
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D55B660C345011EF8A3C1274C4F9AE02.roa
File: D55B660C345011EF8A3C1274C4F9AE02.roa (raw, json)
Hash identifier: G2Kg5iRkZRDHlS/eK89Q01yDKL0aXD6ONcP+f52VpMM=
Subject key identifier: 47:9F:1A:D3:BE:C0:CE:87:09:E8:28:4D:CF:B1:07:3E:6F:49:AE:03
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 318C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D55B660C345011EF8A3C1274C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:23:30 +0000
ROA not before: Mon 06 Jul 2026 16:23:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152547
IP address blocks: 160.22.252.0/23 maxlen: 24
165.101.160.0/24 maxlen: 24
165.101.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12684 (0x318c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:23:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd681-82ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:8a:45:1e:b5:e7:b5:bd:20:2e:5a:a6:7c:
a4:e3:cc:45:a1:56:ec:ad:9a:18:38:dd:8e:60:bc:
e2:47:eb:58:32:19:32:58:5a:d4:69:49:02:5b:1e:
f1:c9:98:89:d2:e9:2e:b0:e6:3d:48:7c:19:40:bd:
0c:1e:d3:82:8f:14:34:94:6e:57:93:54:1e:98:50:
36:19:4c:62:02:ed:86:75:2b:f4:0c:6b:ce:e5:dc:
d0:76:83:b8:71:99:18:48:73:5f:a6:8f:78:d3:66:
e4:76:13:78:87:cc:b6:2a:6f:08:a6:5d:81:9e:12:
50:71:2e:05:22:c5:42:79:09:7c:8c:bd:a9:ad:87:
31:d9:05:fc:3c:70:50:36:90:90:f0:46:d0:aa:1f:
5a:ab:e7:c5:a3:0e:57:69:f2:63:1d:49:3d:d2:a8:
82:82:d5:c5:d5:c7:b5:64:d0:f1:87:db:b5:f4:e5:
a2:49:73:81:70:d2:7a:6a:56:c3:1c:bd:18:a3:a4:
08:d2:08:05:14:5b:17:dd:80:13:7d:ce:1a:2b:41:
9f:fd:84:a2:66:2f:13:f5:e3:c9:44:45:a5:ac:ab:
93:05:e7:ef:2c:12:cb:4a:80:7f:09:65:57:fb:7a:
a2:64:25:0d:2a:2b:ce:29:fa:18:6f:ed:9e:db:d3:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:1A:D3:BE:C0:CE:87:09:E8:28:4D:CF:B1:07:3E:6F:49:AE:03
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D55B660C345011EF8A3C1274C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.252.0/23
165.101.160.0/23
Signature Algorithm: sha256WithRSAEncryption
08:73:e8:aa:e9:f3:6f:99:97:aa:24:a7:0f:50:7d:dc:a3:7f:
f8:d1:a2:85:be:4f:36:46:ef:91:30:91:5a:78:a8:4d:56:40:
47:f4:66:f9:90:a1:2a:60:c2:e2:7a:09:71:7a:50:6f:e1:61:
6e:23:09:d9:9e:03:59:d4:60:f0:6c:cf:61:2a:5a:df:07:51:
70:42:f6:13:49:d8:31:c3:0b:30:bb:71:f8:25:54:97:b2:73:
e3:14:61:b3:3e:70:de:cb:73:89:c0:1c:c4:8a:59:88:84:45:
14:11:fc:8c:69:19:3e:cc:f8:59:02:48:3a:6f:e0:91:b6:f5:
59:78:0e:d4:7d:60:ef:56:34:07:13:ad:c5:12:4f:14:b0:95:
2f:31:5f:77:78:f1:76:df:60:03:31:7e:cb:f9:56:1b:36:21:
ba:ff:15:2b:79:7d:ca:35:97:30:84:dc:38:c8:2d:69:2e:31:
a3:da:91:7a:6f:eb:8e:6e:66:93:f1:d5:6d:e4:d6:f8:4a:3c:
f0:96:ba:65:60:1f:f2:8e:e0:1e:1d:f5:a7:f1:c0:d2:79:5a:
17:9d:40:16:1a:60:89:e4:e3:11:70:84:1e:fe:87:fa:89:a3:
94:15:fb:1b:0a:d4:b3:1c:6a:b2:66:9b:6f:4d:2f:70:a2:b8:
67:f2:fa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:24 2026 by rpki-client