
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9E442C70DD3411EF80B4C820C4F9AE02.roa
File: 9E442C70DD3411EF80B4C820C4F9AE02.roa (raw, json)
Hash identifier: TmKHoXdYFqqcCuaBiCxsJzF2nK15976yjo729OcFIGU=
Subject key identifier: 0E:08:9C:6B:08:2A:D7:7F:6B:44:62:A6:D2:85:EE:E6:8D:08:52:3D
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 31CB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9E442C70DD3411EF80B4C820C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:25:33 +0000
ROA not before: Mon 06 Jul 2026 16:25:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153274
IP address blocks: 160.30.84.0/24 maxlen: 24
161.248.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12747 (0x31cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:25:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd6fd-b836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:b1:57:51:99:29:e0:36:1f:55:6c:d7:74:
c8:bb:5a:2e:3f:f5:f5:59:34:26:ec:92:38:6c:4c:
a3:5e:4f:e7:b4:7f:d3:15:c1:8f:30:e5:c0:f3:a8:
3a:00:4a:bf:2d:7f:35:4a:7e:7c:f3:ee:79:0e:b1:
e7:09:8e:5f:17:72:43:07:ec:3c:44:17:84:28:80:
57:a6:e7:ad:52:52:1f:68:81:b6:be:11:34:64:8b:
b6:46:54:5a:c7:77:9b:e7:83:97:2f:48:60:bd:da:
c1:f6:9a:a5:b9:64:aa:c5:d4:7f:ec:32:a5:37:0e:
72:0f:53:55:6e:1d:9b:8b:d2:6b:3d:a8:d0:bc:07:
cd:45:ab:9b:08:32:55:b7:c4:36:12:43:8f:72:fb:
ca:0c:50:20:09:14:61:3b:53:0e:bc:f1:79:eb:27:
ac:41:08:fc:a9:cf:b1:4d:8a:df:dc:aa:ed:e8:79:
f5:2d:0f:96:d5:35:8e:c1:11:a5:fe:24:0d:86:d3:
ab:b1:fb:19:da:e4:b5:9b:c5:c1:fb:b2:c3:8b:db:
7c:e7:cb:a5:77:b9:df:19:aa:6c:04:9b:ba:6f:a9:
2f:9f:f2:35:65:1d:4e:6e:43:43:37:38:ef:46:bd:
9d:b8:dd:ec:34:5c:91:b9:82:b8:c4:9e:c3:f5:db:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:08:9C:6B:08:2A:D7:7F:6B:44:62:A6:D2:85:EE:E6:8D:08:52:3D
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9E442C70DD3411EF80B4C820C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.84.0/24
161.248.242.0/23
Signature Algorithm: sha256WithRSAEncryption
56:30:c5:d7:c5:93:01:4b:6f:42:7b:4b:4b:1b:0b:8a:6e:33:
5d:ec:82:ec:02:76:d9:3b:2d:04:6a:86:cd:e5:58:0f:27:1c:
bd:05:d2:c6:7a:5e:a6:f2:ed:c3:5a:99:76:fc:a2:8e:7d:ec:
3f:7b:3e:45:bf:c8:9e:d1:8c:69:ac:53:53:37:1d:cf:e2:ad:
09:56:3c:97:bc:45:d6:60:a3:ce:bf:93:63:ae:d1:68:ae:69:
23:7f:bf:81:69:e1:ad:de:6d:82:49:d9:4e:20:aa:d4:b7:75:
6d:b2:18:cb:39:9a:d9:65:39:79:76:db:73:8a:8e:14:ab:5f:
87:b1:45:9c:7e:ed:5e:cb:e9:4e:4e:b4:d5:50:cd:43:b4:45:
2d:89:df:fa:02:5e:00:3b:6c:30:29:cb:38:7c:6d:aa:f4:cc:
36:d1:0d:ae:aa:03:45:cb:de:6a:78:90:f6:1c:9f:55:58:51:
5e:cf:ef:52:42:0e:68:10:1b:70:2f:ea:1a:fd:8d:02:c1:cc:
1a:41:e4:6f:f6:c9:d6:1b:50:e3:ab:07:d5:b1:1e:d4:09:8e:
ca:f9:e8:db:eb:c1:6a:44:f1:0e:bf:4d:94:dc:ff:30:68:90:
11:96:3d:64:a8:8b:52:45:f8:fb:85:b0:21:03:99:db:1d:16:
70:64:3d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:35 2026 by rpki-client