
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8C4B0B6E7CB411EF83786972C4F9AE02.roa
File: 8C4B0B6E7CB411EF83786972C4F9AE02.roa (raw, json)
Hash identifier: nuFtsFE5sXGxPveOsLorXtxnr6z04ejLmDBZSd7fUnE=
Subject key identifier: C2:D0:BD:35:6E:36:37:21:43:1F:D2:5E:88:E2:30:8C:90:14:55:F9
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2BDC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8C4B0B6E7CB411EF83786972C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:44:07 +0000
ROA not before: Thu 08 May 2025 15:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149557
IP address blocks: 160.187.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11228 (0x2bdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c137-2350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:8a:b1:65:47:80:fb:89:45:4f:aa:88:6a:
bb:b2:f2:5a:8f:37:56:bd:b2:01:55:a0:c9:e2:0a:
d2:a5:95:44:f8:12:6c:ea:78:83:3c:a7:10:8d:a6:
88:e4:a9:9a:c6:d5:ad:88:6a:e7:87:0f:24:29:f4:
52:c0:0a:74:ca:d5:92:3c:2f:90:d4:cd:84:f4:0a:
12:97:b5:ff:0c:ab:5d:be:a3:e2:a8:2f:e1:24:07:
9c:c4:c3:0a:a8:43:43:9c:fb:e9:bd:ba:8e:21:79:
50:9f:b3:6e:7a:dc:4a:d4:08:10:d1:08:b0:fa:c3:
68:9f:4a:13:08:b5:3a:7c:95:4f:02:13:fb:8f:a7:
31:bd:b7:dc:43:d9:84:84:80:ec:9c:a2:e0:a4:11:
14:18:a7:29:9c:92:ca:a4:75:d2:41:99:29:c3:37:
b2:9c:93:36:3a:49:8c:a1:18:e1:c9:18:57:f1:9b:
da:3e:fa:6d:c5:d6:b4:bd:c2:d7:91:cb:84:ac:61:
b6:91:af:d3:13:ef:8b:d2:6e:28:b3:b7:76:b9:04:
68:b3:b0:75:81:41:d1:e0:68:ae:51:e8:76:d7:7e:
0d:83:88:2c:71:fb:f2:7c:87:9b:5e:e1:d0:11:18:
6f:29:16:2d:a9:c3:82:0a:f1:83:c8:c6:1b:3d:2d:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:BD:35:6E:36:37:21:43:1F:D2:5E:88:E2:30:8C:90:14:55:F9
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8C4B0B6E7CB411EF83786972C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.48.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7c:c3:7b:11:2f:c7:c7:07:65:00:a4:1f:4b:0e:6f:ce:0c:
2a:bc:1b:13:f2:41:c0:95:09:f2:74:f8:03:96:8a:15:cf:7c:
26:2d:11:97:12:fe:8b:b7:3a:7f:c5:e5:91:80:dc:4e:11:f0:
3d:2d:3d:b2:de:02:79:bb:12:bc:4a:65:32:89:78:64:ce:3b:
bd:88:03:6a:55:9b:a9:8b:69:9e:5c:7f:a9:44:f5:81:f3:60:
8d:97:c2:55:a3:55:19:63:0c:ef:80:7e:0f:1e:cc:1b:75:a5:
d4:e7:73:5a:4f:80:1d:10:25:f0:44:d2:2c:58:1b:df:9b:99:
1d:81:41:37:25:07:1e:88:5f:13:f5:ce:2b:8a:19:f6:d1:d6:
9c:45:12:a7:1c:0e:cb:ce:3c:7d:c8:f5:d4:e0:dc:ac:56:72:
ab:8f:df:3a:e8:f3:6e:84:48:df:97:ba:e5:0c:51:4a:08:5d:
72:3b:c6:98:23:19:fb:bf:ba:da:79:6e:4a:36:be:59:5f:7a:
72:31:fe:ce:f6:19:72:9a:6c:19:80:b9:af:9e:86:1b:9b:40:
4c:da:b6:75:0d:bd:5f:85:6e:f9:8b:30:e9:6e:4d:52:cc:94:
90:d1:0d:88:ba:88:5d:32:7d:74:ff:71:60:aa:11:26:7d:93:
2f:59:95:c1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1MzE4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzEzNy0yMzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/+KsWVHgPuJRU+qiGq7svJajzdWvbIBVaDJ4grSpZVE+BJs6niDPKcQjaaI
5KmaxtWtiGrnhw8kKfRSwAp0ytWSPC+Q1M2E9AoSl7X/DKtdvqPiqC/hJAecxMMK
qENDnPvpvbqOIXlQn7NuetxK1AgQ0Qiw+sNon0oTCLU6fJVPAhP7j6cxvbfcQ9mE
hIDsnKLgpBEUGKcpnJLKpHXSQZkpwzeynJM2OkmMoRjhyRhX8ZvaPvptxda0vcLX
kcuErGG2ka/TE++L0m4os7d2uQRos7B1gUHR4GiuUeh2134Ng4gscfvyfIebXuHQ
ERhvKRYtqcOCCvGDyMYbPS1N5QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMLQvTVu
NjchQx/SXojiMIyQFFX5MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEM0QjBCNkU3
Q0I0MTFFRjgzNzg2OTcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoLswMA0GCSqGSIb3DQEBCwUAA4IBAQBYfMN7ES/HxwdlAKQfSw5v
zgwqvBsT8kHAlQnydPgDlooVz3wmLRGXEv6Ltzp/xeWRgNxOEfA9LT2y3gJ5uxK8
SmUyiXhkzju9iANqVZupi2meXH+pRPWB82CNl8JVo1UZYwzvgH4PHswbdaXU53Na
T4AdECXwRNIsWBvfm5kdgUE3JQceiF8T9c4rihn20dacRRKnHA7Lzjx9yPXU4Nys
VnKrj9866PNuhEjfl7rlDFFKCF1yO8aYIxn7v7raeW5KNr5ZX3pyMf7O9hlymmwZ
gLmvnoYbm0BM2rZ1Db1fhW75izDpbk1SzJSQ0Q2IuohdMn10/3FgqhEmfZMvWZXB
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:24 2026 by rpki-client