
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/312BDD0AC34811EFA066ED69C4F9AE02.roa
File: 312BDD0AC34811EFA066ED69C4F9AE02.roa (raw, json)
Hash identifier: qO9GXX9/mE0hleas9iWwQz+5U33MuhsGdEdqcszMGYw=
Subject key identifier: FA:AD:6D:D1:1D:AF:5E:E0:20:A3:E2:FE:62:DE:44:9E:DC:E3:21:FA
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C60
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/312BDD0AC34811EFA066ED69C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:47:24 +0000
ROA not before: Thu 08 May 2025 15:55:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153290
IP address blocks: 161.248.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11360 (0x2c60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:55:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c1fc-da6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:28:02:a1:6d:59:60:01:3c:07:56:27:72:
d8:17:21:ff:26:ca:65:4e:bf:51:89:42:d8:b8:0f:
61:f0:6b:58:23:30:e5:72:29:e9:93:3e:7a:8f:3b:
e9:2f:76:42:ac:e9:1c:48:3e:33:d3:66:96:b6:7d:
46:a3:89:86:c1:6f:ac:37:fd:b9:23:03:95:45:6d:
89:bd:2c:ca:b8:2d:1b:ad:b6:e1:e8:0a:fb:01:50:
b5:e0:19:25:48:34:72:66:6b:98:09:e8:33:16:bc:
ec:bc:c2:32:37:10:5a:53:e9:ed:8c:8b:bb:6b:1c:
52:ad:54:01:5d:d8:18:e7:ab:06:61:81:f7:7f:34:
e1:3c:78:4a:f5:70:82:dc:9e:f3:ce:73:a9:f2:55:
49:79:08:5d:d7:6f:d9:00:36:e2:c4:3d:88:1c:24:
b4:40:17:2f:4d:07:62:40:a3:92:47:7d:3f:12:69:
f4:ce:45:dc:da:f9:1b:5a:3c:bd:9c:fb:f2:4e:c7:
71:6f:0a:f9:68:a7:ff:1f:70:68:1d:74:06:54:a0:
22:99:02:3f:3d:76:2a:f4:e2:fd:d3:db:77:b9:72:
32:2a:d1:41:a0:37:59:57:7a:a7:08:11:d0:0c:7c:
a3:d7:d7:0d:14:0f:6b:5c:32:64:f3:ce:4c:82:c7:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AD:6D:D1:1D:AF:5E:E0:20:A3:E2:FE:62:DE:44:9E:DC:E3:21:FA
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/312BDD0AC34811EFA066ED69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.24.0/24
Signature Algorithm: sha256WithRSAEncryption
08:39:a1:27:78:cf:48:d0:4b:12:e7:05:bf:88:8a:10:85:c8:
a4:44:a7:f2:83:e9:55:77:3a:5c:b8:31:ab:cb:fe:4e:09:bd:
c6:16:d8:45:03:be:15:03:90:25:73:bf:f1:f3:66:a6:f7:80:
34:45:52:c8:bc:42:1d:dc:af:ed:c1:e5:ea:76:6e:b2:74:29:
7d:de:5e:c1:25:90:78:d4:11:99:74:b6:cd:9b:f9:b7:21:1b:
57:2e:85:3f:50:bb:fc:0b:55:cb:e4:72:60:64:d7:6c:84:a0:
11:85:15:42:82:cf:99:09:1f:2f:40:6c:4d:e1:39:10:a5:fa:
3a:f3:cb:6e:c7:2c:58:93:da:fb:24:68:52:85:55:d0:e5:5a:
1a:a9:63:e9:63:b1:7d:a5:cb:d5:6d:8c:a8:49:dc:15:c5:8b:
8b:5a:d3:86:0a:9a:c8:5e:c3:3a:d2:c0:1d:2f:51:f3:c9:29:
5d:8f:26:eb:45:3e:0a:de:bc:34:74:b2:06:66:fa:ec:9c:cd:
d6:18:17:b4:bd:cf:03:5b:47:c4:cc:d1:05:f8:68:9a:f5:9f:
b1:b5:1b:c5:da:28:9a:b2:dd:68:50:d5:46:e3:e9:0c:c4:61:
e6:aa:48:47:39:f2:32:a3:8a:5e:40:0a:b4:3c:d2:89:03:56:
68:c3:4d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:55 2026 by rpki-client