
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/EF63DB0EA26B11EF8F077C3FC4F9AE02.roa
File: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (raw, json)
Hash identifier: faGM7P04DgY9+kePEKWNSWyG4kwQPN9Aqs15IpEWkN8=
Subject key identifier: EF:1A:64:42:2C:EC:86:AA:C3:9B:BC:ED:57:BD:C1:5B:5C:AA:6C:3E
Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial: FA
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/EF63DB0EA26B11EF8F077C3FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:42:46 +0000
ROA not before: Fri 03 Oct 2025 07:02:31 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 149506
IP address blocks: 160.187.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Validity
Not Before: Oct 3 07:02:31 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a585c6-732e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:ae:10:a4:6e:d1:4e:e2:98:ed:bc:11:80:
e8:1c:ef:ae:48:fa:6c:17:7b:5a:c6:c3:94:57:e8:
4d:75:0c:7a:1c:f1:a9:d8:9d:9a:f9:b5:e7:d3:32:
c4:90:ba:18:a5:67:1f:6f:e9:33:e7:08:67:d9:9d:
50:78:f6:c0:de:ea:e5:11:1d:d6:88:2a:d4:73:f4:
ec:2b:2e:45:b5:9e:29:77:73:05:68:73:72:60:fd:
d0:ac:64:35:85:8d:85:e8:df:49:f2:18:ec:6f:30:
86:ef:bd:9c:c1:71:76:92:ee:71:81:7a:d5:2f:cd:
3b:99:97:73:91:26:f6:b1:c0:13:a9:a6:9f:1e:b0:
9f:e0:19:1c:a4:85:ac:f5:89:52:39:e4:d1:d4:52:
bf:d8:e5:52:4c:e8:a5:be:2c:7c:5a:ed:ed:50:e4:
2f:93:2e:9f:7d:34:66:53:18:8e:35:90:16:c1:46:
3d:49:4a:fd:1c:ed:4c:a6:ef:4f:6a:3f:7b:b5:1c:
7f:02:35:ed:04:e8:e7:1e:6b:f7:b0:89:18:f2:df:
84:1a:57:8f:32:87:d8:1d:b2:15:b5:6b:b1:ee:d2:
3b:85:f2:84:b1:ed:f2:6e:f2:8a:33:b1:e1:1a:df:
2b:62:f5:6e:06:30:9a:c7:55:d0:5c:df:ea:4f:7a:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1A:64:42:2C:EC:86:AA:C3:9B:BC:ED:57:BD:C1:5B:5C:AA:6C:3E
X509v3 Authority Key Identifier:
keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/EF63DB0EA26B11EF8F077C3FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.95.0/24
Signature Algorithm: sha256WithRSAEncryption
72:67:49:4f:1f:9b:2d:b7:d8:d7:fc:90:08:e6:51:23:81:e5:
48:94:d1:30:60:97:6b:bb:20:3b:33:23:98:0e:19:71:8a:f7:
1c:cf:6a:a1:24:28:3a:d8:4f:7a:2a:df:e0:64:5e:c3:f4:2d:
ae:b6:47:67:78:14:14:de:8f:41:4b:98:97:ae:64:c2:2f:a6:
6d:2c:74:66:bd:f8:63:af:37:6b:03:f8:a2:3e:ec:f8:c2:3c:
cf:d7:db:8e:6f:35:84:aa:fe:3a:3b:b1:25:4f:56:ce:d5:38:
3c:1c:16:d4:8e:20:2c:17:f6:4e:e8:63:f4:ab:86:6c:9f:54:
17:b2:9c:45:f7:10:77:77:77:27:00:3b:51:96:27:e6:ef:cc:
5a:5b:d3:90:bc:06:5b:89:0e:16:c1:78:b4:19:b8:d5:72:94:
b5:74:e3:1c:3b:8f:62:18:ae:86:77:35:c5:73:e4:89:96:24:
73:36:07:28:47:11:4b:f1:2a:1c:e9:fe:63:61:d8:a2:4a:40:
04:a7:fa:f2:59:86:39:fc:31:46:0f:d5:f8:2c:ea:14:53:46:
3b:65:6e:ee:40:f2:ee:af:61:e2:bd:bf:57:53:ee:fe:da:98:
87:9d:b1:42:22:d9:d5:52:38:a3:4a:40:0d:12:f5:40:19:b5:
bc:21:8a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:58 2026 by rpki-client