
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/789D214AED3A11F08DE1F4EF4A6F56BC.roa
File: 789D214AED3A11F08DE1F4EF4A6F56BC.roa (raw, json)
Hash identifier: 1BeHQShr6cKcEJy5ESxtMynUzziYdk2SpnQSCA06BHc=
Subject key identifier: 30:23:96:23:02:41:21:FF:3D:14:D7:18:FA:3A:09:1E:3A:DA:37:31
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2EF8
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/789D214AED3A11F08DE1F4EF4A6F56BC.roa
Signing time: Sun 31 May 2026 16:22:16 +0000
ROA not before: Sun 31 May 2026 16:22:16 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 149020
IP address blocks: 160.187.141.0/24 maxlen: 24
160.191.77.0/24 maxlen: 24
161.248.242.0/24 maxlen: 24
165.99.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12024 (0x2ef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:22:16 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6038-4f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:b4:83:45:1b:a4:04:e3:60:d4:a3:bb:76:
7b:c0:c7:7c:8b:c1:9a:73:45:43:25:38:ca:dd:0f:
c1:94:c0:18:69:1b:dd:df:98:e7:9b:b9:25:fc:cd:
d2:21:e0:c1:fc:01:31:08:73:53:66:60:8e:02:ab:
96:19:1a:72:bb:5a:3e:9d:9d:e2:67:ab:e0:a7:b4:
92:96:e9:76:93:c7:6a:d2:f0:08:8e:c8:53:83:86:
0a:28:ea:ec:ca:0e:4a:41:8b:43:ea:e9:0d:8a:3a:
fc:73:be:e7:a9:ae:20:ea:f0:e9:e6:23:e0:37:e1:
f3:76:29:34:42:bb:37:1c:f6:f6:a3:7c:11:9d:6a:
99:b8:74:b0:37:ac:af:54:a1:c7:c4:4c:5d:cb:19:
be:57:8d:48:9b:8e:a1:35:d9:7e:fa:b3:52:78:2f:
82:52:f4:3f:7e:50:59:2e:91:7b:6f:c0:50:85:1c:
4b:43:41:8f:f2:19:aa:28:f7:24:46:e8:ab:12:a7:
39:7d:28:62:c3:ce:3f:1a:85:d0:77:51:7d:36:97:
f5:59:b8:9c:f5:95:92:c8:40:6f:50:1f:4d:a4:e3:
d4:89:ba:59:40:2e:7d:e7:b2:9d:50:9a:b6:88:e5:
18:d5:39:25:e8:76:ae:1d:9c:c1:bc:5c:d1:0f:86:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:23:96:23:02:41:21:FF:3D:14:D7:18:FA:3A:09:1E:3A:DA:37:31
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/789D214AED3A11F08DE1F4EF4A6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.141.0/24
160.191.77.0/24
161.248.242.0/24
165.99.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f1:d2:03:a7:28:68:b6:25:93:91:5f:52:89:f9:5e:97:9a:
83:03:16:fe:4d:1b:52:c4:5f:97:85:c0:7b:cb:2c:66:78:f0:
08:e6:b1:79:01:b2:87:9f:b5:a2:2d:7a:67:4d:3e:5d:2a:19:
47:08:51:13:f5:12:44:07:c0:e1:63:1f:fb:04:cb:bd:1b:cc:
57:2d:66:85:64:b6:ff:90:6b:e1:ca:91:46:1e:01:a0:9a:e1:
49:ee:7f:1c:f7:9f:28:14:b0:b8:26:b8:62:79:4c:bf:96:9d:
ed:1b:70:c0:2e:26:12:89:8c:fd:69:5e:ef:4e:a9:92:57:70:
03:6c:82:27:b8:bb:1e:bc:39:38:7c:98:4b:93:2a:d7:ea:91:
fd:5a:fe:36:c9:4c:b8:8d:86:3b:88:fe:1d:d4:8a:16:46:92:
b1:23:cb:dd:76:67:83:84:67:24:2a:9f:75:4a:a6:79:a3:ee:
29:49:f3:ef:38:7b:a5:c9:18:8f:07:f5:f1:d8:71:8f:f1:e8:
3a:b5:27:56:e6:c7:fe:4b:39:f0:6b:7a:a7:1b:df:81:22:60:
e9:50:6f:64:8d:53:fa:7b:45:01:ae:8a:d4:bc:56:a3:08:c8:
d7:fa:e7:59:af:29:39:21:93:a3:9b:b5:99:95:3a:8f:18:ca:
76:a0:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:30:55 2026 by rpki-client