
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4434A606EF8A11F09F3C2105616F56BC.roa
File: 4434A606EF8A11F09F3C2105616F56BC.roa (raw, json)
Hash identifier: 9dD1MJyUnIQv13BR4HPhtyJJ8beXhDkXoQemLIfH1Eg=
Subject key identifier: 01:2E:FC:5B:F9:B7:45:F9:BA:E6:28:8C:CE:4D:F2:3E:74:09:B0:CD
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CF6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4434A606EF8A11F09F3C2105616F56BC.roa
Signing time: Sun 01 Mar 2026 22:50:54 +0000
ROA not before: Mon 12 Jan 2026 07:47:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153252
IP address blocks: 160.191.108.0/24 maxlen: 24
160.191.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11510 (0x2cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 12 07:47:21 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2cd-3475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:97:13:d9:df:ee:32:3f:8c:83:dd:cb:8a:
ec:f3:a3:1d:14:9a:0d:9a:34:3d:ac:a6:a1:e9:f6:
9b:49:97:43:1c:7c:76:bd:92:c4:5f:c0:0c:57:f0:
19:94:b6:40:f7:6b:d0:ce:0a:a8:68:3a:1e:b1:54:
e1:da:63:05:2a:af:98:70:99:a2:eb:41:9d:08:44:
04:85:63:18:2f:ab:31:ac:ce:1b:3d:9d:73:7c:83:
6c:79:1c:15:35:e1:34:11:e5:11:6c:07:5d:85:3b:
f1:40:8f:64:c0:f1:7e:e1:fd:e5:fa:cb:1c:a1:db:
da:00:b1:59:ab:29:0f:97:11:9b:8f:07:22:db:45:
67:0a:02:44:43:26:3f:33:23:93:f2:e4:a7:e6:4a:
c7:aa:94:0c:62:3f:9f:7d:75:80:fe:b3:55:f6:e2:
a0:bd:fa:19:71:7c:3f:68:82:40:51:c9:66:71:64:
4c:d2:e8:89:8f:4d:98:d4:7a:56:0f:f4:3c:4b:30:
2d:e0:fa:0c:9a:82:a5:79:e7:d1:81:76:9a:51:2e:
07:eb:08:d4:05:07:12:4f:46:45:a2:11:80:b1:0f:
fa:06:5f:2f:b8:2b:6b:6c:9c:13:8d:0d:11:b9:bd:
3b:3d:8b:64:ce:8c:8c:b7:86:13:43:d2:27:fc:8c:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:FC:5B:F9:B7:45:F9:BA:E6:28:8C:CE:4D:F2:3E:74:09:B0:CD
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4434A606EF8A11F09F3C2105616F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.108.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:e1:45:0f:fa:80:7e:72:0f:e5:8c:15:81:28:5f:eb:aa:0c:
bb:94:68:f4:8f:94:dd:62:f4:77:9a:e0:7e:29:e6:4f:63:8c:
73:04:65:43:fd:ef:c5:12:c6:5b:1e:62:10:23:3a:75:b0:56:
50:d1:df:a9:54:31:ef:86:c1:d3:37:26:f4:4b:08:c6:2d:e4:
aa:c6:7c:de:14:c5:db:96:f0:bf:e2:e2:07:47:23:ba:90:b7:
1e:8a:6d:f9:b7:7b:d4:0f:e9:bb:1b:cf:4f:23:93:fc:1f:13:
6b:d1:4b:50:c7:17:e3:9c:8d:cc:9d:56:c7:fb:36:b3:90:a2:
bf:6f:26:61:f5:5b:7c:dd:6d:5d:38:cf:29:1e:5a:7e:52:42:
7f:a4:d6:bf:a0:19:c0:be:f3:8a:8c:2d:ac:4f:d2:f0:95:d0:
f8:f6:3a:04:16:b3:d0:81:60:58:1f:ed:7a:bf:51:a3:2f:97:
d6:62:d5:01:1f:bc:1b:07:24:81:36:db:5c:ee:df:a9:49:e8:
cb:79:0e:a8:ba:db:73:16:08:f9:22:1a:ae:d0:b0:c5:9f:68:
0d:bd:a4:0b:cc:e4:31:d9:34:89:35:a8:e8:bf:87:4b:50:2a:
e7:cf:72:81:3b:23:92:fd:d9:0d:3a:90:8b:d0:49:57:08:24:
ac:c7:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:06:04 2026 by rpki-client