
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C9FB104ABBAB11EFB6075917C4F9AE02.roa
File: C9FB104ABBAB11EFB6075917C4F9AE02.roa (raw, json)
Hash identifier: 0NfALQgxBQp2TBMCDREu4/QfZuHMzqR6DGTBZGmHNw0=
Subject key identifier: CB:DF:9E:70:19:67:5D:A7:A7:5B:43:FF:7E:52:C1:27:54:B5:D3:F5
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3228
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C9FB104ABBAB11EFB6075917C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:28:39 +0000
ROA not before: Mon 06 Jul 2026 16:28:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45117
IP address blocks: 160.250.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12840 (0x3228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:28:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd7b7-7613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:60:76:78:4a:c6:05:ac:17:17:be:d1:fa:
9a:b8:51:ad:b1:73:6c:26:78:93:14:5a:89:36:ed:
e0:10:cc:d4:4b:b5:4f:7a:6b:b1:ae:f5:cb:69:55:
52:95:cd:a2:ff:41:33:8e:0e:26:5d:f0:ac:5c:48:
ec:bf:f2:9f:e5:d8:fd:af:0a:78:8d:90:cd:93:fd:
cf:50:0e:b0:d5:da:9c:10:56:1e:9a:c5:af:8d:4a:
4c:c3:a9:92:8e:bb:76:7c:9d:39:e3:32:d2:86:6b:
ec:3d:20:34:9b:59:81:74:93:c2:bc:b8:67:cf:07:
57:e0:bb:19:12:7d:69:e1:b1:d2:93:a1:d0:64:9d:
37:de:a7:3a:ca:41:ff:6c:8b:b0:f5:47:52:dd:6b:
52:5d:89:61:94:8a:f7:d4:63:7e:82:7a:88:e6:b6:
08:7a:5d:1c:81:a8:88:78:28:e7:6a:b2:85:04:c5:
4d:de:e4:77:4c:58:44:ab:4f:d3:46:2d:30:cb:f2:
c5:b7:fd:bf:42:df:56:91:77:3b:b3:46:98:11:44:
87:cc:22:42:7d:c8:9c:74:f7:50:0a:a1:3d:1b:f4:
e8:ab:c3:26:59:90:3a:24:57:ad:f5:7b:99:2c:d4:
2e:df:72:e0:4d:8a:86:05:47:5e:cc:d9:f9:0d:1d:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DF:9E:70:19:67:5D:A7:A7:5B:43:FF:7E:52:C1:27:54:B5:D3:F5
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C9FB104ABBAB11EFB6075917C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.218.0/23
Signature Algorithm: sha256WithRSAEncryption
27:82:81:b0:3d:71:51:7f:e3:4d:52:36:c4:27:89:a8:4d:2d:
0a:eb:1a:29:c6:9d:84:9c:e6:3b:bf:11:ef:3b:b4:61:05:a9:
c8:0b:2b:de:80:71:76:0c:b8:4e:56:48:f0:06:44:57:32:68:
69:41:ae:09:3e:2f:e4:a1:85:3f:89:3d:2b:af:ef:ca:a5:36:
48:98:c5:83:14:a3:be:a6:dd:2b:d6:3b:e4:1e:83:94:0e:3e:
86:83:ba:58:58:f0:52:5c:b9:85:60:05:f9:c9:de:89:73:99:
d0:de:64:7e:03:47:a8:8a:94:88:77:76:2b:0c:f0:b4:74:d9:
71:62:54:cc:38:3d:df:80:96:55:4a:d0:3e:5f:15:46:00:4d:
1b:c5:1d:66:bd:e6:b9:fc:6a:eb:13:d1:0e:a4:42:2e:7c:80:
e2:23:91:f5:a1:c4:21:2a:3d:a6:16:62:80:4d:46:32:fe:02:
4d:57:29:c5:79:0c:ae:f4:c0:ae:4b:f0:68:4c:ae:ef:8b:61:
02:0f:c0:d6:f5:d1:2a:6a:e0:7f:e0:85:2e:74:14:9b:16:2f:
e0:81:23:2d:0f:cc:89:33:0c:5e:42:f2:82:f1:cc:ab:a3:eb:
c8:d6:da:6f:b5:f6:b9:fa:b9:cf:2c:87:a1:7a:b1:3e:5f:33:
4a:32:77:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:32 2026 by rpki-client