
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FD70F5608D4311F0B13B2181C4F9AE02.roa
File: FD70F5608D4311F0B13B2181C4F9AE02.roa (raw, json)
Hash identifier: 6cU6g36NB7TSsUe5ZWDs7p2LoFcGIDl0fBlkwO7DQHo=
Subject key identifier: 16:3E:39:13:41:DC:C1:FC:6E:CE:DF:E2:2E:B1:91:E9:38:71:55:17
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30C1
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FD70F5608D4311F0B13B2181C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:16:45 +0000
ROA not before: Mon 06 Jul 2026 16:16:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135760
IP address blocks: 160.22.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12481 (0x30c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:16:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd4ec-f8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f5:f5:a4:09:66:eb:25:e5:23:8a:05:19:d6:
c4:55:30:aa:ee:ae:0f:de:36:cf:20:b2:98:81:35:
d8:66:10:67:52:d2:b9:2f:fc:2d:92:e1:b5:b9:9a:
c0:3b:96:c7:7d:77:79:28:5e:d5:03:1f:b4:1d:52:
07:99:51:75:90:38:32:1a:20:6e:a5:ec:6a:ca:76:
52:50:69:5c:51:5a:bb:80:e7:b0:4f:c3:cb:bb:6c:
f5:a8:73:a1:c4:90:d8:32:bd:ae:3c:e9:c4:e5:b5:
63:35:4f:2f:10:e0:ee:cc:55:2f:95:83:e6:66:92:
a1:70:db:25:0e:81:3c:c3:28:47:31:d6:06:b0:4a:
ea:36:3d:a0:0a:f9:56:97:43:86:02:32:d9:22:74:
7b:21:91:72:86:d6:01:f4:e3:65:15:fe:4a:38:c3:
71:98:d9:29:79:85:25:b2:92:58:9f:3e:15:c9:f6:
4e:88:4d:e7:5b:55:16:fb:6d:63:e4:c0:07:45:9c:
56:e5:51:20:98:bd:c9:21:4e:51:55:5a:b8:1b:0d:
89:fe:3a:e5:c5:06:67:cd:0e:9c:df:1a:cb:e4:7a:
a1:e8:89:5e:fd:61:84:cb:be:4d:b7:d0:b8:87:64:
ed:80:a1:bc:24:0f:a4:5f:02:7d:c6:a2:a0:6e:f5:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:39:13:41:DC:C1:FC:6E:CE:DF:E2:2E:B1:91:E9:38:71:55:17
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FD70F5608D4311F0B13B2181C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:61:5e:88:97:c0:74:ab:26:94:c4:61:bb:e5:ff:f7:82:82:
1d:ed:37:3e:42:94:a9:c9:dc:e3:1b:b0:ce:18:79:4c:02:1e:
b9:7b:66:49:4a:db:e6:9d:c3:79:5d:2c:97:38:4c:30:90:ef:
6f:2b:b3:bf:24:b8:aa:3e:77:dd:0a:21:2e:34:c4:fa:2d:83:
ef:0a:f6:93:0b:63:b5:e7:c0:10:84:60:6e:57:a7:58:3e:23:
c8:27:a2:24:6e:b0:db:88:8e:04:b2:28:c8:18:a9:36:53:40:
00:ba:5b:bf:a2:8d:b3:cd:20:d2:92:c2:1a:71:4c:e2:27:2f:
57:70:d8:98:62:bb:c4:b5:3b:73:91:65:98:c5:b3:1b:f8:7d:
a9:41:aa:0f:df:cf:05:8f:7c:d0:ac:48:5f:bc:85:7a:47:85:
73:f6:fb:d3:57:a6:3c:80:de:29:26:a5:67:48:fb:6e:d3:e7:
01:b8:7a:e3:49:d3:e1:d2:8c:8d:a5:fe:db:e9:0e:76:97:08:
6b:fc:16:35:53:31:36:d2:a8:a8:cd:30:9c:ae:a7:91:9f:f9:
ae:1b:bb:1e:97:48:bb:81:79:be:01:af:7e:1d:88:5b:6c:a9:
e1:f3:44:9c:5d:c4:56:f6:30:9c:fe:23:78:50:d5:13:9a:55:
35:05:38:a5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYxNjQ1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDRlYy1mOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5vX1pAlm6yXlI4oFGdbEVTCq7q4P3jbPILKYgTXYZhBnUtK5L/wtkuG1uZrA
O5bHfXd5KF7VAx+0HVIHmVF1kDgyGiBupexqynZSUGlcUVq7gOewT8PLu2z1qHOh
xJDYMr2uPOnE5bVjNU8vEODuzFUvlYPmZpKhcNslDoE8wyhHMdYGsErqNj2gCvlW
l0OGAjLZInR7IZFyhtYB9ONlFf5KOMNxmNkpeYUlspJYnz4VyfZOiE3nW1UW+21j
5MAHRZxW5VEgmL3JIU5RVVq4Gw2J/jrlxQZnzQ6c3xrL5Hqh6Ile/WGEy75Nt9C4
h2TtgKG8JA+kXwJ9xqKgbvUYKQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBY+ORNB
3MH8bs7f4i6xkek4cVUXMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkQ3MEY1NjA4
RDQzMTFGMEIxM0IyMTgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoBaDMA0GCSqGSIb3DQEBCwUAA4IBAQCPYV6Il8B0qyaUxGG75f/3
goId7Tc+QpSpydzjG7DOGHlMAh65e2ZJStvmncN5XSyXOEwwkO9vK7O/JLiqPnfd
CiEuNMT6LYPvCvaTC2O158AQhGBuV6dYPiPIJ6IkbrDbiI4EsijIGKk2U0AAulu/
oo2zzSDSksIacUziJy9XcNiYYrvEtTtzkWWYxbMb+H2pQaoP388Fj3zQrEhfvIV6
R4Vz9vvTV6Y8gN4pJqVnSPtu0+cBuHrjSdPh0oyNpf7b6Q52lwhr/BY1UzE20qio
zTCcrqeRn/muG7sel0i7gXm+Aa9+HYhbbKnh80ScXcRW9jCc/iN4UNUTmlU1BTil
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:49 2026 by rpki-client