
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa
File: B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa (raw, json)
Hash identifier: pN+q5aHhjk3RM58A98PQNboGQE3sepPzSH8CnKNpahY=
Subject key identifier: B5:A1:85:26:08:90:A1:41:E9:4F:A2:6D:C5:2F:36:58:72:64:B9:36
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 31AF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:24:37 +0000
ROA not before: Mon 06 Jul 2026 16:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153228
IP address blocks: 160.187.250.0/24 maxlen: 24
160.187.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12719 (0x31af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd6c5-85b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:b5:f7:44:16:29:8a:f3:c1:08:7f:4d:94:
a4:d9:5c:fd:30:3f:96:ec:37:10:4f:03:7b:5f:43:
23:c5:9a:f3:ce:d8:7e:9f:2e:91:2c:79:fc:c7:20:
b5:5d:ad:a2:51:5d:44:59:f7:c9:6a:79:e6:2f:23:
b2:b2:aa:da:00:32:0d:ad:69:c5:75:ae:13:7a:2f:
2f:73:aa:54:3b:db:9f:54:3c:a3:78:3b:2f:57:42:
5a:48:d1:96:29:dc:e6:36:c8:e6:23:08:6d:21:48:
2f:0a:c0:89:a4:74:47:8b:4f:31:f7:87:18:d1:1b:
77:d4:52:28:8f:24:f3:67:4f:0e:be:5a:8e:fe:3b:
13:23:a5:9c:a6:19:fd:17:13:e6:a1:81:88:8f:2a:
38:e6:97:80:4b:70:12:16:35:c7:4a:9a:d5:4a:f8:
6d:f5:7d:17:87:e0:0c:d8:16:68:23:86:26:3e:89:
5e:0d:f5:6d:9e:85:b6:a8:7d:51:0c:9e:c7:07:59:
21:d4:b8:cf:3a:64:a6:cc:89:63:8c:0f:97:45:2d:
71:dd:10:70:e4:76:8d:42:23:a5:d6:3a:07:c3:f4:
5f:dd:97:a3:b0:a2:c4:e5:f4:bc:0d:b2:18:43:da:
c9:c6:b5:08:12:e2:10:40:cd:f1:19:63:ff:de:30:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A1:85:26:08:90:A1:41:E9:4F:A2:6D:C5:2F:36:58:72:64:B9:36
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.250.0/23
Signature Algorithm: sha256WithRSAEncryption
35:41:15:a5:49:36:91:40:3d:40:71:69:21:3f:16:c3:56:ca:
8b:6e:98:7d:2b:97:1c:b5:da:49:4e:7a:24:ec:38:b7:24:07:
ab:1b:0a:63:8d:3b:4c:f1:6b:0c:86:c3:e5:67:87:0f:fb:7a:
13:4b:6e:b9:9a:1a:6e:70:d2:86:c1:0c:ee:31:fe:75:eb:bb:
51:32:88:fc:00:62:08:37:5a:e9:25:76:d7:a6:17:6e:04:2c:
7e:e2:01:ed:32:7d:00:01:19:86:94:56:7c:71:b2:78:81:f7:
11:57:34:31:7e:8a:a7:11:06:ff:c9:42:32:f3:96:79:79:5e:
0d:1d:82:59:28:d1:89:03:fd:aa:e0:76:cb:eb:38:3a:c9:a2:
72:96:28:8b:b5:a0:7e:46:af:15:67:4e:a5:c8:f3:5d:7d:a7:
1e:3b:28:df:42:7f:62:7e:02:3c:a3:05:22:26:50:de:24:a4:
82:87:41:e1:5e:dc:97:f1:7d:09:6f:6b:83:b3:83:47:80:3a:
f5:9d:7b:7f:73:f3:f7:76:c9:1d:6b:42:3f:a2:b8:8c:1d:69:
86:da:28:6a:85:85:35:b3:8e:e1:5c:c1:1d:28:48:fb:97:1d:
22:b4:1c:ce:b7:b5:d8:d3:18:4a:5f:c9:3a:0a:43:a9:03:1d:
e0:0c:d6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:57 2026 by rpki-client