
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14ED9C7C5EB311EF8F9AF17EC4F9AE02.roa
File: 14ED9C7C5EB311EF8F9AF17EC4F9AE02.roa (raw, json)
Hash identifier: MzpZN0s+yGkS7gm7Z/J0PQHMVHfJ8qZ4sIlKpWxca6s=
Subject key identifier: 5F:6F:83:D3:DC:01:3A:BF:80:2C:D1:CA:E7:E8:8A:DC:56:C6:45:82
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2BCC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14ED9C7C5EB311EF8F9AF17EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:43:45 +0000
ROA not before: Thu 08 May 2025 15:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141253
IP address blocks: 160.30.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11212 (0x2bcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c121-43e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:24:ab:9e:76:51:be:96:b3:79:f7:d3:c4:
08:cb:55:67:5c:84:cc:62:0d:4f:65:83:a8:be:a4:
ea:30:b2:1d:d8:cf:36:95:4e:b7:99:d4:a9:73:2c:
35:34:ed:14:7d:a1:bb:0d:c4:a8:03:8e:63:0a:1f:
8b:16:43:c5:c5:b5:9f:72:52:30:10:4e:a9:d4:dd:
c9:06:a4:8b:ad:1b:53:05:0b:d4:bb:e9:77:32:d0:
b6:54:e9:8e:9b:b6:66:1e:01:33:ca:a8:ea:06:28:
2f:3f:f3:fa:b8:d9:a3:5a:60:3f:ca:8c:e1:04:ff:
f7:a3:7a:8e:60:3f:e6:a8:57:6f:49:39:bc:56:26:
53:49:4b:40:40:19:c9:03:79:eb:ee:2a:10:c1:7f:
8e:4c:90:6b:94:f1:25:06:4e:e8:7f:7e:ff:70:66:
2b:bf:38:99:69:cb:e1:13:7f:f9:75:36:45:66:e5:
cb:68:b5:f1:48:ad:3d:c8:b3:f6:d9:87:53:c9:5c:
42:ae:1a:20:6e:41:d8:04:c8:43:5d:9e:28:49:b1:
5d:65:5b:34:15:fc:55:c4:6c:9d:35:7a:12:63:c7:
80:f2:6b:e5:f9:29:f4:dd:40:ec:31:c8:33:2c:5e:
9a:1d:36:56:73:cc:15:33:59:cb:fc:28:86:0a:8f:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6F:83:D3:DC:01:3A:BF:80:2C:D1:CA:E7:E8:8A:DC:56:C6:45:82
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14ED9C7C5EB311EF8F9AF17EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.146.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:6e:b5:7f:df:8c:f1:a7:84:f6:19:06:2a:95:f8:83:f2:0c:
fc:8f:3e:b7:72:d8:b5:b7:4c:dc:50:3c:4f:25:af:6a:ee:5e:
7f:d2:b0:f0:05:e3:03:e5:08:3b:bc:ca:63:03:b7:2d:62:c9:
dc:f3:3e:9a:26:f6:e8:d2:4e:89:89:bd:7c:5d:d6:56:c6:48:
9b:cd:8c:08:28:83:84:01:79:6a:d0:cf:2f:45:0c:c5:84:38:
25:0d:14:8f:a0:53:ef:fc:26:17:08:68:29:20:32:f5:fd:71:
79:11:03:35:75:be:ae:39:0f:02:5b:6b:c2:75:43:47:77:8a:
8a:84:2c:23:e5:78:6f:d2:30:94:bf:8a:0c:df:4c:8f:b1:eb:
07:eb:76:9c:e3:1c:16:72:d0:be:18:b1:40:f4:ed:1c:e8:8b:
59:e0:1f:3f:42:45:fc:85:26:d2:09:89:48:5a:86:2a:13:7d:
20:5e:8e:93:0d:ab:8f:e3:d1:a4:b4:96:11:5d:ee:39:37:d4:
ad:65:25:d6:fb:49:82:32:23:55:10:61:41:2f:15:fe:a9:e0:
d4:3f:7e:e4:ed:5f:1f:5a:7d:4c:06:81:2a:01:58:ba:7f:ac:
56:2f:39:c9:df:e7:70:0b:b2:e0:74:4a:b3:4b:0c:41:00:09:
90:f2:88:fb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1MzAyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzEyMS00M2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjEkq552Ub6Ws3n308QIy1VnXITMYg1PZYOovqTqMLId2M82lU63mdSpcyw1
NO0UfaG7DcSoA45jCh+LFkPFxbWfclIwEE6p1N3JBqSLrRtTBQvUu+l3MtC2VOmO
m7ZmHgEzyqjqBigvP/P6uNmjWmA/yozhBP/3o3qOYD/mqFdvSTm8ViZTSUtAQBnJ
A3nr7ioQwX+OTJBrlPElBk7of37/cGYrvziZacvhE3/5dTZFZuXLaLXxSK09yLP2
2YdTyVxCrhogbkHYBMhDXZ4oSbFdZVs0FfxVxGydNXoSY8eA8mvl+Sn03UDsMcgz
LF6aHTZWc8wVM1nL/CiGCo8hIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF9vg9Pc
ATq/gCzRyufoitxWxkWCMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTRFRDlDN0M1
RUIzMTFFRjhGOUFGMTdFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB6SMA0GCSqGSIb3DQEBCwUAA4IBAQBqbrV/34zxp4T2GQYqlfiD
8gz8jz63cti1t0zcUDxPJa9q7l5/0rDwBeMD5Qg7vMpjA7ctYsnc8z6aJvbo0k6J
ib18XdZWxkibzYwIKIOEAXlq0M8vRQzFhDglDRSPoFPv/CYXCGgpIDL1/XF5EQM1
db6uOQ8CW2vCdUNHd4qKhCwj5Xhv0jCUv4oM30yPsesH63ac4xwWctC+GLFA9O0c
6ItZ4B8/QkX8hSbSCYlIWoYqE30gXo6TDauP49GktJYRXe45N9StZSXW+0mCMiNV
EGFBLxX+qeDUP37k7V8fWn1MBoEqAVi6f6xWLznJ3+dwC7LgdEqzSwxBAAmQ8oj7
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:52 2026 by rpki-client