
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8D02E1F6097D11F1988BF4D2113D8C67.roa
File: 8D02E1F6097D11F1988BF4D2113D8C67.roa (raw, json)
Hash identifier: Lt1xu7DSMlgIE10Q3Ivz+9mPARUPIOwf3mGlD3qYfeI=
Subject key identifier: 5A:F6:28:D9:79:AE:B0:8C:A6:B6:C9:36:8B:19:AC:5F:C8:9A:70:CF
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F9B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8D02E1F6097D11F1988BF4D2113D8C67.roa
Signing time: Sun 31 May 2026 16:27:26 +0000
ROA not before: Sun 31 May 2026 16:27:26 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153259
IP address blocks: 128.128.80.0/20 maxlen: 24
160.250.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12187 (0x2f9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:27:26 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c616e-76e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:76:c6:06:df:ec:b9:c3:92:6e:5f:a3:f5:
76:bb:07:1b:0d:d7:db:60:d9:96:e1:2f:26:62:d2:
63:e6:57:d4:41:47:89:31:68:9e:32:88:b5:d4:5e:
23:b6:93:42:02:1e:37:1a:e0:11:a9:65:de:b2:63:
fe:9d:48:6a:c3:85:27:be:93:c3:56:39:ef:39:fb:
1f:cd:62:6d:6c:4b:9b:36:d4:bf:22:d3:14:56:c8:
a0:f7:46:b3:18:5b:b4:88:21:b2:35:fd:bf:78:31:
2b:64:ec:27:40:8b:e7:af:f5:49:fd:50:ea:c8:9f:
b7:d1:ae:9a:72:0f:c3:8e:53:18:21:93:20:49:d4:
4d:95:1b:74:4d:a9:b7:c2:cf:c4:8f:5c:0a:c7:80:
c8:ab:a4:3a:61:5f:30:91:24:c5:ae:03:34:cb:93:
68:24:fa:5e:62:c8:c6:e5:93:e3:29:fd:54:2f:67:
78:00:de:80:5f:14:56:12:3a:d4:75:9b:d9:02:23:
8b:ad:43:4e:f0:bf:be:85:a1:4b:79:f8:d9:f9:41:
8a:93:5f:68:a3:82:97:44:de:5b:55:bc:22:a0:ab:
db:fd:a8:30:90:c8:e5:64:fb:37:bf:24:5e:bf:d6:
eb:03:95:0d:67:d7:8e:44:bc:e1:96:01:45:6d:6b:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F6:28:D9:79:AE:B0:8C:A6:B6:C9:36:8B:19:AC:5F:C8:9A:70:CF
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8D02E1F6097D11F1988BF4D2113D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
128.128.80.0/20
160.250.120.0/23
Signature Algorithm: sha256WithRSAEncryption
53:76:91:f4:64:d7:82:7e:f6:77:4f:85:db:bc:2f:39:11:3f:
24:50:c1:83:ab:47:ff:0b:fb:3d:c8:8b:15:24:a0:ba:e2:ad:
f0:51:06:0d:97:0c:a3:31:aa:b7:39:e0:45:e1:16:10:e7:fb:
2b:0e:09:ec:10:90:c3:46:f7:4c:ff:64:84:d5:c6:15:64:59:
6f:26:a6:07:65:ba:a7:9d:9b:25:11:e4:fa:9b:bf:f7:33:42:
cb:a7:3b:1a:52:66:9b:91:12:47:ef:40:67:a7:9f:07:a0:ea:
bc:69:7f:e8:16:41:bf:88:25:a2:ac:c0:24:3e:b4:87:08:03:
ec:22:02:9f:c2:85:87:a2:03:90:d4:33:88:15:c4:77:9d:de:
cf:77:36:8e:5e:d2:d1:74:e9:ee:de:94:0e:ce:e0:28:bb:64:
56:b7:6c:eb:38:4f:74:20:89:b2:5d:a6:7e:a9:5c:0e:67:6f:
86:48:14:8a:3d:85:41:32:0b:2f:15:58:38:2f:b8:d1:ec:77:
ef:a0:d2:7a:6d:a5:09:27:68:a1:00:c2:df:f7:3c:0d:4e:19:
88:11:45:81:6c:cc:e1:cc:cd:f4:97:1d:2b:f8:58:f6:2d:dd:
a2:a3:2f:d3:5b:81:a8:c8:ab:84:76:5a:44:39:ce:62:2a:b4:
b6:6f:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:25:06 2026 by rpki-client