
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/2D57F1BAB90511F0BF94505DC4F9AE02.roa
File: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (raw, json)
Hash identifier: JKJHFFpKhMqZKta0zHh97l6PnllD0+iW/lc7gyj9EKo=
Subject key identifier: 44:AF:B3:C3:05:1D:37:FB:45:83:88:BF:51:5B:56:2B:DA:51:36:0F
Certificate issuer: /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Certificate serial: A9
Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/2D57F1BAB90511F0BF94505DC4F9AE02.roa
Signing time: Thu 03 Sep 2026 07:58:42 +0000
ROA not before: Thu 03 Sep 2026 07:58:42 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 153184
IP address blocks: 160.30.58.0/24 maxlen: 24
160.30.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Validity
Not Before: Sep 3 07:58:42 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9928b1-f05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:40:aa:19:73:b3:19:3c:f3:80:7b:ad:d4:
1c:cb:f2:48:6e:0f:0d:e2:05:5c:20:d1:b4:99:28:
63:31:88:83:75:42:8d:17:3c:93:80:fc:42:49:51:
e7:59:fe:9b:8c:3f:68:5e:a8:0a:a8:b9:99:4e:77:
86:a3:d4:ab:c0:7e:c9:4b:ae:bf:93:d8:fd:39:81:
fa:20:61:64:1f:7f:09:0e:75:ef:25:4c:62:6c:cf:
ad:42:c4:d3:5b:ee:01:d7:55:4b:93:47:b6:14:f2:
d4:12:f5:d9:e7:7d:24:4e:bb:e9:8f:ff:ae:7b:b0:
bf:d2:03:58:0d:f8:b7:2c:2a:0f:af:73:d5:5d:4a:
bb:9d:b5:20:f8:60:49:67:23:56:5e:f6:08:80:f9:
9a:4a:22:a8:b6:fb:6e:2a:0b:9e:7d:97:83:25:0e:
6a:07:e6:e3:71:41:0c:dc:c4:63:9f:91:65:62:1f:
e8:61:ee:30:fb:a0:55:2f:bb:36:1b:bf:38:ba:98:
63:e4:2e:34:77:07:84:18:f8:b6:50:3b:1e:09:51:
aa:7b:99:05:3c:a4:58:38:eb:17:5d:11:6a:2c:dc:
32:8a:25:0a:59:b8:43:dc:9a:52:f0:63:39:61:49:
1e:81:9e:3a:b4:13:7d:cf:50:d9:0a:6b:3b:d0:ce:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AF:B3:C3:05:1D:37:FB:45:83:88:BF:51:5B:56:2B:DA:51:36:0F
X509v3 Authority Key Identifier:
keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/2D57F1BAB90511F0BF94505DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.58.0/23
Signature Algorithm: sha256WithRSAEncryption
60:9a:e7:b0:b9:24:2b:74:f6:e4:fe:5e:e6:4e:18:81:a8:92:
61:68:f5:0c:a3:9f:d3:12:1a:3f:39:fa:9a:aa:d5:84:7d:06:
04:f8:3d:3f:cb:2b:ee:41:e9:27:e1:2f:06:ec:96:0a:b2:02:
94:f7:89:a0:ab:db:2e:ae:09:2a:cf:62:8f:ee:05:43:fb:16:
6e:76:20:c6:73:5a:27:0e:25:11:4e:62:61:9b:b8:ea:df:45:
8d:d3:86:db:bd:3b:20:85:ae:71:4a:6f:5f:c1:0c:57:3a:24:
67:2e:05:f1:31:8a:d8:d0:07:66:e2:8a:26:6a:31:a9:b0:4b:
90:43:b7:c3:80:66:26:92:05:65:b6:65:0a:c8:20:8b:e3:c8:
5b:c4:85:e6:50:a3:18:60:7d:67:67:ce:4f:bb:69:2e:8d:1b:
ec:e5:b2:ee:5b:c9:07:be:77:ee:e2:de:1a:8b:09:41:70:16:
95:c6:bc:63:93:fb:2b:71:87:f2:5e:37:c9:73:8b:37:db:ce:
81:f0:68:48:29:bc:c9:9d:8b:93:8d:4b:c2:be:4c:bd:2b:54:
0b:68:ec:43:2b:7b:6a:19:86:5f:ac:e2:74:3f:9d:a3:c7:dd:
a1:db:b0:34:f4:06:42:9a:ff:5a:2b:98:50:9b:e6:05:07:52:
4b:05:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:36:57 2026 by rpki-client