
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/612F557A555911EFA6C99529C4F9AE02.roa
File: 612F557A555911EFA6C99529C4F9AE02.roa (raw, json)
Hash identifier: BxVCyRZ+kcSWXyWijVWvyXobU7Y7NA+IeLRW5qKteMI=
Subject key identifier: B0:26:DA:32:64:B9:F6:EA:D3:95:B0:E7:1E:32:E9:C5:3D:30:C7:4B
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30CE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/612F557A555911EFA6C99529C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:17:11 +0000
ROA not before: Mon 06 Jul 2026 16:17:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136644
IP address blocks: 160.22.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12494 (0x30ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:17:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd507-8536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:21:60:e2:96:f2:54:be:f9:73:25:e5:b4:
e8:28:63:b5:1a:37:bd:f3:33:ba:1a:02:3a:98:56:
d7:7a:63:af:45:1f:c6:d6:dd:7d:22:b3:bb:09:16:
db:84:5f:12:50:da:88:b8:79:e3:ba:03:3f:a8:a8:
c9:e4:c0:53:c2:a2:c7:c9:e7:05:91:a8:5b:4d:47:
28:0d:4d:0b:57:eb:60:6f:eb:34:d7:7c:a6:bf:ef:
37:f6:65:95:33:87:41:b6:7b:c6:45:c7:0a:55:d4:
38:03:0d:3e:95:3e:98:f3:e3:20:15:ac:ee:00:0b:
61:78:95:ca:83:51:ab:ea:e1:f5:b4:77:83:6c:90:
8f:c0:57:30:17:47:b7:5a:79:43:15:b4:f4:52:33:
50:67:f9:23:e8:55:53:12:f1:bc:ba:6c:06:0d:12:
c9:79:ee:4e:4d:71:a9:79:e8:38:c5:df:fb:72:3a:
ad:05:a1:b7:dc:34:96:36:31:b0:14:24:39:94:03:
9d:c6:ed:b4:90:ae:d6:90:b7:af:86:fd:17:19:30:
d5:d9:ec:a3:f4:0f:2d:9d:e2:12:24:9d:2b:e3:a6:
52:ab:dc:21:4b:0f:d7:55:7f:2a:b3:55:7d:a4:1b:
e2:71:ed:fd:32:af:a5:74:6d:d3:67:73:5a:7b:f0:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:DA:32:64:B9:F6:EA:D3:95:B0:E7:1E:32:E9:C5:3D:30:C7:4B
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/612F557A555911EFA6C99529C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:3e:bd:01:6b:0e:00:92:e3:c2:cb:83:2e:17:25:68:db:2b:
94:b6:9e:9a:de:91:d6:ba:e1:f2:3c:30:4c:f0:e0:c7:37:31:
02:6b:36:45:7a:4c:c9:5b:a5:ce:46:f4:24:79:cf:2b:88:76:
a3:ce:12:49:65:a9:7a:7d:84:2a:1c:71:22:e6:8c:f1:41:9b:
98:72:5c:61:3a:eb:36:c2:46:7b:54:63:90:0e:9e:ba:14:15:
53:09:61:9a:b6:91:cf:15:9b:61:93:b8:51:73:20:f8:43:1a:
2d:43:73:fc:8c:ee:3a:e8:74:69:d0:f8:1d:ec:77:00:bc:de:
47:c5:ab:45:c1:a0:1d:a5:90:18:7e:dc:85:18:0f:0c:28:99:
64:71:23:d6:c0:a3:6d:4e:d5:0e:58:52:1b:60:5c:41:6d:59:
11:6b:ea:4a:55:58:80:57:e2:75:a8:d0:2d:71:33:2c:8d:89:
fb:4b:8a:f7:4d:3d:fd:60:25:4f:d8:fd:5e:70:6b:54:cb:21:
15:92:10:3c:a2:b7:fd:8d:a6:b5:fc:cb:80:41:8c:41:05:8b:
87:6b:43:68:6f:fe:f4:9c:37:3c:8a:ae:0b:e6:ce:d1:22:24:
9f:55:03:88:95:1d:fc:40:68:da:f9:69:f9:3a:90:31:30:92:
f4:56:af:a6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYxNzExWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDUwNy04NTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0TEhYOKW8lS++XMl5bToKGO1Gje98zO6GgI6mFbXemOvRR/G1t19IrO7CRbb
hF8SUNqIuHnjugM/qKjJ5MBTwqLHyecFkahbTUcoDU0LV+tgb+s013ymv+839mWV
M4dBtnvGRccKVdQ4Aw0+lT6Y8+MgFazuAAtheJXKg1Gr6uH1tHeDbJCPwFcwF0e3
WnlDFbT0UjNQZ/kj6FVTEvG8umwGDRLJee5OTXGpeeg4xd/7cjqtBaG33DSWNjGw
FCQ5lAOdxu20kK7WkLevhv0XGTDV2eyj9A8tneISJJ0r46ZSq9whSw/XVX8qs1V9
pBvice39Mq+ldG3TZ3Nae/DgxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLAm2jJk
ufbq05Ww5x4y6cU9MMdLMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjEyRjU1N0E1
NTU5MTFFRkE2Qzk5NTI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBYAMA0GCSqGSIb3DQEBCwUAA4IBAQBaPr0Baw4AkuPCy4MuFyVo
2yuUtp6a3pHWuuHyPDBM8ODHNzECazZFekzJW6XORvQkec8riHajzhJJZal6fYQq
HHEi5ozxQZuYclxhOus2wkZ7VGOQDp66FBVTCWGatpHPFZthk7hRcyD4QxotQ3P8
jO466HRp0Pgd7HcAvN5HxatFwaAdpZAYftyFGA8MKJlkcSPWwKNtTtUOWFIbYFxB
bVkRa+pKVViAV+J1qNAtcTMsjYn7S4r3TT39YCVP2P1ecGtUyyEVkhA8orf9jaa1
/MuAQYxBBYuHa0Nob/70nDc8iq4L5s7RIiSfVQOIlR38QGja+Wn5OpAxMJL0Vq+m
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:24 2026 by rpki-client