
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2E06F3C02B0911F08BFB4124C4F9AE02.roa
File: 2E06F3C02B0911F08BFB4124C4F9AE02.roa (raw, json)
Hash identifier: SvUB3vUC26l/mGyCO3OKLYWhLcv3iMVR/0DMLqc/MmY=
Subject key identifier: AF:40:CA:34:63:4A:E0:E2:9C:3E:8A:31:50:E7:DE:13:65:6B:2C:64
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C3D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2E06F3C02B0911F08BFB4124C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:46:35 +0000
ROA not before: Thu 08 May 2025 15:54:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153215
IP address blocks: 160.30.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11325 (0x2c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c1cb-e539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:0b:d5:d2:3c:7a:91:44:15:c1:e6:e2:6d:
9d:7f:8b:a6:38:0f:dd:e7:26:d7:1c:1a:41:81:19:
c5:1a:cb:04:e5:49:53:ee:2b:06:b9:87:9e:f4:2e:
bc:20:71:01:06:45:e5:c5:6b:43:85:12:61:27:51:
72:94:e9:22:8d:33:b9:c8:de:a4:5b:eb:4a:7a:98:
c4:23:fa:bc:62:d2:64:03:8c:d3:a0:f0:07:ca:78:
9d:c7:15:4c:90:ca:e5:d8:24:4a:cb:ee:5f:67:b0:
a0:ae:d9:62:4d:05:8e:fa:5d:0f:14:cb:2b:a3:d6:
d6:fe:24:51:f3:e5:a4:7c:3c:40:4f:8f:80:fa:8b:
15:c8:6c:64:ee:b3:eb:66:7e:76:cc:23:47:bd:e4:
a4:70:ce:94:76:f6:04:38:75:07:d2:ee:61:33:9a:
39:7c:14:f3:5e:d9:77:66:6e:ae:09:14:24:f7:a1:
0e:99:41:ba:bf:fc:30:84:1d:3c:86:63:49:05:cc:
8b:1e:69:f7:56:c5:68:4f:13:f8:fb:17:13:9f:68:
d1:34:90:6c:ef:09:91:3a:32:70:0b:99:f6:26:20:
51:f6:1d:eb:3d:45:47:fd:bd:b4:19:87:24:26:67:
78:47:bb:cb:0c:78:10:9e:ac:c2:c5:d3:33:05:2a:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:CA:34:63:4A:E0:E2:9C:3E:8A:31:50:E7:DE:13:65:6B:2C:64
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2E06F3C02B0911F08BFB4124C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.216.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:70:c8:4c:3c:91:8f:2b:f0:2f:e2:5b:e5:89:a1:0d:25:55:
37:6c:1e:a9:67:2b:9d:32:f9:bc:0f:ee:8a:d0:cc:31:14:dd:
bb:58:db:4c:07:91:a0:66:1d:a9:18:5c:dc:cd:d0:b8:80:53:
9a:b3:6c:65:cd:d3:0f:55:2c:ae:27:e9:5a:23:ae:a4:ed:93:
eb:a5:1b:36:3a:46:43:37:7a:2b:df:a7:e6:43:d1:e7:de:56:
35:bb:2b:12:dc:54:d9:17:39:95:88:32:f0:c3:ba:cc:5b:c0:
7c:a0:77:c3:f7:95:89:af:89:17:06:3c:4b:24:33:04:22:8c:
37:61:39:d6:f2:8a:66:50:76:db:69:9b:e3:1e:32:d2:13:ef:
2c:ed:54:cb:cc:27:be:4e:8c:e1:63:57:15:46:49:1c:8b:4c:
f2:8c:2f:fd:f2:4f:a2:4f:86:1f:a8:78:81:0d:2e:b8:9d:55:
aa:8b:e8:66:73:49:5a:ba:2e:64:19:b2:7f:47:16:c9:7c:22:
3d:8f:e9:c9:92:5b:5d:f8:66:6d:e7:56:1f:eb:b8:c4:63:4f:
db:ff:1d:a4:d3:2d:8e:13:0d:97:41:95:d5:43:46:0e:81:a6:
95:5e:f2:a4:c5:7b:5d:50:ff:57:4c:57:06:d5:49:1f:38:f2:
9c:f7:96:ca
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1NDUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzFjYi1lNTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCIL1dI8epFEFcHm4m2df4umOA/d5ybXHBpBgRnFGssE5UlT7isGuYee9C68
IHEBBkXlxWtDhRJhJ1FylOkijTO5yN6kW+tKepjEI/q8YtJkA4zToPAHynidxxVM
kMrl2CRKy+5fZ7CgrtliTQWO+l0PFMsro9bW/iRR8+WkfDxAT4+A+osVyGxk7rPr
Zn52zCNHveSkcM6UdvYEOHUH0u5hM5o5fBTzXtl3Zm6uCRQk96EOmUG6v/wwhB08
hmNJBcyLHmn3VsVoTxP4+xcTn2jRNJBs7wmROjJwC5n2JiBR9h3rPUVH/b20GYck
Jmd4R7vLDHgQnqzCxdMzBSplswIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK9AyjRj
SuDinD6KMVDn3hNlayxkMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkUwNkYzQzAy
QjA5MTFGMDhCRkI0MTI0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB7YMA0GCSqGSIb3DQEBCwUAA4IBAQClcMhMPJGPK/Av4lvliaEN
JVU3bB6pZyudMvm8D+6K0MwxFN27WNtMB5GgZh2pGFzczdC4gFOas2xlzdMPVSyu
J+laI66k7ZPrpRs2OkZDN3or36fmQ9Hn3lY1uysS3FTZFzmViDLww7rMW8B8oHfD
95WJr4kXBjxLJDMEIow3YTnW8opmUHbbaZvjHjLSE+8s7VTLzCe+TozhY1cVRkkc
i0zyjC/98k+iT4YfqHiBDS64nVWqi+hmc0laui5kGbJ/RxbJfCI9j+nJkltd+GZt
51Yf67jEY0/b/x2k0y2OEw2XQZXVQ0YOgaaVXvKkxXtdUP9XTFcG1UkfOPKc95bK
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:43 2026 by rpki-client