
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa
File: B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa (raw, json)
Hash identifier: tEVMCbLAV5ugwD3dexzAifeR0vA7KoPC1eZGDd9QmR0=
Subject key identifier: 38:B8:84:3C:02:71:09:19:0D:3C:72:86:12:5E:3B:D7:AC:44:04:29
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C45
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:46:47 +0000
ROA not before: Thu 08 May 2025 15:54:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153228
IP address blocks: 160.187.250.0/24 maxlen: 24
160.187.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11333 (0x2c45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c1d7-3b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:95:64:37:05:bf:99:b1:be:a0:96:6f:1c:
23:d7:22:7d:3b:aa:16:6b:7a:eb:16:5a:ef:71:f7:
21:62:f5:4e:5f:dd:6e:40:dc:70:ea:1a:cc:bf:00:
28:87:22:57:2a:4a:8b:ae:53:c8:c7:9d:3f:5f:65:
6c:a1:b9:c9:59:19:bb:37:bb:1e:8b:de:df:fc:2d:
e0:03:f5:b1:6d:6d:91:2a:9e:70:9c:3f:27:0d:a3:
ea:60:6e:55:dc:38:6c:3d:b1:04:14:cf:16:88:22:
8a:73:73:bc:de:bf:9c:eb:79:43:dc:9f:ae:fa:8b:
bf:63:95:04:b1:21:cc:ca:a1:7b:7d:67:ba:73:da:
89:1a:32:dc:a1:9b:d2:55:c6:ab:bf:21:0e:62:bf:
be:77:97:60:d3:15:95:ce:91:87:3d:ec:21:7f:56:
5b:94:e5:10:a8:6c:01:70:1c:6a:45:35:93:1a:5f:
25:28:de:0a:23:67:b3:0e:f6:4a:0f:55:63:8a:89:
2c:1d:3b:3e:97:e2:88:32:7b:25:2d:e7:e9:7c:40:
c5:e6:bb:be:00:58:86:2f:1d:12:8a:8e:1c:da:97:
8f:39:08:f2:a2:b3:82:da:c8:14:0c:a4:c0:94:10:
56:84:c4:b8:17:55:0d:3a:d6:ca:ed:b2:8a:e1:02:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B8:84:3C:02:71:09:19:0D:3C:72:86:12:5E:3B:D7:AC:44:04:29
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.250.0/23
Signature Algorithm: sha256WithRSAEncryption
34:da:1a:bb:6f:5c:dd:66:9f:3b:37:6a:4f:58:02:65:ca:93:
4b:8c:de:07:d3:f7:54:92:e1:5c:63:48:b5:ac:92:f9:79:ff:
96:d6:11:5b:96:78:3c:f3:12:90:83:e9:bc:d5:5d:a1:fc:46:
a4:8c:4c:60:37:97:b2:64:0b:03:3d:3e:cb:e2:73:5f:3a:b3:
c4:2e:f8:e7:61:e5:ed:9e:ff:5f:74:f9:ba:9e:48:8e:c9:d8:
72:8e:f0:5c:e5:84:fa:f6:4c:75:64:11:4c:f8:3f:25:33:8a:
d9:cd:0f:a1:7c:21:5c:74:1a:db:53:2d:45:46:b8:b3:b9:5f:
29:04:58:fc:e3:23:a7:11:69:35:9e:c9:5f:b0:e7:8b:34:1a:
d4:26:23:16:7b:77:28:29:dd:50:ba:18:13:60:ab:44:c8:22:
9e:c0:82:2c:e0:76:db:96:62:3d:0a:3c:ae:fc:04:31:a8:bb:
8d:c0:62:b6:88:1d:83:2e:82:2d:3f:68:00:ef:1d:fa:db:29:
f2:fc:23:bf:1d:d9:95:19:4a:cd:8b:01:3e:59:c9:1b:08:4b:
ce:f9:a9:c7:28:1c:81:67:c3:36:a7:3f:ac:02:9c:25:07:4b:
c0:08:ee:76:0d:e1:0b:06:08:f7:8e:5d:e5:c3:1e:52:a6:92:
52:e3:27:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:24 2026 by rpki-client