
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/E611D250118111F1BD19AAF2323D8C67.roa
File: E611D250118111F1BD19AAF2323D8C67.roa (raw, json)
Hash identifier: xyMx1DXyOWbPcDpJqLZAo5xVhocEULVqBNJWlrQgJEQ=
Subject key identifier: 80:30:F4:30:31:FA:90:E8:B5:7F:EA:7F:D3:B4:5A:72:EC:20:3D:16
Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Certificate serial: 23
Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/E611D250118111F1BD19AAF2323D8C67.roa
Signing time: Tue 24 Feb 2026 13:08:23 +0000
ROA not before: Tue 24 Feb 2026 13:08:23 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 16509
IP address blocks: 160.222.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Validity
Not Before: Feb 24 13:08:23 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=699da2c7-8b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:9a:fb:03:8d:3d:9c:be:88:54:83:47:10:
bb:e3:3a:b9:1b:5d:ff:8d:81:87:55:8d:f8:62:83:
79:86:42:a6:69:7d:d2:50:e3:c0:0a:20:14:32:f0:
6f:da:ac:88:8b:64:63:4a:85:bb:7f:c1:c0:cc:d3:
6b:c2:af:26:7a:0d:46:14:81:26:19:60:90:59:16:
82:59:5b:65:2b:e1:5f:a5:a9:40:a9:c7:ca:b4:be:
4e:68:58:1f:b1:d3:cc:5a:09:7b:6d:4b:bb:c0:4a:
df:93:b9:8c:a4:d5:1c:64:b2:fa:a5:76:57:53:cb:
b7:fb:ad:af:45:58:b8:5f:83:3c:a7:26:7b:b7:e4:
2a:b2:c2:3b:de:e5:0d:90:d0:15:28:c3:18:7a:40:
97:0d:76:52:fc:4b:6e:98:54:31:2b:db:77:e0:59:
b7:71:b4:40:47:7a:bc:b8:78:23:70:17:0c:4b:c8:
c0:8c:6c:f4:7c:98:12:88:94:74:ba:ce:a0:e1:c1:
d9:29:1a:c4:6a:60:d0:fc:64:87:33:be:e6:8c:91:
d3:67:7f:48:58:b2:53:2c:8d:04:d5:f2:cb:a5:10:
52:9f:7f:1c:d6:5e:d1:25:97:60:99:dc:24:0a:cc:
d8:ca:fc:f1:c0:a0:a5:50:91:fc:92:00:03:63:8f:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:30:F4:30:31:FA:90:E8:B5:7F:EA:7F:D3:B4:5A:72:EC:20:3D:16
X509v3 Authority Key Identifier:
keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/E611D250118111F1BD19AAF2323D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
05:99:19:cf:74:20:89:23:88:c0:9a:8a:36:02:24:14:33:21:
ce:7d:7b:fd:3b:e5:73:db:be:c0:32:2f:24:20:11:ac:0c:a0:
f8:38:fe:19:43:76:ef:a2:73:0d:a2:f9:18:fe:5e:20:d7:4f:
da:ee:cc:57:bd:75:75:08:2f:a1:2b:21:d7:24:d8:02:56:41:
d9:d7:c3:ed:e9:40:c8:0e:a0:68:d1:b3:f4:eb:3b:ad:9b:16:
4c:45:33:e2:42:54:89:fa:9f:82:c0:41:27:2e:33:56:1c:24:
d1:39:fe:04:84:53:27:94:f2:45:09:00:46:fc:31:61:9a:80:
03:bc:f1:f0:01:89:be:52:9b:28:64:26:fd:b7:e7:12:7b:c0:
93:18:c9:80:8b:a0:86:db:f3:7c:2e:fc:2d:8f:52:12:f4:fb:
de:c5:db:a8:39:89:0e:7b:ff:a0:d2:78:ee:b5:de:19:4a:db:
d0:47:ff:37:3f:40:ee:29:91:ec:e4:5f:be:76:3f:92:b2:46:
1d:cb:0d:7d:4e:76:c5:a6:8a:f6:ad:4f:e2:bc:d2:ff:9f:95:
f4:aa:7f:61:0f:1f:ea:43:89:2f:e1:cc:40:d1:dc:15:2c:0c:
74:cd:cf:ad:70:7e:c8:69:d5:f0:2a:99:a3:2a:7b:fc:8d:b6:
9f:2a:71:f0
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE0
RENENDExMC8GA1UEBRMoQ0MzNzZBNjhGQ0EzRTA5RjBDRUI1QzJDQjkxQjM0REIx
NEMzRUJDOTAeFw0yNjAyMjQxMzA4MjNaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5OWRhMmM3LThiNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdUpr7A409nL6IVINHELvjOrkbXf+NgYdVjfhig3mGQqZpfdJQ48AKIBQy8G/a
rIiLZGNKhbt/wcDM02vCryZ6DUYUgSYZYJBZFoJZW2Ur4V+lqUCpx8q0vk5oWB+x
08xaCXttS7vASt+TuYyk1RxksvqldldTy7f7ra9FWLhfgzynJnu35Cqywjve5Q2Q
0BUowxh6QJcNdlL8S26YVDEr23fgWbdxtEBHery4eCNwFwxLyMCMbPR8mBKIlHS6
zqDhwdkpGsRqYND8ZIczvuaMkdNnf0hYslMsjQTV8sulEFKffxzWXtEll2CZ3CQK
zNjK/PHAoKVQkfySAANjj93zAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUgDD0MDH6
kOi1f+p/07RacuwgPRYwHwYDVR0jBBgwFoAUzDdqaPyj4J8M61wsuRs02xTD68kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQ0Q0L0IxNzFEQjUwRTFB
QTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4TTYxd3N1UnMwMnhURDY4
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvekRkcWFQeWo0SjhNNjF3c3VSczAyeFRENjhrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RENENC9CMTcxREI1MEUxQUExMUYwQUZDRTg0Qjg0QTZGNTZCQy9FNjExRDI1MDEx
ODExMUYxQkQxOUFBRjIzMjNEOEM2Ny5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKDewDANBgkqhkiG9w0BAQsFAAOCAQEABZkZz3QgiSOIwJqK
NgIkFDMhzn17/Tvlc9u+wDIvJCARrAyg+Dj+GUN276JzDaL5GP5eINdP2u7MV711
dQgvoSsh1yTYAlZB2dfD7elAyA6gaNGz9Os7rZsWTEUz4kJUifqfgsBBJy4zVhwk
0Tn+BIRTJ5TyRQkARvwxYZqAA7zx8AGJvlKbKGQm/bfnEnvAkxjJgIughtvzfC78
LY9SEvT73sXbqDmJDnv/oNJ47rXeGUrb0Ef/Nz9A7imR7ORfvnY/krJGHcsNfU52
xaaK9q1P4rzS/5+V9Kp/YQ8f6kOJL+HMQNHcFSwMdM3PrXB+yGnV8CqZoyp7/I22
nypx8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:07 2026 by rpki-client