
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB72A9E386911EF960B3343C4F9AE02.roa
File: 9CB72A9E386911EF960B3343C4F9AE02.roa (raw, json)
Hash identifier: kr0yqX5KWBoG63JAmVOhOhjpYyc4+V2ETEzvjNXC63M=
Subject key identifier: 7E:BC:A6:B3:8F:19:5F:8D:95:FD:12:BE:F2:D7:8D:15:DF:62:97:76
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3190
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB72A9E386911EF960B3343C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:23:38 +0000
ROA not before: Mon 06 Jul 2026 16:23:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152551
IP address blocks: 160.22.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12688 (0x3190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:23:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd689-2399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:bc:3b:b7:a4:a0:da:0e:6e:7d:94:14:7b:
44:c1:8f:5a:da:bb:ff:53:7a:f5:2a:06:e8:96:66:
ec:f7:d6:c6:76:1c:7d:d7:e7:0e:ab:3d:dc:2c:af:
7d:3a:3c:5c:99:7c:69:eb:cb:b5:0c:db:06:14:b6:
5d:f1:d2:ad:3f:0a:52:d6:3b:dd:0c:e7:02:42:48:
7a:bb:8a:3b:31:6e:b7:21:6c:3d:83:6c:1e:5e:b5:
85:5d:47:05:35:e3:3e:be:6c:f4:b1:6a:bd:5f:48:
8c:c9:20:ee:1e:ae:ea:af:61:41:23:72:1d:35:ba:
c8:42:be:0f:13:3f:b5:b0:d6:de:d0:a5:d1:2c:7b:
11:f2:2b:9d:1b:51:b7:ea:57:73:40:af:d0:5f:46:
e5:bb:ad:10:3f:5b:e9:09:25:42:72:c0:ba:68:e8:
e6:07:c4:8b:1c:3a:c8:f1:70:91:c4:25:1e:81:0a:
91:e8:ff:d5:ee:28:ae:cd:10:13:5b:68:3e:1b:36:
9a:91:6f:2f:e7:c4:15:aa:d9:40:73:72:48:6e:64:
42:38:6f:8f:5c:93:6d:2a:dc:ab:fb:b6:e1:4f:0a:
15:01:90:93:e3:3c:75:3f:89:78:38:3f:29:e9:60:
28:66:6f:13:37:b9:0f:25:44:6c:5f:98:fd:27:42:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BC:A6:B3:8F:19:5F:8D:95:FD:12:BE:F2:D7:8D:15:DF:62:97:76
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB72A9E386911EF960B3343C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.116.0/23
Signature Algorithm: sha256WithRSAEncryption
98:30:cd:9e:1a:9c:4e:1d:4b:88:5a:15:1a:65:cb:50:cb:7d:
bc:a8:c7:ec:21:6e:e4:79:99:e9:8f:0a:3f:6f:cb:78:84:d4:
26:e1:e9:f8:08:4c:93:50:37:74:45:94:24:dc:d9:60:8e:84:
6e:3f:c3:a1:a9:96:19:26:0b:3c:01:c4:cf:6b:33:48:26:fd:
11:b1:be:7c:34:b0:0b:63:c1:ba:03:09:6c:96:12:8b:9b:ef:
e7:ed:9c:63:11:0d:3d:19:a1:e9:67:03:03:64:3b:49:7c:1f:
aa:ec:c2:5b:58:30:20:95:8a:7f:60:91:fa:50:54:b6:b5:28:
eb:fa:85:d7:fc:27:f8:e1:a0:e2:a7:07:51:10:d1:29:11:b2:
af:ea:60:3b:14:ea:ff:16:1b:50:af:d9:44:5f:b9:af:2b:c2:
2c:61:94:5a:64:7e:8e:00:a7:9c:00:c8:e2:15:36:6f:05:f7:
1a:0b:9c:02:15:e9:ee:f6:55:0e:4c:00:9e:1c:40:58:eb:ad:
d8:93:2b:da:ea:26:8d:72:0f:75:aa:d8:fa:e7:26:95:ac:20:
be:a3:f1:7a:d3:50:48:30:a8:4b:0b:1b:23:24:da:68:f2:78:
29:0c:36:f3:3b:4b:17:47:2e:55:04:38:ad:f3:47:8e:e3:0f:
42:3a:2f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:24 2026 by rpki-client