
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5BB9C98457AC11F1AC916D38BE833773.roa
File: 5BB9C98457AC11F1AC916D38BE833773.roa (raw, json)
Hash identifier: uDwHAqb8XlfQ3KzXzSjez/RyLO9La8a18KulCwdUVV8=
Subject key identifier: 58:93:4A:98:77:EA:4A:B1:03:AE:74:8A:A2:ED:7B:E0:60:B5:BC:F7
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 316C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5BB9C98457AC11F1AC916D38BE833773.roa
Signing time: Mon 06 Jul 2026 16:22:25 +0000
ROA not before: Mon 06 Jul 2026 16:22:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152503
IP address blocks: 160.19.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12652 (0x316c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:22:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd640-927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:19:13:4e:00:fa:2b:2c:8c:77:68:45:65:
36:5f:21:59:0b:8d:ad:41:80:bd:f2:dd:c8:e1:7a:
b6:0a:db:34:2d:bf:80:f2:b7:d4:8c:72:73:1b:63:
a5:50:2f:72:da:31:4c:fa:6b:fe:40:b7:d2:5f:3c:
29:c6:ca:c7:b8:2d:3b:09:fb:24:d0:c7:69:bb:f1:
b8:c0:bb:52:70:1c:8d:ff:ba:c6:db:d1:c6:1f:74:
b5:39:bb:42:a7:ca:4d:ca:b0:56:a9:65:dd:af:80:
7b:d7:c5:97:b0:ef:aa:ff:47:20:2a:dc:64:21:1e:
0a:f7:87:4f:fb:30:00:75:93:28:28:7a:b6:43:04:
1d:07:6e:84:3a:16:35:c1:c6:2e:0f:d0:b4:87:77:
ac:ac:bb:5b:4a:c9:e2:1f:1e:63:0d:9f:54:3f:bd:
2b:20:eb:59:80:28:cc:32:7e:b0:77:ec:b1:5f:28:
0c:2c:7c:27:de:a2:63:9f:aa:38:af:99:16:3a:9a:
39:3b:cc:19:8b:14:fb:5a:77:38:b0:cd:4b:90:cd:
0f:5a:4c:e5:f1:4b:44:05:a6:e8:cd:52:7f:48:0f:
7a:58:84:44:dc:5d:e7:75:7e:54:cf:60:dd:f2:77:
24:2a:a0:e1:f3:ae:1c:54:f8:e6:28:80:08:96:6f:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:93:4A:98:77:EA:4A:B1:03:AE:74:8A:A2:ED:7B:E0:60:B5:BC:F7
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5BB9C98457AC11F1AC916D38BE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
160.19.40.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6e:b2:f9:d5:7a:b5:97:0c:1c:a8:78:30:d8:36:d1:e1:c0:
24:96:bd:d8:d0:c8:ac:c5:fc:0c:f9:45:c2:5c:c3:31:5d:8e:
ee:70:e0:ff:d3:33:bc:2b:2c:2a:06:6b:2d:ce:c5:76:06:cd:
af:07:69:8e:36:da:f4:31:08:e3:96:c7:77:99:ff:e2:b0:42:
0a:e4:50:16:64:01:33:2f:a2:4f:c9:a6:dc:cb:8c:b2:d0:8d:
93:ae:56:45:c8:c0:e2:52:1a:0b:87:2f:2c:3c:79:43:d6:90:
6e:e8:0b:b0:14:7f:02:d5:a1:4a:62:85:5a:bb:66:af:1f:4a:
23:81:df:9a:7a:0b:ae:59:f9:a5:c3:d2:3d:8e:98:1c:23:3b:
83:f3:21:4c:ac:ca:e1:3a:df:9c:8a:b2:ee:94:42:3b:47:42:
7b:3e:18:4e:6a:48:fc:e6:ac:e6:8c:f2:b9:eb:78:19:cd:ac:
11:4f:42:07:30:fd:3d:2b:d4:68:e7:4d:95:c3:4e:1d:51:11:
35:f0:2b:8f:57:3e:1e:b6:ff:71:e3:5d:0c:fe:86:98:6a:b9:
8b:03:0f:88:2c:a5:5a:75:8c:8c:27:98:34:c0:ee:2c:ce:e9:
7e:df:8b:ca:a1:54:d0:a0:94:32:05:17:e7:47:88:96:e8:c0:
aa:a0:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:50 2026 by rpki-client