
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa
File: E3EF319A4E3F11EFB7712730C4F9AE02.roa (raw, json)
Hash identifier: ApzZJi/a2F0WB/89W7aYpcDblnqbmZrXGhXws+IVRKg=
Subject key identifier: 6F:67:33:DB:4E:46:FD:73:D1:40:09:62:D3:04:8D:82:B5:03:8D:D7
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3003
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa
Signing time: Sun 31 May 2026 16:30:54 +0000
ROA not before: Sun 31 May 2026 16:30:54 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 59191
IP address blocks: 160.25.106.0/23 maxlen: 24
160.30.116.0/23 maxlen: 24
160.187.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12291 (0x3003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:30:54 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c623e-51d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:61:5f:f0:ea:df:5e:9b:52:e6:e6:7e:f8:
22:12:ba:4c:ad:c5:67:6a:af:96:48:e3:a4:45:61:
48:0d:c6:db:8e:66:7b:09:76:bd:4a:a2:dd:5c:56:
55:c5:c8:95:85:82:90:36:fb:ae:89:fc:e7:5d:25:
0a:12:64:88:2b:a9:2b:27:ad:e0:42:88:88:5c:cf:
a1:72:e4:42:60:9f:98:a3:73:27:ee:9f:2b:56:1e:
51:c2:a5:c6:6c:20:bc:81:94:76:5b:da:26:11:d1:
47:8d:e5:31:53:50:29:7a:9a:6e:ac:63:ca:10:a8:
7e:7d:75:fc:83:cd:00:c0:ec:fa:e4:d2:98:38:cc:
02:82:73:68:10:53:d7:fa:61:d1:ba:25:37:71:10:
1b:52:ff:70:62:b1:2f:55:f8:0b:f9:57:e7:e6:8a:
ab:17:ff:a8:9c:59:88:8e:a2:5b:50:fb:05:df:a6:
aa:51:2f:7c:08:a0:cb:49:12:c2:71:6a:dc:75:31:
2b:b8:64:40:84:64:13:e7:80:4a:68:80:f1:60:06:
5c:e4:bf:7d:f8:84:7f:eb:7c:33:85:c1:23:f5:e0:
5f:74:95:84:db:b3:ef:14:b2:e5:af:ec:8f:46:c6:
6f:60:db:05:8c:26:82:ec:5f:57:1a:1e:03:32:cf:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:67:33:DB:4E:46:FD:73:D1:40:09:62:D3:04:8D:82:B5:03:8D:D7
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.106.0/23
160.30.116.0/23
160.187.62.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:9d:4d:21:0d:9b:36:ca:5c:e8:12:70:79:21:66:67:cc:60:
13:d0:9f:2c:81:14:06:95:6f:19:1c:86:7f:a6:11:c3:cc:00:
f9:6c:41:69:2a:5d:ca:62:be:9b:60:b6:a9:4e:ff:a1:74:dd:
ac:20:ef:99:1d:77:dd:f5:b7:57:4c:f3:92:76:cf:be:c0:7c:
17:0a:95:0f:e3:80:71:d4:2a:42:0d:30:4f:0f:2b:6d:59:5a:
62:68:5c:f9:3c:95:5d:79:99:56:c6:cb:c0:58:72:67:6a:33:
e0:09:42:00:6b:98:b3:b1:e7:f6:6b:07:f9:64:9c:3f:1d:eb:
4f:4e:a1:42:26:bb:d2:a2:9c:8b:87:60:cb:94:b6:b4:6b:12:
af:3d:50:22:f2:0d:18:d0:44:98:73:d0:46:e6:b9:53:2a:03:
be:4a:05:13:7e:93:14:cc:e6:a4:7e:07:be:77:80:57:01:ea:
20:f8:f7:59:fa:3e:65:ad:7f:c4:25:45:26:9c:fc:de:43:2a:
72:91:02:c0:46:bc:22:a6:6d:9f:0c:8d:02:cb:67:b9:49:3d:
88:16:78:78:19:3e:89:20:cf:91:1e:31:43:b8:5a:55:1e:bb:
fe:e4:85:25:ea:62:90:39:a9:04:b1:46:2c:1b:ff:43:ec:1b:
d2:7b:65:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:55:30 2026 by rpki-client