
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A35E262E6F8D11F1832C95A76AA30FBC.roa
File: A35E262E6F8D11F1832C95A76AA30FBC.roa (raw, json)
Hash identifier: 2jlJB/9FlQz3AL0pW5AKhCu4QUUf38ziX2oC+kHmh/c=
Subject key identifier: FE:4C:FD:3E:4B:C1:3D:FA:18:48:97:79:E8:F9:FE:E9:68:54:F8:F8
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3120
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A35E262E6F8D11F1832C95A76AA30FBC.roa
Signing time: Mon 06 Jul 2026 16:19:52 +0000
ROA not before: Mon 06 Jul 2026 16:19:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149020
IP address blocks: 160.187.141.0/24 maxlen: 24
160.191.77.0/24 maxlen: 24
161.248.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12576 (0x3120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:19:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd5a7-01ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fc:63:61:64:b7:53:d3:46:9d:81:63:1a:00:
51:3b:ed:75:6a:44:1f:aa:c4:45:f2:46:42:8f:08:
59:bd:9b:40:4c:80:3a:1a:f7:5a:06:f8:c6:11:d2:
fa:6b:48:72:ee:63:9a:67:ff:57:46:7b:65:f1:d0:
9d:63:e8:1e:d2:b8:bb:b0:62:13:ab:d6:55:66:d7:
25:8a:03:2e:3f:72:00:88:d9:d9:83:05:67:b3:29:
b0:6e:82:98:5d:c5:4a:d2:a5:aa:93:c3:67:83:63:
3b:0a:ec:5d:cd:92:68:76:21:48:88:33:93:25:c9:
be:94:ed:1c:91:bb:0e:7e:91:68:1a:4e:bd:44:04:
eb:d4:b2:81:9b:e2:ff:5e:01:8a:06:d5:bc:dd:f7:
9c:8a:1f:2e:8f:cb:64:91:b5:f9:1d:83:36:1b:29:
cd:9e:81:2c:75:31:5d:7a:40:48:be:53:2c:ed:a1:
2f:43:5e:2c:dc:61:10:8b:52:92:50:33:5d:f3:7b:
64:46:46:c7:70:bb:9a:01:e8:55:85:84:13:84:96:
cb:ea:36:a7:d2:93:5b:5c:2b:a5:b3:4d:09:62:00:
8a:bb:d7:35:32:54:55:bd:b3:25:7b:a1:0b:8d:f0:
53:f2:bb:b9:e5:f6:e5:ab:db:1d:89:df:c7:62:ec:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4C:FD:3E:4B:C1:3D:FA:18:48:97:79:E8:F9:FE:E9:68:54:F8:F8
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A35E262E6F8D11F1832C95A76AA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.141.0/24
160.191.77.0/24
161.248.242.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c8:ea:5b:4c:97:17:4c:dc:0e:9c:b5:e4:72:5a:49:e7:db:
49:d8:08:7c:58:45:3f:be:d8:15:8a:72:4c:08:95:2e:be:a4:
4f:a5:0a:3a:e1:dd:c0:e7:a2:13:14:99:a9:41:93:45:2c:dd:
0e:f3:6e:77:70:e3:95:33:d7:21:6d:b7:27:49:ca:76:33:ae:
12:a3:d3:8f:ea:d4:66:81:32:0b:80:76:a0:6a:ae:41:c2:87:
ae:30:bd:cd:de:1e:6e:e6:9c:93:e7:17:25:94:81:7d:0d:8f:
b8:a1:81:74:0f:f2:62:66:eb:1c:cd:c5:25:99:ed:ff:fc:7e:
41:c5:22:94:db:55:d1:e4:8e:c0:e7:10:e5:7e:cd:f7:87:52:
ba:05:ff:c5:fb:49:f3:17:73:97:dd:15:16:29:9c:b5:98:d6:
ba:87:bb:10:3f:c5:de:6f:70:d8:4c:6a:85:3e:fe:51:3a:b8:
8a:90:86:70:8f:48:1a:0f:e0:40:dd:99:e3:fc:99:dc:b7:7a:
04:cd:7d:e0:91:e4:8b:f5:44:68:76:bc:06:51:22:cf:4f:02:
0e:7c:59:a2:44:c4:2b:62:72:a0:e7:f2:bd:93:1d:15:50:89:
7b:ca:b4:e4:c8:cf:f0:e6:fd:78:30:bb:89:ea:89:29:39:3f:
3d:9f:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:06 2026 by rpki-client