
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/5F18EB127A7E11EF932E0B3EC4F9AE02.roa
File: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (raw, json)
Hash identifier: VWRRCd4nJbWD0TRBP58eY5MdXn/pUrD+aCnAKKgYqGE=
Subject key identifier: 6B:80:68:CF:81:F8:C9:B0:06:60:B0:58:98:78:C4:0B:25:8B:15:8D
Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial: D8
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/5F18EB127A7E11EF932E0B3EC4F9AE02.roa
Signing time: Fri 31 Oct 2025 05:49:42 +0000
ROA not before: Fri 31 Oct 2025 05:49:42 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 137097
IP address blocks: 160.187.66.0/24 maxlen: 24
160.187.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Validity
Not Before: Oct 31 05:49:42 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69044df6-4400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:f6:66:f0:86:f7:64:bb:db:03:d9:29:bb:
a7:16:48:58:82:cb:cf:db:f4:9e:61:85:b1:e0:4a:
d2:6e:31:32:08:d5:43:d9:25:28:08:a7:49:c1:c6:
f2:02:39:81:65:b8:11:38:00:70:c5:1d:6e:1e:e1:
15:b9:c7:fe:32:a9:93:76:0b:46:03:d9:8a:7d:50:
f3:3b:54:1d:5f:0d:6c:50:e0:00:30:23:c0:41:e6:
d5:53:b8:09:5b:2a:83:32:d5:52:6c:86:3a:8e:4b:
56:97:31:6e:8b:01:19:e9:65:7b:ae:2f:c5:eb:bb:
e5:e5:0b:1a:b4:1e:c0:b2:f0:18:c7:e2:c1:d9:9a:
d1:23:dc:4b:3b:75:a7:b1:80:0d:c7:31:f6:8a:38:
33:a9:5e:2e:9a:c4:d2:25:61:ab:8c:e9:ee:c7:2d:
2e:96:85:71:4f:7b:19:ac:28:7f:ff:1e:f9:d3:ed:
6e:ff:b6:26:81:d8:9c:f6:7f:70:c0:37:b8:06:81:
70:5e:c9:83:0f:45:76:58:c0:dc:18:6f:70:cb:08:
a8:67:6c:2f:d3:21:c7:7a:8a:c7:14:8b:e3:e5:4e:
32:c7:3e:33:8d:bd:5e:a4:2e:32:25:f0:3d:dd:a8:
e8:7c:2b:c9:72:0f:12:58:5e:8f:ed:93:f8:5d:ad:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:80:68:CF:81:F8:C9:B0:06:60:B0:58:98:78:C4:0B:25:8B:15:8D
X509v3 Authority Key Identifier:
keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/5F18EB127A7E11EF932E0B3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.66.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:20:ab:fa:98:69:33:00:d6:e6:53:fb:76:bd:0e:21:08:ff:
63:75:32:8c:4a:30:38:00:1c:39:a8:58:63:ad:75:6e:2f:59:
2f:4c:b5:f8:68:9b:59:c2:1b:75:27:9a:f0:a6:e0:e1:f9:87:
23:94:c1:af:4a:a9:6b:7c:85:b1:1f:48:20:b7:66:22:29:60:
f9:e5:2f:8c:38:9e:2b:80:b6:6f:2d:09:c4:01:cd:90:ca:da:
d4:54:34:48:31:41:74:f1:af:93:1f:c5:d4:4e:26:e2:3c:6e:
b2:6a:c9:91:2e:2b:eb:b3:ea:38:83:c9:69:d6:6f:00:9e:cd:
40:71:5b:db:26:15:ee:2d:52:2e:ff:b2:82:83:c8:93:34:95:
d4:f3:4a:98:40:2a:4a:8e:30:60:a9:c3:ef:21:f1:43:f8:b9:
2c:98:88:fa:63:eb:55:88:b1:bf:0f:9d:dd:75:fa:03:38:d4:
23:6f:6b:a1:10:47:2e:d5:70:27:2d:47:4e:69:b2:84:41:fe:
27:73:56:7b:d9:46:10:ec:c6:d7:5a:00:19:6e:84:32:c8:59:
87:8d:81:64:2a:c0:46:fd:91:fa:77:91:a7:b5:7b:c4:83:a0:
0b:f8:a0:c7:e4:9b:ab:77:48:fe:de:46:2b:80:60:36:d1:29:
a7:8a:7e:ba
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA0MzYxMTAvBgNVBAUTKDQyQzJDQkE0N0ZBRDM4OUZEMThCNjFDQUUyMjQ3MkQ2
MUUwRUE4OTYwHhcNMjUxMDMxMDU0OTQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA0NGRmNi00NDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvXT2ZvCG92S72wPZKbunFkhYgsvP2/SeYYWx4ErSbjEyCNVD2SUoCKdJwcby
AjmBZbgROABwxR1uHuEVucf+MqmTdgtGA9mKfVDzO1QdXw1sUOAAMCPAQebVU7gJ
WyqDMtVSbIY6jktWlzFuiwEZ6WV7ri/F67vl5QsatB7AsvAYx+LB2ZrRI9xLO3Wn
sYANxzH2ijgzqV4umsTSJWGrjOnuxy0uloVxT3sZrCh//x750+1u/7Ymgdic9n9w
wDe4BoFwXsmDD0V2WMDcGG9wywioZ2wv0yHHeorHFIvj5U4yxz4zjb1epC4yJfA9
3ajofCvJcg8SWF6P7ZP4Xa2u8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGuAaM+B
+MmwBmCwWJh4xAslixWNMB8GA1UdIwQYMBaAFELCy6R/rTif0YthyuIkctYeDqiW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQzNi8xNTYxQkVERTc2
NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9KX1JpMkhLNGlSeTFoNE9x
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDA0MzYvMTU2MUJFREU3NjU3MTFFRjhCRkM3QTExQzRGOUFFMDIvNUYxOEVCMTI3
QTdFMTFFRjkzMkUwQjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgu0IwDQYJKoZIhvcNAQELBQADggEBALogq/qYaTMA1uZT
+3a9DiEI/2N1MoxKMDgAHDmoWGOtdW4vWS9Mtfhom1nCG3UnmvCm4OH5hyOUwa9K
qWt8hbEfSCC3ZiIpYPnlL4w4niuAtm8tCcQBzZDK2tRUNEgxQXTxr5MfxdROJuI8
brJqyZEuK+uz6jiDyWnWbwCezUBxW9smFe4tUi7/soKDyJM0ldTzSphAKkqOMGCp
w+8h8UP4uSyYiPpj61WIsb8Pnd11+gM41CNva6EQRy7VcCctR05psoRB/idzVnvZ
RhDsxtdaABluhDLIWYeNgWQqwEb9kfp3kae1e8SDoAv4oMfkm6t3SP7eRiuAYDbR
KaeKfro=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:10:35 2025 by rpki-client