
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/9CAF31CA5D8111F0A04DD550C4F9AE02.roa
File: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (raw, json)
Hash identifier: eX2tn1QIuokhr40tRhM6FAH4/iDlJ6AsfUDI7tg8Vpk=
Subject key identifier: 9A:D5:D6:B3:9F:4B:23:BF:44:41:D1:8D:F1:70:EA:1B:F7:FE:C8:B4
Certificate issuer: /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Certificate serial: 7B
Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/9CAF31CA5D8111F0A04DD550C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:12:08 +0000
ROA not before: Thu 10 Jul 2025 11:32:51 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 149486
IP address blocks: 160.30.16.0/24 maxlen: 24
160.30.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Validity
Not Before: Jul 10 11:32:51 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f4d7-12f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:92:33:84:a2:05:cd:c9:da:1f:e0:a8:f7:
ae:4f:f4:2d:47:5a:50:e4:ab:c9:7c:43:c4:40:58:
ca:4c:a1:63:50:2d:a7:90:1a:32:d2:b7:ce:fc:fc:
cf:f5:f2:b9:cd:93:78:10:9a:c7:df:9d:de:71:9b:
91:63:75:ac:b9:6d:e8:71:9c:65:ca:d5:05:da:94:
40:2d:7a:cd:47:87:ea:01:34:3d:b0:e8:bd:07:a2:
41:55:95:cb:44:3a:8b:59:fd:b5:0e:aa:d6:5e:2f:
40:53:af:41:fe:1b:3a:69:ca:91:5a:6e:3c:62:a8:
13:47:ab:9d:35:4b:35:e2:26:f0:00:49:fb:52:b1:
80:be:2d:5b:88:af:15:25:9d:9d:40:2f:5f:00:0f:
a4:5f:8c:62:1f:0f:1f:64:27:3b:b3:1f:e9:4a:de:
fc:2b:51:38:ff:7e:18:9c:ab:f0:40:3e:de:85:32:
68:33:f2:cf:6a:6f:6f:e8:ef:63:22:f7:8a:0d:ef:
a1:66:2c:3a:80:d8:18:fe:ca:67:56:d7:52:5a:4a:
7c:69:ed:d2:05:bd:a9:f8:99:dd:17:21:19:55:9c:
32:ea:8f:13:26:a4:ec:df:9d:b5:05:23:d2:7d:e1:
f2:34:60:c9:e5:89:2c:ed:b1:cb:2f:ca:2d:73:bc:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D5:D6:B3:9F:4B:23:BF:44:41:D1:8D:F1:70:EA:1B:F7:FE:C8:B4
X509v3 Authority Key Identifier:
keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/9CAF31CA5D8111F0A04DD550C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.16.0/23
Signature Algorithm: sha256WithRSAEncryption
61:61:ac:ff:11:a9:79:50:7b:26:64:e2:af:59:11:86:68:fd:
fe:a6:c3:e2:76:8f:5d:51:50:d2:0d:50:d1:c8:17:ce:37:9d:
9e:76:8c:3c:d5:c0:b8:0a:b1:cb:e6:5a:94:2c:df:fb:09:ef:
70:20:6c:10:40:eb:bf:21:34:06:02:3c:1c:36:b0:3f:d1:46:
21:5b:c7:d6:df:35:a1:81:7c:04:f3:3f:b6:30:19:75:ff:f1:
84:20:ac:bc:f3:4c:e8:2f:f0:0c:31:94:b8:b3:5b:06:7a:24:
37:c4:26:99:e6:28:04:f5:32:eb:73:cd:73:08:f4:13:49:90:
6a:5f:36:8c:fb:0a:ff:a6:24:4b:cf:b5:ea:e2:20:95:e7:79:
aa:47:1b:1b:04:6f:40:22:ed:2b:14:42:03:dc:d9:ef:28:8b:
47:e8:a2:e8:05:b9:e7:b3:34:11:ef:21:ca:21:7a:77:a0:7d:
6b:17:97:e9:cd:36:2c:54:2e:61:8e:4a:b8:f8:c8:4a:bb:eb:
32:19:5c:e4:fb:b0:f3:16:6c:00:48:b1:25:75:55:32:7b:ac:
e8:eb:bc:d3:8d:36:c1:f3:fb:a6:53:30:5c:e3:81:5a:86:9d:
f6:84:6c:34:78:81:b3:59:a8:20:cb:27:7b:69:b6:60:58:f1:
06:35:54:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:47 2026 by rpki-client