
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/85859ECE427711EF9D064713C4F9AE02.roa
File: 85859ECE427711EF9D064713C4F9AE02.roa (raw, json)
Hash identifier: x+JghpJ5wYTEtnpB3XLklM4y3x3MiNN0kaN1otPlUmA=
Subject key identifier: 7B:17:B3:FE:B9:B9:B6:07:3C:EB:13:45:5E:68:EB:99:DF:CE:B0:32
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C7A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/85859ECE427711EF9D064713C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:48:03 +0000
ROA not before: Wed 28 May 2025 11:44:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137083
IP address blocks: 160.25.180.0/23 maxlen: 24
165.99.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11386 (0x2c7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 28 11:44:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c222-0f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:f7:9e:d3:50:7d:5f:63:50:11:65:75:27:
4b:11:1f:b4:a4:53:ae:00:6e:34:0a:2c:81:76:ef:
b6:31:79:dc:e8:04:05:49:eb:d0:c7:b2:47:06:5f:
01:86:bc:9c:bb:e5:7c:13:6f:a2:6c:04:99:d1:bd:
bf:6b:77:eb:e9:e2:10:5d:a7:d4:af:c3:f7:9c:59:
ce:90:7e:ba:35:f0:61:d0:14:e4:80:21:6f:a6:84:
d4:41:3d:ad:1f:67:16:88:d5:a2:6e:8d:94:2c:95:
7d:ab:90:21:99:5d:cc:6d:49:3e:13:50:21:fd:78:
0d:38:50:ce:e2:fb:8e:f9:57:06:1c:3c:71:1b:d8:
b8:36:56:f3:36:d1:c6:0a:6b:80:19:ae:f3:49:6d:
0a:8a:84:24:f3:b4:e6:76:71:b6:73:32:58:a9:59:
1e:43:7a:44:6a:5a:f9:84:9c:d8:c6:95:7a:c8:c9:
87:74:bc:7b:c1:20:7b:4c:43:6b:d7:86:a5:34:14:
24:64:a4:bd:f4:6c:f7:4e:99:fe:e1:aa:1a:7c:43:
3e:c3:eb:2c:ac:47:be:48:da:65:f0:c5:03:eb:74:
fe:ed:41:2b:86:e9:39:b8:69:f6:ec:16:3a:a0:be:
91:a1:7e:da:bf:69:15:0b:2b:2a:31:6f:37:53:70:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:17:B3:FE:B9:B9:B6:07:3C:EB:13:45:5E:68:EB:99:DF:CE:B0:32
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/85859ECE427711EF9D064713C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.180.0/23
165.99.132.0/23
Signature Algorithm: sha256WithRSAEncryption
24:97:19:ee:fa:48:4a:1b:3a:42:ba:6b:2a:2f:20:54:ed:ac:
6f:fa:ae:52:71:e5:7f:19:28:4f:a1:97:4d:78:1f:e0:e6:52:
e7:c6:f4:cd:7f:72:ce:1d:f8:ec:54:42:28:65:5c:56:a2:17:
c2:89:8f:18:d7:8a:7a:02:e5:f5:ef:4f:c1:21:cf:5c:37:ca:
6c:a7:af:14:8f:1a:db:b3:23:04:51:ee:f4:8b:86:4e:47:51:
79:17:00:3b:3c:79:52:2f:f6:f0:54:67:e5:4a:ea:ea:a1:51:
f7:29:09:6a:81:e2:82:54:26:34:e0:2f:ae:b8:d0:6f:5b:24:
73:16:28:b4:fb:30:63:76:d0:56:1f:09:48:d3:51:47:8e:b7:
93:99:fc:36:8a:42:9a:89:af:c1:72:4b:92:6f:1f:f8:72:8d:
2e:69:6d:0d:7c:e2:6c:30:d3:62:ce:a0:a7:e5:79:13:98:c0:
34:79:96:d7:56:05:b3:7c:c1:90:81:58:ed:07:c7:c4:ca:a4:
f7:66:cd:06:91:a0:b1:2c:8e:21:07:6d:c9:80:6c:39:ac:98:
c5:0f:d3:1e:d4:bd:9d:19:c0:32:2f:1d:79:58:fe:7b:32:f4:
40:ed:9c:e9:86:7e:18:4d:f7:07:30:22:dc:a2:e5:64:d6:49:
51:3d:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:17:15 2026 by rpki-client