
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4FD31B6797311EFABA1ED3DC4F9AE02.roa
File: B4FD31B6797311EFABA1ED3DC4F9AE02.roa (raw, json)
Hash identifier: mmSYobmf7uRaQY8K76TCBWAdZFU682HEKISFQgvZyGY=
Subject key identifier: 3C:3B:78:C6:2E:43:46:CC:8F:09:62:94:FF:E5:62:0C:CC:B7:D4:D3
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C4B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4FD31B6797311EFABA1ED3DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:46:55 +0000
ROA not before: Thu 08 May 2025 15:55:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153241
IP address blocks: 160.187.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11339 (0x2c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:55:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c1de-8dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2f:aa:0c:35:ed:66:a6:eb:d9:19:25:53:43:
c4:47:d1:f8:e0:99:20:f6:66:f1:3c:0a:f0:03:32:
1e:11:b8:30:c5:22:d4:4d:fe:ee:81:a4:cf:a1:76:
f3:f8:0b:0a:1d:72:91:e0:3c:cb:f7:f5:c9:e8:47:
f4:eb:30:a3:f8:3a:07:33:0d:fb:12:63:4e:16:22:
b5:db:d3:20:18:6d:b8:ed:1c:4b:ff:9f:a1:91:98:
38:f4:09:61:3f:3d:a2:91:34:89:4f:43:d3:c7:ff:
53:a8:72:fe:85:60:46:97:34:bd:7a:43:26:72:3f:
ea:0d:94:29:0e:bc:c2:a7:3f:78:cc:00:a6:ba:1d:
08:0e:6c:c1:fa:9d:40:06:32:f9:c5:6c:93:af:c4:
e7:02:20:8b:ce:c6:f7:18:b4:5c:2b:b8:69:db:d0:
55:a6:65:cf:b6:4a:8e:56:69:f5:cf:1e:7d:5b:fd:
20:8e:38:2d:db:bf:55:4a:a5:14:d5:d3:a6:27:21:
27:af:e7:a2:e7:b0:b9:53:9c:df:ab:8a:97:3f:8b:
90:57:44:29:4c:83:8d:16:aa:93:af:79:68:9f:d7:
47:6d:ce:6f:23:22:0e:f9:78:48:61:17:29:aa:66:
3e:98:74:8e:b3:8b:16:55:c3:7b:01:23:7f:d0:e2:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:78:C6:2E:43:46:CC:8F:09:62:94:FF:E5:62:0C:CC:B7:D4:D3
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4FD31B6797311EFABA1ED3DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.76.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:59:10:e7:30:51:9a:e2:f3:19:5e:08:61:4c:a7:c2:48:0e:
b1:9e:6b:0c:01:1e:97:50:3d:f6:9d:81:b8:cf:ba:30:ed:41:
f1:96:18:1c:14:4b:35:31:08:9e:8b:38:57:61:85:87:12:14:
6e:6b:48:7f:a3:1f:69:43:18:9b:1d:9c:ff:a6:d6:7e:4f:c0:
88:d1:5d:4a:62:62:e0:9f:fb:af:23:dc:50:b5:6e:cd:e7:48:
ec:da:27:eb:99:64:8f:57:42:d2:06:90:53:9f:aa:5a:48:5f:
0a:96:f3:ca:ec:57:52:cb:8a:8a:d3:e7:c6:d3:a1:ed:cc:02:
4e:7c:92:aa:f3:b2:3f:a7:f3:e7:80:47:50:fb:fc:b3:19:4e:
59:e9:ce:d8:e6:47:a0:ae:fd:f0:99:8d:8f:3d:15:d2:d0:43:
60:6d:92:50:43:b5:21:d9:25:c8:3f:48:5a:ef:2f:a0:32:6e:
95:8b:c7:41:37:88:ab:7e:6e:25:43:66:91:49:7a:da:71:2a:
da:11:d0:4b:e7:de:8a:3e:f6:8a:f0:a4:73:a6:7a:6f:25:cb:
4b:47:f2:25:ec:62:6b:7f:e8:c3:cf:ac:cc:e3:08:28:cd:c6:
30:dd:e6:4c:dc:57:fa:97:63:e0:c5:4d:69:f1:87:c6:57:61:
76:7c:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:45 2026 by rpki-client