
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A1BA2F2A58B11EF858D0F53C4F9AE02.roa
File: 5A1BA2F2A58B11EF858D0F53C4F9AE02.roa (raw, json)
Hash identifier: D0WcEJBzp8FmqsdNswS+EePrjYtfws3edYk8XLsqT70=
Subject key identifier: 49:5B:ED:8D:CE:EB:B7:B2:C7:E9:14:EB:8D:B9:41:F2:97:DD:F1:58
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3107
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A1BA2F2A58B11EF858D0F53C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:19:03 +0000
ROA not before: Mon 06 Jul 2026 16:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141881
IP address blocks: 160.191.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12551 (0x3107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd577-c95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:50:54:72:15:42:3e:96:c0:3a:ec:ca:b0:
c9:cf:9a:4c:2b:55:fa:e6:bf:32:38:bf:f5:9f:1b:
2b:37:dd:7e:c9:7b:22:8f:6b:88:ea:aa:7d:70:db:
d2:2e:8e:5f:39:20:35:cc:bc:20:13:b9:47:c6:f4:
db:0b:ff:e3:6d:9f:04:d8:bc:50:23:30:30:51:97:
cf:05:cf:fc:1d:1d:7c:a8:f7:4f:3a:67:4d:4a:e2:
ab:72:ec:6c:e5:c8:18:3a:25:37:b1:5b:40:e4:db:
83:8d:0c:16:bc:23:c1:23:a7:8c:58:b7:af:e9:29:
f6:03:f2:d1:8c:0c:6c:67:49:68:48:07:05:70:2b:
11:c1:64:c8:1c:99:2d:cd:98:65:ab:c3:83:78:16:
53:54:2b:e2:ae:d6:26:2b:28:17:fe:be:db:06:f6:
ed:be:6b:05:9d:58:50:f8:db:8f:1a:99:36:c6:44:
55:cb:d0:82:61:03:26:d5:e6:81:68:af:75:06:d5:
66:d2:80:5b:3b:9b:e1:4f:4d:ed:6c:57:db:e5:ff:
f6:e3:c4:6b:27:1a:25:a4:8e:4c:43:69:0c:e0:70:
fe:b3:4e:7e:8d:b6:26:80:4f:8c:a3:a3:66:fe:5f:
6c:5b:e8:b9:61:04:ea:ae:61:ff:1f:ca:aa:2c:87:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5B:ED:8D:CE:EB:B7:B2:C7:E9:14:EB:8D:B9:41:F2:97:DD:F1:58
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A1BA2F2A58B11EF858D0F53C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c5:bc:b9:09:72:15:e8:90:47:f1:a0:ad:b1:74:52:06:bd:
19:bd:a1:ca:0d:4b:bb:e8:1a:43:4f:9e:a5:db:77:34:10:62:
87:d1:93:fe:14:62:f6:8e:a3:63:ec:ea:9e:ac:fb:d2:7c:d1:
c7:2d:9a:f2:df:72:8b:70:e5:49:a3:cc:c0:6f:27:76:eb:3d:
b8:40:a6:b8:b8:fc:65:fe:c4:bf:73:a6:49:9e:d9:77:72:a1:
46:b7:2b:7a:56:fc:46:c0:2c:7f:a1:41:6a:c6:a8:fb:af:71:
df:6b:c1:f1:1c:e0:8d:67:6c:e6:df:5a:fb:32:5c:96:27:26:
d2:8b:86:ea:0f:34:3e:a0:a2:4c:1f:b3:d3:90:c0:b0:95:ce:
02:c7:eb:01:1b:49:f5:d7:69:d6:43:92:c8:65:2f:d3:aa:6d:
86:d8:4c:f4:19:60:26:e1:c5:e8:13:8f:39:af:54:a9:2d:42:
87:47:40:ee:61:7a:77:14:a0:06:9d:37:e7:aa:b6:19:b2:f7:
96:14:72:1e:89:02:76:8c:a5:3e:df:33:ce:dc:76:50:16:0b:
c0:cc:2a:fe:e6:e3:53:56:5a:79:65:d8:96:4a:21:18:eb:8f:
22:fa:a0:84:9e:d4:48:a2:cf:4b:e0:67:33:84:81:30:d8:89:
8a:2e:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:47 2026 by rpki-client