
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB72A9E386911EF960B3343C4F9AE02.roa
File: 9CB72A9E386911EF960B3343C4F9AE02.roa (raw, json)
Hash identifier: Xab3PKIdlbJWKUCRsbYXSNGjzkiL2K58I2i+8KyXdpg=
Subject key identifier: FA:37:BC:AF:29:38:7E:68:62:1A:70:A9:E3:B0:69:9B:A2:F6:C7:4F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C2A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB72A9E386911EF960B3343C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:46:08 +0000
ROA not before: Thu 08 May 2025 15:54:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152551
IP address blocks: 160.22.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11306 (0x2c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c1af-aaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9f:6e:75:52:49:54:1f:30:78:f3:ef:c1:17:
11:76:87:68:97:1d:95:32:0c:db:ba:97:13:cb:f7:
00:c7:52:e1:e0:ef:4e:ed:32:af:af:36:fe:ec:95:
da:19:87:cc:f3:5b:59:39:26:00:35:7e:2c:2a:c0:
48:6d:f2:a4:36:10:cc:40:a9:c9:38:6e:c4:68:2d:
a0:dc:52:de:49:81:61:c7:86:7f:28:b7:8d:82:15:
79:45:0d:b8:16:6f:76:6f:72:27:a9:f7:1f:6f:9c:
8e:b8:ba:c9:92:45:1a:61:d8:88:c3:ae:d4:6e:ff:
47:a1:f5:fb:ca:3b:6b:80:62:7c:9f:48:f2:ef:f3:
32:a6:ab:24:4e:ea:9f:05:7e:87:11:a0:9a:86:ae:
da:c1:a5:2f:ce:a7:a6:09:f6:2d:af:5e:d6:c6:3b:
29:8d:f4:f1:9c:ac:35:cc:95:ed:00:b2:33:89:17:
8a:e3:0c:c1:8b:a4:f4:8a:d5:b7:0a:01:aa:d2:4b:
53:94:1e:e8:8e:4b:88:a5:f9:ee:c1:15:82:a0:19:
86:b5:94:1d:3b:ce:8c:02:31:36:a3:65:70:56:d9:
32:69:8b:56:33:5f:29:f7:da:b2:fa:a9:f3:6b:f7:
d7:4d:0a:f1:29:61:3c:38:b8:1a:69:57:9d:a9:ba:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:37:BC:AF:29:38:7E:68:62:1A:70:A9:E3:B0:69:9B:A2:F6:C7:4F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB72A9E386911EF960B3343C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.116.0/23
Signature Algorithm: sha256WithRSAEncryption
97:b9:b8:85:69:b6:78:17:fc:c3:fd:5b:1c:18:80:31:68:a8:
40:a8:36:a5:e8:80:58:95:04:89:08:28:1c:5e:75:56:d6:1c:
97:88:59:89:4b:ef:d1:e9:66:0c:fa:f9:c6:4e:17:95:b9:72:
fc:30:6a:69:f0:4b:62:20:0b:2f:08:bd:4d:4d:cc:3e:fe:0c:
22:dd:b4:b6:85:4f:ff:60:d3:06:2d:f5:e4:b2:dc:f8:44:8a:
18:a7:24:02:14:2e:ff:00:ba:f1:db:64:ba:0d:1e:6d:e5:a5:
37:ab:cc:ad:af:15:b8:4d:19:e2:ed:78:6b:6d:17:f7:05:0b:
0b:da:f9:d6:19:cf:13:d2:39:00:fd:14:54:99:ff:d3:da:09:
d9:82:55:9a:da:52:f9:38:e0:d2:62:c0:78:58:28:d6:77:e6:
e9:10:64:f2:f9:ae:17:0d:a3:5b:eb:5a:1a:fe:28:67:f5:99:
21:da:9d:d4:22:c7:f6:a1:cd:31:fb:53:cb:98:a1:76:9c:3e:
b6:dc:91:f4:51:41:ca:72:98:7d:ba:2e:c4:b7:8f:af:b8:5b:
92:4f:3d:17:d9:eb:39:5c:1b:21:c5:76:5a:b8:1e:3c:e7:01:
d4:0d:08:34:69:90:b5:af:79:f0:13:12:6d:6e:32:6d:35:a0:
3c:c5:a4:8e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1NDM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzFhZi1hYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8p9udVJJVB8wePPvwRcRdodolx2VMgzbupcTy/cAx1Lh4O9O7TKvrzb+7JXa
GYfM81tZOSYANX4sKsBIbfKkNhDMQKnJOG7EaC2g3FLeSYFhx4Z/KLeNghV5RQ24
Fm92b3Inqfcfb5yOuLrJkkUaYdiIw67Ubv9HofX7yjtrgGJ8n0jy7/MypqskTuqf
BX6HEaCahq7awaUvzqemCfYtr17WxjspjfTxnKw1zJXtALIziReK4wzBi6T0itW3
CgGq0ktTlB7ojkuIpfnuwRWCoBmGtZQdO86MAjE2o2VwVtkyaYtWM18p99qy+qnz
a/fXTQrxKWE8OLgaaVedqbpVqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPo3vK8p
OH5oYhpwqeOwaZui9sdPMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUNCNzJBOUUz
ODY5MTFFRjk2MEIzMzQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBZ0MA0GCSqGSIb3DQEBCwUAA4IBAQCXubiFabZ4F/zD/VscGIAx
aKhAqDal6IBYlQSJCCgcXnVW1hyXiFmJS+/R6WYM+vnGTheVuXL8MGpp8EtiIAsv
CL1NTcw+/gwi3bS2hU//YNMGLfXkstz4RIoYpyQCFC7/ALrx22S6DR5t5aU3q8yt
rxW4TRni7XhrbRf3BQsL2vnWGc8T0jkA/RRUmf/T2gnZglWa2lL5OODSYsB4WCjW
d+bpEGTy+a4XDaNb61oa/ihn9Zkh2p3UIsf2oc0x+1PLmKF2nD623JH0UUHKcph9
ui7Et4+vuFuSTz0X2es5XBshxXZauB485wHUDQg0aZC1r3nwExJtbjJtNaA8xaSO
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:54:58 2026 by rpki-client