
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/0C544A5EEAD811F0B5BDA80D656F56BC.roa
File: 0C544A5EEAD811F0B5BDA80D656F56BC.roa (raw, json)
Hash identifier: CiRm4DIYsmYYVk9ph7+Qrr/TAwJAj6FY/60x7MRfKDY=
Subject key identifier: A4:FC:0F:0A:89:25:DE:C1:C8:5E:D1:28:1F:72:7F:9A:3E:BC:32:5A
Certificate issuer: /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
Certificate serial: 20
Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/0C544A5EEAD811F0B5BDA80D656F56BC.roa
Signing time: Sun 01 Mar 2026 05:46:29 +0000
ROA not before: Tue 06 Jan 2026 08:16:49 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 131310
IP address blocks: 160.30.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl
rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
Validity
Not Before: Jan 6 08:16:49 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3d2b5-f116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:66:d8:20:57:41:a8:bf:13:e7:6c:b8:b8:
0c:15:33:0d:94:a9:d6:00:d6:95:32:ed:01:03:9f:
17:15:b3:ab:aa:40:88:2e:5d:6a:d4:3a:04:00:f1:
e3:a2:f7:0b:22:21:7a:83:4f:a7:1e:40:0a:25:f2:
52:d9:96:4b:d3:95:b8:71:c2:d2:86:8f:a6:ab:d5:
11:9c:7b:f1:50:ed:46:45:b1:5f:e1:1c:38:52:f9:
12:12:92:a1:a9:c0:7c:8c:17:1d:65:3a:65:07:dc:
56:4d:42:74:14:a4:eb:c4:f9:3a:4e:22:a6:b6:cd:
b0:f3:52:ae:c8:0d:99:9c:09:39:b1:73:ab:86:0f:
ae:01:4f:93:db:e8:fa:49:4f:7a:f7:05:b1:6f:b1:
47:a2:40:25:e2:fe:9a:4c:ed:9f:29:a2:0d:79:d0:
c9:7e:de:b3:63:45:09:e2:e7:3d:7b:1b:20:55:42:
13:83:7c:b8:0c:98:f5:82:6d:da:ab:54:8a:69:58:
cd:d1:bd:a1:62:01:36:c4:f7:1f:c2:26:75:c8:df:
49:ea:b7:11:f6:aa:6e:7a:85:28:5b:97:47:47:a0:
94:5f:2b:0d:bb:4a:d4:28:f3:f9:60:b7:b5:66:48:
7f:75:67:7f:09:94:5c:cb:4c:5d:e5:6f:5c:6f:40:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FC:0F:0A:89:25:DE:C1:C8:5E:D1:28:1F:72:7F:9A:3E:BC:32:5A
X509v3 Authority Key Identifier:
keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/0C544A5EEAD811F0B5BDA80D656F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.222.0/23
Signature Algorithm: sha256WithRSAEncryption
93:6e:79:22:35:6a:27:5e:5d:15:9e:58:86:48:a5:e0:90:06:
fc:91:72:56:62:2f:15:f3:ef:fe:65:16:32:6a:4c:7d:d8:7f:
33:2e:96:f2:73:dd:bf:9f:ea:b3:51:9f:64:fd:3c:c9:41:fd:
c9:2a:1f:79:b9:33:1d:99:b0:00:eb:3e:4d:f0:d9:33:90:c8:
4d:7e:61:8a:7a:1d:f8:27:66:cd:96:4f:fd:24:5a:06:a6:57:
29:22:8d:7a:be:4a:e0:9b:5a:c3:70:20:f6:6e:a5:72:51:24:
3e:70:98:72:03:23:e1:01:da:1f:8f:5e:bd:ba:16:8c:f1:81:
3d:ab:63:95:9c:47:e4:c6:73:81:16:51:b8:4f:0b:eb:98:20:
fe:e7:a3:ee:ff:10:ad:cb:28:67:d4:08:c8:e1:f3:cb:4c:9b:
f2:5a:87:5d:fd:6b:ea:0b:2d:2c:d8:dc:d1:7f:6f:f8:48:36:
5a:07:f6:57:bf:93:66:2e:d5:5d:a5:4b:6b:c4:9a:f3:d1:b5:
7b:0c:1c:a5:b1:21:17:e0:08:92:1a:52:75:49:5c:0e:1d:2e:
44:16:c9:93:bc:2c:75:d0:c3:98:9d:3e:6a:69:29:80:fd:52:
e6:d6:ac:14:67:96:ec:d7:96:38:21:bd:be:7f:88:6a:1b:a6:
b8:9e:4c:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:25 2026 by rpki-client