
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6720B0E2E45511EFAEF28877C4F9AE02.roa
File: 6720B0E2E45511EFAEF28877C4F9AE02.roa (raw, json)
Hash identifier: dYHuMi+bO1EBpjAgFDpema9ihIb6XoEmfumId55fihs=
Subject key identifier: 56:F4:11:BE:DC:20:04:56:02:44:81:68:09:3A:66:CE:C4:99:35:F1
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2BAF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6720B0E2E45511EFAEF28877C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:43:04 +0000
ROA not before: Thu 08 May 2025 15:52:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135824
IP address blocks: 160.250.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11183 (0x2baf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:52:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c0f8-6f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:c0:a7:52:fa:80:65:f9:e4:5b:2a:7e:54:
9f:c0:f9:42:89:7e:24:04:ef:a1:0e:15:e5:85:0a:
d3:76:aa:1f:b3:9f:c0:15:c9:9b:92:72:bf:74:30:
29:21:70:23:fa:aa:99:68:63:5d:b9:e2:3b:21:5b:
3b:9e:c3:70:37:46:b2:d4:75:a5:27:e4:0e:5f:ed:
9b:58:2d:8c:5a:16:b7:2d:82:a0:c1:9d:86:0e:29:
61:d9:b9:ff:dd:ef:34:2f:29:a9:b8:75:96:a5:97:
67:c1:3a:6b:82:eb:0c:d9:5a:b3:0a:e5:19:9d:6b:
e3:e6:0f:8c:cc:fb:6d:1c:c9:99:9e:aa:a3:21:24:
e2:12:fb:f3:a2:f7:0e:8e:ff:0a:59:ab:aa:63:cf:
e2:45:25:a5:c2:81:ae:41:56:ba:9a:6a:b3:80:96:
fc:9e:a0:4d:c4:29:c6:d4:c1:94:f6:0c:0c:04:57:
ed:c6:bc:b8:0e:d4:a6:89:e9:f6:09:6a:a9:23:ab:
b3:07:d1:bf:af:f5:5f:10:be:d0:b3:e2:98:5d:28:
34:9d:ec:9c:12:e2:48:e7:97:7c:2e:28:0b:44:c5:
fd:00:e0:ae:e9:ae:a4:3b:a0:62:8e:43:83:50:0a:
5b:ea:e2:6a:9d:fb:32:4b:57:44:65:8d:eb:70:27:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F4:11:BE:DC:20:04:56:02:44:81:68:09:3A:66:CE:C4:99:35:F1
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6720B0E2E45511EFAEF28877C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.236.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:0c:c7:41:d5:54:63:72:ed:c5:28:ea:9e:50:eb:bd:ff:1c:
4f:18:70:a9:2a:30:3d:a7:7f:a9:b4:4a:4d:98:e2:1d:da:a0:
9e:13:5e:73:35:56:a2:9d:d9:7b:b5:dd:43:25:bd:47:9b:0a:
f1:26:f9:cf:3f:17:a2:26:b4:6b:7a:93:fb:99:bf:61:b1:51:
a5:44:17:4a:0d:54:64:7f:2b:27:6b:65:c7:21:ae:25:0b:fa:
bf:b5:5a:79:a5:63:67:48:7a:fb:2a:3e:80:18:9b:78:00:69:
65:e0:cd:64:95:ac:da:b7:d7:d1:41:a9:25:b2:7d:c1:2f:6d:
ec:bd:38:55:91:6c:42:3c:b7:98:af:88:ea:38:3b:72:2e:27:
90:64:4b:89:06:c9:03:a2:bb:7c:d5:60:ce:90:c4:72:0e:5e:
d6:8d:d8:67:1f:58:67:62:7c:e5:3f:16:3d:c3:98:38:1a:15:
6a:91:85:8f:50:20:6c:0e:30:10:98:69:39:3f:ff:61:16:82:
ba:61:4e:de:52:86:21:4b:b8:f5:c9:5e:2e:a0:d3:6b:4c:ff:
50:66:3b:6b:b5:24:84:97:af:f4:68:e0:fa:a0:b2:77:5a:17:
10:18:57:4a:00:e6:cc:61:ea:a8:ab:68:73:0e:6d:81:8d:20:
ef:cb:e1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:42 2026 by rpki-client