
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8D60806239E611EF83570213C4F9AE02.roa
File: 8D60806239E611EF83570213C4F9AE02.roa (raw, json)
Hash identifier: DUJultFNmpJGyriWT0Ij6lZkVcB7Up9xqHHQtMUDD8U=
Subject key identifier: B4:B9:47:20:FE:49:0D:68:29:E5:33:B5:7B:32:75:E7:E8:42:91:5F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 318A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8D60806239E611EF83570213C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:23:25 +0000
ROA not before: Mon 06 Jul 2026 16:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152543
IP address blocks: 160.25.62.0/24 maxlen: 24
160.187.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12682 (0x318a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd67d-cbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:ab:26:e7:21:63:d4:57:e8:1b:77:f6:89:
ea:57:d9:78:41:25:e5:54:76:ba:aa:1a:ac:08:cc:
6b:25:5a:cb:54:d0:de:71:0c:65:d6:17:3b:3b:4d:
8a:51:4b:9b:a1:24:45:cb:48:13:e1:12:f0:0a:85:
20:d6:b6:b9:e0:f1:36:a5:c0:6d:29:db:6c:f6:42:
25:27:58:5e:2f:ec:a0:3d:f9:86:b4:c2:5b:0f:5c:
b3:4c:92:e3:63:c2:63:36:8c:51:c7:d7:37:cc:f2:
3a:11:36:c7:6d:cc:33:ee:55:ba:89:b0:62:8e:5b:
50:67:6d:c0:6c:65:84:1d:4b:01:78:67:db:96:55:
44:59:3c:77:31:4e:22:87:d8:b7:63:03:46:f2:a2:
53:9a:2a:e0:4a:82:3f:3c:b2:60:33:d6:18:cd:02:
66:2b:1a:f3:b4:3d:23:45:09:99:7f:c3:77:90:37:
8c:cc:10:ee:c6:aa:f1:e5:5e:21:f7:26:ce:67:42:
0c:86:06:ad:c7:d4:d2:f0:c2:23:4f:0c:65:d4:8e:
4c:16:8a:ed:50:d5:db:cb:ec:04:f0:00:4b:6a:83:
c7:80:d6:5e:cc:dc:0f:fc:2e:c3:34:0a:ca:73:df:
31:8a:56:e0:9b:96:ce:12:30:bb:c7:8a:05:47:39:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B9:47:20:FE:49:0D:68:29:E5:33:B5:7B:32:75:E7:E8:42:91:5F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8D60806239E611EF83570213C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.62.0/24
160.187.87.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:d3:17:3f:06:17:18:17:60:38:ee:9e:1e:34:63:78:57:06:
81:d2:9d:28:e4:f7:fd:67:e6:21:5e:a1:89:cc:71:db:9b:9d:
5b:73:ae:9c:f1:29:ed:c9:dd:09:2e:93:a6:ab:0d:7a:ce:39:
72:70:54:af:e7:7c:d0:f3:69:c3:69:dc:1c:a5:11:71:35:2f:
fa:3a:56:66:45:52:c6:c8:e1:91:39:02:1c:a6:35:1a:c0:fc:
2c:c5:64:b2:1b:f0:ea:ed:2b:53:44:ce:42:d2:d6:7c:ad:d9:
f7:3e:98:10:c5:78:56:37:d3:73:5b:8e:32:96:9f:9c:02:b0:
ee:c1:dc:71:96:a7:04:08:af:7b:6b:d8:9a:02:c9:5c:9a:82:
e0:7d:f8:80:29:bb:a2:91:fd:01:28:99:74:1e:ee:de:c8:52:
ba:0f:e5:41:25:4f:8f:2d:7a:ae:78:73:fa:fa:ce:4e:9c:7e:
d0:58:fb:f6:b8:4a:60:6f:ae:e4:25:04:2a:47:54:75:cc:f2:
de:b4:2e:36:7d:85:81:ee:eb:c3:b8:38:f6:67:4b:fc:cc:76:
79:92:12:46:7c:1c:f1:b7:1e:ca:8d:f3:df:fa:b4:c7:7d:13:
aa:00:f0:e3:75:90:ed:9d:47:b0:9a:fa:65:68:e9:c7:bb:74:
b9:e0:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:35 2026 by rpki-client