
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/2D57F1BAB90511F0BF94505DC4F9AE02.roa
File: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (raw, json)
Hash identifier: +wWjLcPKpBqVBQPIBu36nGMdiKTiR75UkPnPyB3guZo=
Subject key identifier: 7A:02:CD:BA:11:06:79:6F:A7:9B:9A:9C:C9:29:B7:19:A2:F7:1D:D5
Certificate issuer: /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Certificate serial: 44
Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/2D57F1BAB90511F0BF94505DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:10:14 +0000
ROA not before: Mon 03 Nov 2025 22:33:53 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 153184
IP address blocks: 160.30.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Validity
Not Before: Nov 3 22:33:53 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3d846-96cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:11:e6:15:68:e7:6d:51:49:b2:d7:75:ac:
e2:c7:97:93:bc:c9:c0:b6:78:fa:3c:22:7f:35:4a:
d6:71:40:ee:0a:6e:56:fb:c3:fa:4f:84:04:4c:6f:
2e:82:e6:99:a6:57:9c:ad:07:08:3b:cf:70:dd:a1:
de:4d:22:90:b7:81:ab:e6:b7:e5:b2:76:cb:59:1e:
ec:6a:92:7f:6c:12:73:b6:8e:bd:8f:70:8f:78:f0:
14:86:11:c9:01:8b:7b:bf:14:e7:a8:f6:2c:a5:2b:
2b:14:31:20:a5:29:f0:4b:a0:cf:8b:35:20:e8:6c:
d7:9b:20:1f:3e:08:7d:f4:22:cd:6f:68:17:f1:8b:
ba:56:d9:0d:e9:99:32:1e:4c:ba:c5:d8:8d:e5:78:
e4:b4:b8:ec:e5:3b:69:43:7d:4e:02:4a:6c:db:9a:
de:f6:01:5e:b4:fb:8e:3a:b6:e7:eb:5f:0d:e4:2e:
1c:fb:d5:2a:48:53:bf:d8:6e:9c:5b:83:b5:cd:24:
e1:24:f6:f2:10:a6:57:fe:f2:e3:3e:b2:a8:da:c3:
cf:eb:ab:fd:b7:1d:c2:10:94:9c:82:d7:0b:b3:5e:
b2:24:58:6f:7e:ad:fa:b2:50:44:5e:8d:17:8a:29:
51:f2:ba:1c:02:4f:92:e1:5c:35:ce:41:c0:11:86:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:02:CD:BA:11:06:79:6F:A7:9B:9A:9C:C9:29:B7:19:A2:F7:1D:D5
X509v3 Authority Key Identifier:
keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/2D57F1BAB90511F0BF94505DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:44:2c:28:bd:d1:51:42:8c:0f:d5:13:30:a7:c2:f4:ce:24:
d3:f1:33:c8:7c:c9:a9:51:92:cc:52:2f:28:94:3a:6e:15:43:
39:3c:81:19:d6:a0:fd:65:26:43:a3:33:24:87:3b:b3:bd:b7:
f4:c1:e8:2c:76:a5:fd:9c:63:07:df:cb:9c:9b:b0:ec:2c:77:
fa:8b:f9:67:c7:ad:1b:10:59:41:7c:05:bd:6c:1a:eb:4d:ee:
08:a7:b2:08:8f:fc:db:e0:ef:c1:83:f0:b8:ff:67:41:36:e1:
6b:9c:52:f2:74:95:81:f3:f9:9e:34:e6:d7:52:8f:61:c5:b1:
37:00:80:4c:9f:75:42:da:f9:b0:fa:56:a8:07:a7:c7:67:d6:
21:21:8c:da:59:81:f3:31:37:84:07:e2:26:68:17:a4:16:75:
58:94:0d:f4:bd:c6:14:b5:a0:11:a3:0c:79:ea:50:b4:19:74:
83:d0:2b:c0:7b:a5:b8:cb:56:1e:88:51:09:e5:3f:e4:7f:86:
63:f8:9a:c8:42:3e:1c:02:16:da:77:fd:92:e7:05:69:ff:c8:
6a:27:a8:6d:d4:d7:5d:4b:ef:83:b2:9f:01:33:e5:92:b1:97:
81:7a:b3:88:eb:d1:21:a4:a1:2f:51:51:9f:68:63:cd:74:f7:
c2:24:c9:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:50 2026 by rpki-client