:9E:A3:5E:AA:8F:41:D4:53:17:BB:10
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56A321D62F9811EFBE3F3324C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.73.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b8:14:b9:25:f5:6f:07:16:2f:bc:9c:a6:1b:68:fb:1f:2d:
4e:f1:0e:25:ae:f2:c0:07:5d:d2:16:96:1a:45:10:ac:b0:09:
9d:d6:c5:c2:08:4e:7a:9a:01:a9:03:db:e4:27:17:c7:79:c0:
71:05:68:44:17:b9:f8:af:dc:bb:eb:46:6f:9e:aa:23:72:e9:
9d:00:9c:31:05:eb:16:00:45:e5:7b:49:1f:e6:03:41:1c:24:
2b:a2:52:44:c2:43:c9:18:df:fa:7a:a3:49:53:36:d4:27:45:
e5:a8:b2:31:13:8a:88:ed:db:18:c0:dd:cf:66:71:46:c7:ad:
41:cb:01:b7:0d:3a:2b:74:7e:4b:ad:ea:af:fd:82:81:04:ef:
61:4a:25:99:43:9f:dd:44:b6:8c:f4:77:80:2c:f9:a2:ef:f2:
cb:63:c5:33:e4:02:29:8c:15:a0:cd:fb:55:c6:d4:50:f4:09:
e3:39:c9:77:46:69:6b:35:3c:23:7f:77:8a:40:c0:37:29:36:
93:21:57:2a:45:90:60:71:51:10:48:ec:c8:78:d5:f0:86:bc:
da:3d:5f:58:cd:82:a0:51:20:15:6e:da:aa:03:2f:49:2c:5c:
2e:95:cc:4e:a2:52:97:73:b0:84:43:b2:e9:e1:2a:16:e7:ae:
b9:48:c2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:09 2026 by rpki-client