
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa
File: E3EF319A4E3F11EFB7712730C4F9AE02.roa (raw, json)
Hash identifier: htmXC6spRbqsiptaqJ5MzSuyQG3Rz6yOjJZg72xZUJk=
Subject key identifier: E2:27:68:8E:26:4A:DA:DF:1B:B3:76:56:0D:53:90:50:D1:23:9E:AB
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3232
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:28:58 +0000
ROA not before: Mon 06 Jul 2026 16:28:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59191
IP address blocks: 160.25.106.0/23 maxlen: 24
160.30.116.0/23 maxlen: 24
160.187.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12850 (0x3232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:28:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd7ca-2131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:2f:84:50:fe:b8:79:ad:c4:3f:9b:28:ae:
8b:b5:3d:30:64:ce:5a:8b:04:24:12:03:94:6b:f1:
cb:1a:42:c0:e3:82:4a:eb:f5:38:b8:ab:bb:b0:54:
ee:6a:02:45:cf:de:27:fe:71:83:7c:b6:67:86:1c:
e4:88:7d:93:c5:2e:1f:eb:f7:9e:ba:97:19:da:55:
10:bc:71:72:cb:58:ae:ad:ae:fd:e5:55:b7:1c:85:
61:13:b6:98:ca:ad:b3:87:8a:9f:92:4a:fd:81:47:
a1:49:e5:1e:b0:97:a5:26:8b:6d:1d:af:da:36:5b:
a7:95:41:54:87:c0:e2:7c:3b:8a:9a:55:0f:28:b1:
20:91:42:23:fe:01:31:fd:9f:c9:61:b1:1a:2c:e6:
ff:3b:af:2b:a4:be:bc:b6:7b:a4:8a:fd:8c:7d:14:
b9:31:bf:d4:78:1e:bc:15:99:57:85:3d:37:58:21:
36:70:47:09:45:b6:ee:00:c4:3a:ea:fc:a6:40:f2:
ef:36:25:73:ba:47:12:c3:43:3b:c0:e9:49:6d:7c:
4e:37:0c:15:f4:73:f8:d1:b8:95:6b:bb:bc:60:0a:
df:a3:13:bf:64:44:ca:f6:05:b1:ec:cc:45:06:41:
a6:52:2c:3a:19:2a:00:20:cb:86:b5:7b:81:3d:84:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:27:68:8E:26:4A:DA:DF:1B:B3:76:56:0D:53:90:50:D1:23:9E:AB
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.106.0/23
160.30.116.0/23
160.187.62.0/23
Signature Algorithm: sha256WithRSAEncryption
69:78:d3:9e:bf:b2:50:b3:de:22:5a:b9:be:3a:c7:26:82:8a:
6f:67:27:39:ba:68:3a:b4:75:f2:04:4d:d4:70:c4:1e:57:1d:
f2:a7:30:b8:67:7e:34:96:4c:bf:0c:47:5d:51:23:6c:ca:fc:
da:6f:fc:3c:6a:2c:b5:e5:7a:23:9c:11:fb:c6:2a:7e:20:9a:
10:d1:a4:cd:43:f0:5d:b3:0c:58:98:2e:f1:9d:d6:09:d6:83:
c1:67:df:35:e7:98:6b:59:fd:08:44:cd:eb:94:06:50:70:0a:
b6:18:d1:a4:8b:9e:27:43:a3:2c:aa:b9:74:a4:7b:29:2f:9c:
61:d4:88:86:2e:98:c4:e5:2a:27:22:c1:0b:57:29:b6:8d:58:
b2:a0:1d:4a:fa:4c:97:2c:e0:2b:ee:5d:c2:b3:ec:b6:c8:0e:
dc:67:8c:19:b6:13:36:69:a5:9f:fc:31:07:63:68:8b:a1:26:
21:19:33:53:10:16:23:bf:ce:07:fb:32:49:cd:71:99:85:b3:
d1:80:85:8f:4a:7f:81:83:fb:cf:c4:c2:7b:d1:94:02:fb:1e:
b3:ee:78:c5:f9:ef:b2:d9:97:24:dc:82:55:8c:5b:d6:cc:67:
fa:88:1d:36:13:80:43:00:6b:f6:3f:fe:f4:84:63:5f:77:94:
e5:83:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:25 2026 by rpki-client