
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF492418847C11EFBD36080BC4F9AE02.roa
File: BF492418847C11EFBD36080BC4F9AE02.roa (raw, json)
Hash identifier: QHLderNQxjoZ/25VO4VLzPxKzlaQ/Q5x2gHXl1IpH0U=
Subject key identifier: DA:03:82:41:DD:6F:B3:52:F2:70:08:B0:EE:19:5E:3E:B0:77:6C:B1
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F85
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF492418847C11EFBD36080BC4F9AE02.roa
Signing time: Sun 31 May 2026 16:26:44 +0000
ROA not before: Sun 31 May 2026 16:26:44 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153227
IP address blocks: 160.187.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12165 (0x2f85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:26:44 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6143-04ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:de:46:8b:ae:f4:24:80:3c:37:ea:36:11:
43:60:67:e4:8c:43:fc:45:13:c5:0e:2b:27:d6:07:
29:30:bf:51:9c:7c:61:1c:f4:a8:57:23:9e:47:3f:
91:48:74:a6:11:47:f6:dd:6a:36:4c:1c:5a:bb:69:
50:69:54:67:10:c0:86:2b:88:e5:5c:5e:fe:7b:2f:
e3:81:e4:f2:57:7b:c0:99:87:f3:b7:0e:17:ef:f5:
44:90:5d:05:75:4c:ef:b5:b0:74:93:38:89:f0:70:
fe:3e:12:53:1d:f0:bf:7a:c2:4e:c4:e0:03:40:9c:
6a:d8:7f:16:c4:50:57:6e:98:15:55:ca:21:76:00:
95:23:d5:c5:d8:df:bf:57:bb:60:f5:99:95:11:41:
25:09:11:fa:d8:ff:b7:ed:91:f7:bf:f3:de:cd:5c:
5b:1a:7a:b1:dd:3c:6e:81:a0:8f:52:9b:b4:f9:54:
f2:0f:12:85:d4:f1:33:07:da:1b:f0:f4:1e:1a:38:
7b:50:75:20:32:aa:a7:f0:8b:df:5c:a7:6b:33:29:
d3:94:eb:66:80:09:0b:99:6d:27:f8:1d:54:d3:89:
53:72:ee:6f:7e:15:b9:84:c9:27:e9:d1:b6:c7:1e:
f0:a7:8b:8d:56:1f:a6:d8:c3:80:e1:00:d4:09:3d:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:03:82:41:DD:6F:B3:52:F2:70:08:B0:EE:19:5E:3E:B0:77:6C:B1
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF492418847C11EFBD36080BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.168.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:43:4a:f7:8b:a2:c2:30:cb:a6:36:d7:e7:f0:f2:0e:dc:98:
79:41:22:14:c7:c4:4b:46:e4:7d:49:fd:9c:ea:6e:3e:32:61:
3f:16:84:7f:ef:0b:05:30:34:2f:99:a7:50:27:d2:12:4b:bf:
a1:f0:29:15:1c:42:11:2c:a9:54:a3:65:a3:a6:5a:9f:f1:4c:
6c:01:1d:5e:ec:04:54:94:b4:a8:4d:eb:96:79:60:f0:ff:29:
05:e5:59:99:94:db:03:04:f0:63:ce:93:25:6f:63:c5:db:20:
10:4e:a4:48:35:36:09:ae:a9:3f:83:ed:82:40:6c:7f:a0:b8:
53:9d:a6:f4:d5:14:48:46:7d:9c:c9:3f:61:9b:22:17:e4:53:
30:de:f0:48:1f:5f:f8:ba:ef:55:9a:f7:e3:54:0c:c2:a0:94:
6e:0d:23:f1:ac:5c:e5:04:0e:9d:3e:b6:e2:25:86:27:fb:16:
14:6e:e7:95:66:ff:7f:43:3b:67:38:35:a6:0e:fc:15:f1:53:
21:35:51:54:24:96:e8:b2:5e:09:f9:9d:54:1c:f8:0d:44:ce:
3b:54:a5:6b:f3:8a:31:6c:46:20:45:3b:82:63:3a:9e:9e:eb:
c5:d1:f4:ab:4d:7a:ac:47:aa:7f:24:fd:8a:76:06:3a:6e:32:
df:18:b4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:30:03 2026 by rpki-client