
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D4D895E4CE5E11EF905B375BC4F9AE02.roa
File: D4D895E4CE5E11EF905B375BC4F9AE02.roa (raw, json)
Hash identifier: MByZSnTphVnCqsxfsPaZ1fsLC6CkHexBKCCTOFvQThs=
Subject key identifier: 49:9C:E8:02:47:31:F4:BF:1B:07:C3:32:13:07:5D:85:86:60:18:EC
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 31C9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D4D895E4CE5E11EF905B375BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:25:29 +0000
ROA not before: Mon 06 Jul 2026 16:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153271
IP address blocks: 160.250.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12745 (0x31c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd6f9-9dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:56:2b:c6:3a:8d:1c:c7:28:27:17:d9:7d:
6c:84:bf:6a:b1:87:12:02:15:ed:45:83:0b:de:49:
e9:3c:07:e1:81:58:9a:7c:dd:3b:d9:7d:fd:99:c9:
2b:59:f1:f9:b4:23:2f:b8:ab:ad:b0:5e:35:47:1a:
58:fc:9f:5f:de:73:e4:b1:55:35:9c:9e:6e:63:ef:
27:10:3f:3f:44:a2:30:1f:a4:4a:a5:97:48:1c:81:
c5:56:ef:c0:c1:0d:2a:23:7a:2e:35:bd:80:62:12:
34:f2:19:b6:10:08:fb:3d:c8:d6:3d:3f:e6:16:8a:
16:5f:98:a5:02:f3:b3:51:77:2b:ea:55:57:ce:a8:
06:42:43:97:47:55:0a:a8:e2:a6:5b:d2:8a:c2:78:
ec:c8:33:c7:93:6b:74:7b:dd:d8:39:12:5b:fc:7c:
3d:4e:5e:9c:7c:a0:f0:3c:73:d0:78:35:07:a4:6f:
64:64:bd:80:f3:63:92:1b:6d:32:b1:52:4a:68:86:
21:fa:9f:40:86:ef:a8:e3:7b:d7:2d:d3:1e:81:7f:
14:d1:87:80:a6:33:cc:24:8e:04:db:4a:83:b6:2f:
5b:a4:9a:90:b4:07:a8:2e:64:f3:88:a4:64:ad:a3:
81:cb:a2:8d:90:5a:29:0c:65:ab:76:eb:de:e8:f6:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9C:E8:02:47:31:F4:BF:1B:07:C3:32:13:07:5D:85:86:60:18:EC
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D4D895E4CE5E11EF905B375BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.146.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:9f:53:e4:e3:de:d1:42:dc:22:f3:0d:9c:cb:9b:08:55:0a:
9b:02:e3:8d:12:39:50:d7:46:4c:08:5e:d0:5a:b6:65:e8:54:
45:2d:2c:17:9f:3f:87:92:8a:65:82:5a:9d:3c:f9:35:45:32:
09:4a:48:93:f9:e2:38:e8:10:b7:db:f8:b3:ef:a4:86:87:fa:
29:d3:28:58:b2:df:97:cf:13:b1:cd:bf:4c:a4:02:97:c4:87:
7c:a8:aa:43:5c:fc:3a:09:2c:bb:e5:08:ce:c7:05:30:cf:ca:
d6:2f:66:70:4f:4d:51:56:60:9d:0c:23:12:3e:07:a8:5c:4d:
c4:c4:04:16:e1:8d:48:74:46:7b:9b:5e:ab:26:a9:60:f0:07:
6d:40:53:7d:69:e8:54:65:e6:ec:23:90:e6:c6:ef:87:0f:9c:
4d:4c:19:60:0d:54:8d:69:e6:e9:bb:ab:6a:a1:c8:67:28:fd:
1c:47:8a:c7:92:c6:ed:47:74:c4:b0:0e:80:67:2a:6f:31:88:
fa:68:0f:79:39:e3:40:b6:a4:f0:64:c0:e6:ed:29:86:69:a4:
ef:56:8e:7d:a6:c4:bb:7b:28:ef:d3:53:8f:44:80:44:ec:9f:
8b:14:fd:a5:cc:8d:0b:60:6d:0b:f4:32:86:14:aa:32:58:58:
70:a0:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:37 2026 by rpki-client