
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C219C6EEAC8F11EF84BC2754C4F9AE02.roa
File: C219C6EEAC8F11EF84BC2754C4F9AE02.roa (raw, json)
Hash identifier: lp1zwSKUPQ/yU29Be1pf/tcRQ2sf/LISXZ7J0pZR4+w=
Subject key identifier: 79:E1:D2:E9:D8:C6:8E:C8:C2:C7:12:5D:72:FB:DB:98:C6:46:42:9B
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2E9A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C219C6EEAC8F11EF84BC2754C4F9AE02.roa
Signing time: Sun 31 May 2026 16:19:16 +0000
ROA not before: Sun 31 May 2026 16:19:16 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 135722
IP address blocks: 160.22.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11930 (0x2e9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:19:16 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5f84-2569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:b8:10:35:a2:b7:3b:f3:51:e5:67:e2:0b:
44:67:9b:be:6f:cc:03:67:b1:ab:4e:e0:14:25:1a:
0f:5e:5d:cd:8f:f4:4e:2c:4d:3a:8b:f3:7a:b4:b8:
34:7b:b6:fd:09:03:14:cd:e6:e2:b7:1a:49:7f:c9:
ce:8a:1c:fe:0b:64:e1:48:20:92:87:c8:d5:a5:9c:
e5:ef:3d:38:8d:45:47:3f:3a:cb:9c:9f:55:fc:e4:
c1:f0:a1:91:cd:5b:d1:6f:48:c0:a9:96:4c:3c:33:
db:2d:63:01:ef:77:a1:3f:6c:1e:fe:66:74:af:4b:
64:df:ab:53:a2:01:a1:64:5d:ee:03:9d:ca:93:dd:
af:4e:7a:14:0b:75:66:86:b7:63:f3:94:f2:42:ce:
a6:54:34:c2:72:74:89:ab:ed:37:02:b8:a3:a8:bd:
07:35:e1:a6:6b:43:76:c7:89:2d:a4:db:ce:11:ba:
67:13:f4:7a:81:e5:35:f3:2f:8d:d1:d7:5d:c1:5d:
a0:23:9e:da:4c:56:3b:f2:6d:bc:11:d1:42:f5:1b:
c5:d0:aa:bf:3a:8f:18:8a:f9:eb:1f:c3:39:b8:b8:
ae:81:3c:4e:b3:f0:ab:5f:12:2e:e8:34:5a:47:51:
b1:f3:7c:d8:21:6e:a5:1a:79:15:10:dc:c0:73:95:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:D2:E9:D8:C6:8E:C8:C2:C7:12:5D:72:FB:DB:98:C6:46:42:9B
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C219C6EEAC8F11EF84BC2754C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.153.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:78:ed:25:98:9f:92:5e:a4:8c:a0:eb:1e:b5:67:34:b0:e6:
cd:73:39:bc:78:7f:b7:2b:61:99:8e:b1:bb:0d:e6:7a:c9:ef:
4d:fa:7e:3a:be:e4:1d:85:7c:cd:93:fe:71:dc:af:6d:72:1c:
37:b3:0f:35:f9:72:e3:84:42:52:c5:60:b2:5c:31:60:45:22:
9f:07:46:ca:a0:08:3a:59:7c:09:df:ce:45:46:37:49:d3:82:
d5:6f:2f:d2:e6:cc:b8:14:41:d9:3a:c5:51:65:6f:21:de:9e:
50:38:a4:d6:7a:cf:fc:a7:c7:29:ea:04:dc:61:77:a0:9c:b3:
8e:64:7c:fd:ee:cd:3e:99:8f:53:20:14:2c:0a:28:21:5d:80:
58:ba:49:c3:1d:03:a4:0e:03:80:7a:10:71:f3:65:f9:ad:43:
cb:7d:e0:7b:a3:09:87:8e:59:a0:ac:2b:82:ff:3d:dd:66:9a:
02:4d:a7:b4:d5:3c:42:5c:c9:ac:a2:72:6c:43:1b:0d:8c:3c:
59:dc:f6:d1:1f:d2:1d:ea:8a:32:a9:5e:4c:83:84:6d:33:77:
0f:06:8c:89:7d:23:5f:39:36:b9:c0:48:47:36:76:f7:cd:b9:
9f:25:a0:31:0b:e3:7b:41:45:3b:4b:04:01:b0:70:bd:e7:a4:
ac:e5:05:e2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYxOTE2WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNWY4NC0yNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGq4EDWitzvzUeVn4gtEZ5u+b8wDZ7GrTuAUJRoPXl3Nj/ROLE06i/N6tLg0
e7b9CQMUzebitxpJf8nOihz+C2ThSCCSh8jVpZzl7z04jUVHPzrLnJ9V/OTB8KGR
zVvRb0jAqZZMPDPbLWMB73ehP2we/mZ0r0tk36tTogGhZF3uA53Kk92vTnoUC3Vm
hrdj85TyQs6mVDTCcnSJq+03ArijqL0HNeGma0N2x4ktpNvOEbpnE/R6geU18y+N
0dddwV2gI57aTFY78m28EdFC9RvF0Kq/Oo8YivnrH8M5uLiugTxOs/CrXxIu6DRa
R1Gx83zYIW6lGnkVENzAc5Ua/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHnh0unY
xo7IwscSXXL725jGRkKbMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzIxOUM2RUVB
QzhGMTFFRjg0QkMyNzU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoBaZMA0GCSqGSIb3DQEBCwUAA4IBAQCKeO0lmJ+SXqSMoOsetWc0
sObNczm8eH+3K2GZjrG7DeZ6ye9N+n46vuQdhXzNk/5x3K9tchw3sw81+XLjhEJS
xWCyXDFgRSKfB0bKoAg6WXwJ385FRjdJ04LVby/S5sy4FEHZOsVRZW8h3p5QOKTW
es/8p8cp6gTcYXegnLOOZHz97s0+mY9TIBQsCighXYBYuknDHQOkDgOAehBx82X5
rUPLfeB7owmHjlmgrCuC/z3dZpoCTae01TxCXMmsonJsQxsNjDxZ3PbRH9Id6ooy
qV5Mg4RtM3cPBoyJfSNfOTa5wEhHNnb3zbmfJaAxC+N7QUU7SwQBsHC956Ss5QXi
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:43 2026 by rpki-client