
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7C8CA816644211EF8BECBC36C4F9AE02.roa
File: 7C8CA816644211EF8BECBC36C4F9AE02.roa (raw, json)
Hash identifier: 1awZ32OC+rdg/9OCRIG/+vfKjzpeYXPZPbb/JkFu1mI=
Subject key identifier: C6:F0:BE:A3:9B:07:C4:AC:7E:82:92:6D:C1:CD:C2:0A:B7:16:06:E1
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3195
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7C8CA816644211EF8BECBC36C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:23:47 +0000
ROA not before: Mon 06 Jul 2026 16:23:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152559
IP address blocks: 160.25.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12693 (0x3195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:23:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd693-f77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:f6:98:d2:a2:7e:e1:6e:7e:2b:26:43:18:
63:c5:c8:ea:aa:8e:e6:14:73:36:1f:4e:9e:4d:bf:
9c:de:34:31:4e:dc:9a:8a:ba:ca:f4:4b:77:a3:33:
03:1a:34:6f:2a:0f:73:79:b4:c2:d9:30:97:10:19:
2a:a2:bc:4e:14:ce:90:4c:70:2b:ec:ab:9a:53:ba:
ef:9c:42:cb:29:2f:32:45:3f:59:bb:a2:af:9d:40:
a1:61:d5:fe:e6:61:96:b5:af:15:41:24:bc:22:bb:
96:a6:70:ee:13:fa:99:5b:3e:a6:8a:44:60:ab:24:
8e:be:93:97:a1:b6:81:ed:a5:1c:18:93:70:fc:21:
d3:06:c7:0e:4d:ea:bb:d7:fa:87:44:fd:b1:59:2f:
6f:86:60:35:0e:99:67:5a:01:f8:3c:0a:5b:2c:de:
8a:41:fe:5b:b9:e3:a1:dc:59:8e:e6:4a:44:65:1e:
32:7b:76:8a:fe:e7:45:62:33:b9:82:1b:1a:d7:12:
6b:8f:e0:61:4b:1b:8f:26:67:3a:e6:8e:8c:a2:49:
67:aa:f5:de:f1:bc:17:6b:04:97:18:a1:16:67:a8:
16:ed:2a:7b:51:d7:cf:1f:01:d3:ed:dd:83:0f:a6:
48:b1:cb:bc:5e:5f:6a:18:cc:59:3a:6c:06:fe:30:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F0:BE:A3:9B:07:C4:AC:7E:82:92:6D:C1:CD:C2:0A:B7:16:06:E1
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7C8CA816644211EF8BECBC36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.122.0/23
Signature Algorithm: sha256WithRSAEncryption
68:4b:f7:9b:00:5b:c1:23:4d:e7:0f:b7:e9:30:77:72:74:58:
ef:9a:75:69:e9:ab:16:56:4b:31:e3:fa:cd:84:53:f6:af:33:
eb:75:ba:30:f2:cb:de:70:5a:ad:6a:16:0b:d4:2b:b0:11:6c:
41:36:f0:c5:75:9a:07:6a:81:ff:81:ea:d3:6c:81:75:68:7e:
65:37:48:9d:dd:33:20:f2:c8:83:c8:fd:a1:98:bb:ca:ad:d8:
13:fb:e5:89:16:1a:20:b9:01:2b:44:ab:d9:ba:c4:a5:ec:ed:
93:c3:e5:f5:a0:cb:aa:2b:f0:70:47:a7:ec:da:86:17:3b:fe:
09:02:6c:ac:bc:6c:c1:0e:f5:26:d0:cd:21:95:9c:48:0e:5b:
98:25:33:ac:74:06:b2:34:5a:a4:15:6f:a3:8f:98:a5:92:71:
ab:8e:bd:82:9d:d1:14:bb:1f:25:f9:c4:1e:ca:47:5e:aa:f2:
d6:96:06:3c:ec:65:ed:2d:24:34:ce:3c:7c:10:51:95:9e:80:
51:75:c2:38:3b:1f:76:b3:f5:d8:6f:c1:e1:27:df:3b:82:31:
cd:fc:b1:4f:82:31:ce:b0:0f:80:12:82:05:5a:41:ba:86:84:
50:8a:94:01:7f:23:0e:97:3b:18:8f:af:05:66:dd:96:e1:5a:
1b:b5:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:11 2026 by rpki-client