
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/6C722C5A6C8311EF90BD1B76C4F9AE02.roa
File: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (raw, json)
Hash identifier: 2Z5IzjJNdD4kG65ZpOb5f1Ky7VDv275TeVLHGASGOqA=
Subject key identifier: B6:1F:9F:5A:1A:30:16:BA:84:AF:8B:B9:E7:CB:4C:03:3F:40:69:19
Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Certificate serial: 0147
Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/6C722C5A6C8311EF90BD1B76C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:42:32 +0000
ROA not before: Mon 07 Jul 2025 06:13:22 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 45691
IP address blocks: 160.22.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Validity
Not Before: Jul 7 06:13:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a585b8-205a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:24:38:f3:2a:7e:53:a1:28:54:36:8d:b2:
20:22:9f:16:03:2a:03:3f:7e:5b:af:31:78:5d:01:
5d:64:03:e4:04:77:41:a2:0a:34:b1:4d:0e:f0:5f:
e6:47:20:f7:cc:84:14:6d:0e:42:03:21:ab:98:67:
5a:f2:94:c8:77:ae:b0:65:db:bf:10:e7:2a:36:72:
8a:4a:f2:bf:25:a2:1d:e6:aa:f9:b7:39:32:46:f3:
0b:b5:38:f9:aa:51:83:a5:e9:a5:2f:ce:e6:09:81:
2c:cd:c2:e7:f1:6e:58:5c:19:ff:dc:2d:fd:e8:57:
a8:bb:ba:5d:9f:21:2d:73:f0:00:4d:b8:c2:d3:71:
a6:83:e9:af:19:f5:d1:e1:f2:dc:98:12:54:cb:35:
ed:71:1c:00:07:f2:a1:52:1e:23:0c:bc:ef:09:75:
0a:97:99:ad:dc:fd:35:72:2e:a3:b0:20:87:e7:a5:
68:0d:73:5a:2e:67:7b:d0:55:84:c2:3e:92:31:fb:
92:22:7a:e8:4c:ac:3c:5f:e8:71:78:4f:86:e4:27:
0b:9c:7c:fb:e6:24:37:70:5b:a6:a0:6c:f3:94:3d:
a0:16:0f:6e:29:4d:8d:9d:79:01:2f:a0:22:97:84:
2b:f7:2d:d2:40:85:47:94:0e:98:7b:65:1a:6d:ee:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:9F:5A:1A:30:16:BA:84:AF:8B:B9:E7:CB:4C:03:3F:40:69:19
X509v3 Authority Key Identifier:
keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/6C722C5A6C8311EF90BD1B76C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.228.0/23
Signature Algorithm: sha256WithRSAEncryption
12:f6:09:4b:fa:f6:65:79:f0:48:47:2b:95:c3:f3:25:71:c6:
04:63:c6:60:c4:1f:dd:bd:85:e8:c5:55:8d:35:ab:f4:30:92:
56:81:ce:a6:d0:a9:c8:c6:f6:82:86:8d:9b:47:0d:7c:43:6e:
9a:53:24:98:6c:82:d0:b2:06:a8:de:de:76:f6:1d:82:80:08:
ac:00:5f:7e:e4:01:e8:bb:53:8b:c6:75:0a:47:5c:6e:3a:30:
0e:39:ba:87:2c:35:6d:55:d2:f6:6c:9c:8f:2b:9d:1f:70:db:
6a:d0:10:6d:4b:39:cf:db:16:ad:80:73:16:d5:66:59:97:a3:
ed:f5:9f:e4:68:a7:6a:63:6d:49:d9:7e:b7:55:57:a5:aa:e0:
06:3e:ca:03:69:27:15:40:07:0f:ea:ec:4d:4d:c8:73:d1:ed:
18:9e:5e:61:a7:04:a8:e0:10:03:87:1b:b4:26:3b:d1:ff:8f:
07:e6:83:3b:5b:33:ad:d3:0e:8b:9b:be:bf:ab:38:2f:b2:56:
4e:c5:3e:da:e3:8c:77:d9:17:d3:7b:dd:cb:1a:97:f9:ce:43:
83:66:97:dd:31:77:63:90:8f:00:7b:ea:f4:44:d5:78:c7:7a:
76:21:1b:e5:10:f8:47:dd:f5:06:f0:cb:9f:d3:24:39:f2:cb:
23:d5:4f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:54:05 2026 by rpki-client