
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F3FFEC46508D11EFA1818A86C4F9AE02.roa
File: F3FFEC46508D11EFA1818A86C4F9AE02.roa (raw, json)
Hash identifier: vk/7hOrARQ3l8vH+6swHGLHGGc9KBMtOilYCdGRrjoU=
Subject key identifier: CC:B2:95:47:60:F4:68:96:3C:27:48:17:E7:B8:32:0E:30:B9:E0:6D
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30CF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F3FFEC46508D11EFA1818A86C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:17:13 +0000
ROA not before: Mon 06 Jul 2026 16:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136717
IP address blocks: 160.25.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12495 (0x30cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd509-55e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:0e:88:ed:3c:90:f8:7a:bf:29:89:19:d7:
7a:99:43:96:81:65:2f:2c:ca:07:6c:2e:99:50:d5:
ef:4a:b1:31:ba:68:9b:f1:f3:25:cb:78:e3:c9:7f:
c4:ab:f3:d5:5f:c0:fe:8f:f9:50:ab:9a:18:22:7b:
2d:cd:c1:4c:02:59:32:a9:ed:0b:e7:6f:0e:a5:22:
31:45:ca:c2:ee:d7:8b:6c:b1:c0:8b:54:dd:56:9e:
e0:16:7f:0a:1b:d3:dc:fb:d1:a6:52:90:24:1c:d8:
13:0d:0d:d3:32:89:43:34:02:f8:0f:0a:d2:06:28:
e9:1e:de:5d:8f:f6:7a:42:60:45:83:5f:b0:3e:a9:
44:8d:d7:d1:cf:79:63:34:96:8c:62:05:63:43:22:
d2:47:98:93:06:58:0b:81:f9:4f:d5:8a:7d:ed:c5:
3e:09:29:20:73:65:5f:60:42:2c:40:69:c9:25:68:
7d:bc:3f:7b:cb:0e:0c:cc:16:22:f2:d6:b6:6c:d7:
82:ad:74:66:2d:cf:50:aa:41:52:b9:3d:b9:14:56:
92:50:23:40:d8:75:27:46:32:cd:9e:26:54:9b:81:
22:99:71:77:7a:32:e0:53:1c:17:52:2b:42:e7:03:
78:5f:5f:94:42:6b:7f:3c:2d:37:d3:dc:a9:3a:a7:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B2:95:47:60:F4:68:96:3C:27:48:17:E7:B8:32:0E:30:B9:E0:6D
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F3FFEC46508D11EFA1818A86C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.190.0/23
Signature Algorithm: sha256WithRSAEncryption
53:9b:38:c5:64:85:fe:8d:66:31:e6:ab:f7:60:96:59:06:85:
db:d7:b3:e9:90:d0:f3:6b:d9:64:e3:e4:bc:03:2c:24:ce:4b:
ed:73:8a:6c:02:40:3c:65:14:87:8d:30:14:fd:7c:a9:a1:f8:
60:0f:9f:ce:d7:80:03:3e:42:fa:e5:86:78:6c:03:3b:e1:2c:
c0:24:e8:6d:66:88:bb:b7:e9:c4:9c:d4:20:bd:b3:34:18:8f:
47:3e:19:8b:15:59:98:21:e3:63:06:07:9c:05:27:49:79:87:
b9:1c:a1:8d:c8:bc:fb:c6:ec:54:b3:78:ff:0e:23:ee:04:14:
13:bb:8b:45:8a:37:a4:9d:ca:a6:87:93:75:da:f7:86:36:24:
83:53:cd:4d:27:eb:8b:00:e2:de:74:11:c3:35:c2:4a:a2:97:
3a:21:7b:ea:98:18:d2:d4:aa:8b:a1:c1:db:08:9f:a8:6e:00:
79:9e:48:ff:2f:f3:c8:5f:f1:62:67:b4:1f:29:ec:3b:03:5a:
36:a4:c8:f6:0a:88:25:d1:0d:d4:ce:f6:23:e3:1e:92:04:34:
a4:59:d3:81:07:c1:9f:c6:4f:f2:5b:a9:54:55:40:09:b9:a3:
37:8a:36:be:b9:a4:cf:8d:74:26:81:ef:8c:d0:10:57:8e:83:
b2:0b:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:47 2026 by rpki-client