
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa
File: C450720E223911EF9B58F681C4F9AE02.roa (raw, json)
Hash identifier: qwEo+N6Yzk8vvTDAT5XqhcMdhCumH+3+m1trxtAv2qk=
Subject key identifier: 97:B2:60:BA:5B:8A:4E:2C:71:E2:4E:94:F2:A4:BB:C5:B4:64:9A:D5
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30C0
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:16:43 +0000
ROA not before: Mon 06 Jul 2026 16:16:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135745
IP address blocks: 160.20.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12480 (0x30c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:16:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd4eb-397e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e6:90:55:1f:f4:5a:b5:07:6b:18:75:48:fb:
5b:3e:31:c2:35:3e:3f:33:fd:fd:bc:46:25:ad:fb:
4b:4f:78:85:46:5e:3d:1b:24:75:3e:9a:04:f2:a9:
7c:9f:85:22:1a:42:63:48:86:bf:b0:ee:06:a1:de:
31:19:41:70:3e:e8:9d:91:75:79:d7:0b:91:7f:55:
6f:ce:71:90:9e:34:2d:39:94:c1:bb:b6:f0:c8:a8:
b8:84:f2:48:4c:06:11:d4:8c:b3:ba:d0:81:2e:8a:
c8:b7:3c:36:02:f4:b5:5b:a7:b3:29:c9:96:da:28:
48:d9:aa:ea:08:1b:7c:1f:b5:3c:26:17:98:a1:5d:
49:c3:b5:8c:cc:e3:b1:e1:9c:5d:8a:44:90:f0:90:
31:f8:09:99:76:aa:d5:ba:69:e4:29:a1:12:c7:62:
8f:49:81:78:3c:4a:44:b7:27:85:e9:49:a2:24:37:
3a:7c:6b:01:82:33:4f:84:2b:18:f6:11:e8:d3:49:
e4:59:7c:5c:db:d3:04:7a:26:1f:79:c0:e6:84:14:
5f:9c:39:37:60:80:5f:40:0e:3f:70:37:39:cb:b4:
15:f3:26:51:94:20:b3:bf:96:e5:ee:ad:ad:c0:ed:
4a:42:2b:f9:f0:ea:5d:a7:f1:aa:bb:4a:55:27:56:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B2:60:BA:5B:8A:4E:2C:71:E2:4E:94:F2:A4:BB:C5:B4:64:9A:D5
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.20.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:11:c3:01:1f:39:51:92:a1:11:a0:b6:60:37:eb:1e:07:22:
35:05:3d:0a:47:82:0a:0d:50:8c:bc:74:5f:12:90:98:3e:df:
80:29:26:4c:0b:41:71:0c:c2:a6:9f:b0:07:5e:f6:69:67:a9:
8f:4a:a8:8b:5a:4d:98:92:da:e7:df:38:b2:e5:31:98:7d:5b:
25:a4:20:93:c4:a9:ca:63:c5:a8:c6:ac:bc:49:2f:5b:10:b7:
a4:8c:d0:68:13:6d:6f:f0:5c:fb:01:ed:38:63:e7:59:59:9b:
ba:27:37:6f:2d:55:db:b3:75:a3:6c:15:1e:87:eb:61:4a:a0:
b9:04:87:82:80:5b:51:22:93:7c:8b:7e:96:75:c7:1a:42:6b:
c7:1d:3d:27:64:a2:59:63:3b:65:9e:95:6f:f0:61:3c:a6:8e:
e7:9b:ac:1f:2a:9b:63:07:46:0c:28:d5:3a:50:75:5c:54:b6:
fc:98:7a:ef:db:3c:19:2b:62:b0:50:2a:86:d0:5f:66:44:03:
86:45:a8:64:1c:c0:82:ac:d7:ab:03:50:96:1d:f7:5e:f8:29:
de:b2:ae:8a:85:38:f9:00:61:de:c2:84:e8:e5:eb:b0:90:03:
0e:ae:06:8e:df:cd:df:1e:22:37:d4:7d:09:77:44:3a:0a:49:
9d:c5:3e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:03 2026 by rpki-client