
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7238A3F6BD0711EF8F35B720C4F9AE02.roa
File: 7238A3F6BD0711EF8F35B720C4F9AE02.roa (raw, json)
Hash identifier: mVBuq6FFJNyS530093LYNy1mrt009F26wWxSbLw9mSA=
Subject key identifier: A1:10:CB:10:7C:81:70:41:5E:56:25:48:CE:95:4C:11:DF:BB:CB:90
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 31CC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7238A3F6BD0711EF8F35B720C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:25:35 +0000
ROA not before: Mon 06 Jul 2026 16:25:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153281
IP address blocks: 160.250.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12748 (0x31cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:25:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd6ff-486d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:17:44:ae:eb:5d:ff:3c:06:46:bf:e9:22:
5f:91:70:c0:d5:2f:fd:50:cc:4e:54:39:df:bd:3b:
6f:36:24:00:8c:e6:58:6c:cd:55:d4:80:a0:17:8c:
53:30:93:6c:f9:9a:41:af:9f:67:a0:de:e2:0d:3a:
2c:a5:8d:13:d2:f5:b2:c0:ed:08:71:24:07:75:56:
5a:f2:11:1b:91:f1:55:da:5f:1d:a1:10:8b:9a:2a:
a1:4f:96:41:5a:b2:29:de:55:57:c7:69:db:e7:51:
73:d8:48:b7:f4:7f:d4:6d:09:a7:ce:52:da:dd:ab:
88:2d:5c:44:6a:25:05:10:bc:bf:df:f0:af:32:3d:
9f:6f:26:fc:4c:3f:2c:ab:c3:2b:95:e2:31:72:93:
6e:97:9a:fa:23:ba:65:a8:21:6b:73:60:9c:25:d6:
73:bf:59:96:6d:ff:be:9d:d8:bd:ae:27:35:4e:0b:
fb:1b:e1:6d:cf:95:88:18:cb:cf:a3:26:cd:76:ef:
15:74:47:73:be:c1:92:f3:f4:05:c3:65:ab:92:23:
c9:b0:75:08:94:f5:29:80:65:04:8c:a1:90:73:27:
c1:7d:1c:50:39:65:85:a0:24:64:69:de:b0:8b:1a:
3d:4d:a5:a2:33:82:94:ad:d4:dc:df:df:14:e4:79:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:10:CB:10:7C:81:70:41:5E:56:25:48:CE:95:4C:11:DF:BB:CB:90
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7238A3F6BD0711EF8F35B720C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.206.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:0e:f7:93:f5:95:ec:d8:0a:e2:d1:36:44:bb:ec:6d:a4:cf:
ca:78:d3:12:07:fd:9f:3f:50:a2:bf:6a:7f:15:a8:1d:da:64:
47:5c:ff:64:22:f0:35:6a:f2:0c:4a:e6:6a:76:86:e7:f8:df:
12:81:48:81:48:c9:f9:58:45:cf:32:9c:e3:15:71:ec:68:c7:
a5:ab:45:4c:2a:b7:67:1e:68:56:e4:7c:fa:80:72:42:6d:97:
ae:3e:eb:a2:3b:5b:aa:02:f2:cc:72:99:4c:21:26:1a:53:52:
46:fb:65:fb:8e:6e:b9:16:b9:97:3b:02:ed:07:3b:66:3f:d9:
8b:4a:e1:29:b6:10:1c:13:e3:e5:c7:02:82:9e:d1:17:a3:ec:
db:e7:f9:2d:68:3e:9b:ae:fa:d4:43:8f:c8:42:3f:4f:3f:2a:
31:ac:74:16:f1:f2:d5:f9:00:66:b7:21:c9:53:06:e7:bb:d2:
1e:3d:a1:77:28:e5:ef:4f:6d:1a:6c:98:08:a1:64:e6:98:b3:
69:ef:28:bc:a1:1c:7e:f1:c9:c2:21:77:48:09:6d:5f:d5:90:
84:93:cd:f6:c2:b7:ba:0a:86:7a:84:6f:59:9e:87:3c:4e:6d:
9a:39:15:e4:85:8d:dd:49:d9:d3:00:6c:a6:14:12:72:df:65:
7f:8d:43:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:04 2026 by rpki-client