
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2D4C331CA70311EF81A7C564C4F9AE02.roa
File: 2D4C331CA70311EF81A7C564C4F9AE02.roa (raw, json)
Hash identifier: zmWFdbA+AIlJwrmDFuEe1dP1Ne59rDPNhuor88u7Bmc=
Subject key identifier: 57:54:38:7E:F4:D5:15:2B:E2:F0:63:06:0D:6C:DA:C9:D3:51:DC:82
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C1B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2D4C331CA70311EF81A7C564C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:45:43 +0000
ROA not before: Thu 08 May 2025 15:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152523
IP address blocks: 160.22.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11291 (0x2c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c197-dccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:1f:9a:89:e9:82:7b:42:45:2e:28:11:7a:
02:7d:88:1d:8c:fe:fe:3a:fb:20:22:f5:07:93:1d:
c3:37:68:4a:7d:cd:5e:38:a9:46:6e:0a:ff:60:18:
d5:7d:a8:3d:e8:65:15:0a:5e:4f:67:c9:0f:e6:d1:
0d:fd:12:b3:25:41:f4:62:4b:2e:9d:eb:12:9b:7d:
15:76:14:fa:b0:ce:88:3c:49:4f:84:14:2f:08:31:
5d:a2:4c:8d:ca:be:16:e4:7e:e5:8f:5d:d7:67:a4:
1b:95:26:c0:1e:f3:07:c5:43:46:0c:82:34:08:8c:
80:75:25:b5:8a:ba:ac:68:a3:78:b6:dd:75:24:1e:
6b:0f:97:8e:f7:71:f0:7c:1e:0d:8f:bd:4a:ed:08:
cf:ff:36:69:38:0a:05:94:0e:ad:be:87:fd:31:07:
00:05:2d:e8:9f:2f:09:78:06:c6:f9:3b:44:53:ee:
eb:49:10:af:ae:1f:c2:69:33:47:31:c5:57:7c:c3:
54:38:b4:b9:e0:4a:1b:56:02:07:4d:3a:68:bc:5d:
53:c8:26:4e:dc:0a:7d:43:16:c9:7c:93:69:23:54:
a5:4a:01:84:6e:38:71:0f:e3:be:a3:48:8e:a7:38:
37:50:a2:5e:16:81:e2:c7:08:85:69:c3:f2:b7:1a:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:54:38:7E:F4:D5:15:2B:E2:F0:63:06:0D:6C:DA:C9:D3:51:DC:82
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2D4C331CA70311EF81A7C564C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.108.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:04:cc:a5:de:9f:a8:27:6a:91:90:cb:52:f1:94:ab:ab:f0:
29:24:96:7b:0e:15:a7:49:83:56:50:78:a7:90:26:10:36:dc:
d1:45:76:95:e4:15:f8:a4:e1:db:b9:6f:d5:1d:dd:14:fb:1e:
6f:8c:8e:d0:70:bb:90:2c:61:da:a9:6b:9c:44:af:76:03:d3:
55:3c:74:25:7f:d1:d6:8c:71:80:9b:64:2e:a2:1e:5b:2c:d7:
de:0f:6d:b8:6c:c7:e3:3c:d3:f6:1a:96:4e:25:bf:1a:b7:ee:
cf:5d:3f:12:29:53:cf:d7:a1:14:3d:e5:24:7f:d1:33:23:b1:
13:6a:94:66:c8:2d:9e:38:a0:3a:8f:88:9d:65:3b:7e:fa:aa:
6a:95:23:f2:63:80:2e:c9:39:db:02:02:b8:4c:c4:dc:ab:22:
e9:32:fc:06:71:5e:d6:ad:8c:98:ad:32:82:09:54:c4:fd:56:
02:a4:d0:c3:8b:c8:db:21:61:e3:b4:65:a2:15:c2:4e:fe:df:
ff:d5:3f:75:ad:08:77:9b:da:3c:be:3b:a6:74:6a:36:23:6d:
27:3d:88:24:41:1b:5b:34:92:0e:61:49:c1:70:6b:60:82:3b:
7c:07:e8:69:d8:13:0e:ab:75:19:48:2e:b9:e2:1f:3e:5b:ed:
76:f4:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:38 2026 by rpki-client