
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B5300C8C383A11EFA2A6EE6EC4F9AE02.roa
File: B5300C8C383A11EFA2A6EE6EC4F9AE02.roa (raw, json)
Hash identifier: MM+QuvC97/rwJcHpenpMeTHRGXBDL2lyDxXmiFlA46U=
Subject key identifier: 62:87:EB:C3:FE:8D:07:DF:B4:E0:E6:73:9E:DD:F2:37:BD:A5:C6:0C
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C27
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B5300C8C383A11EFA2A6EE6EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:46:03 +0000
ROA not before: Thu 08 May 2025 15:54:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152548
IP address blocks: 160.22.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11303 (0x2c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c1ab-de2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:c0:95:7f:8d:97:2c:1e:af:60:31:f3:05:
95:13:b2:37:c4:26:c1:ea:68:95:a0:8f:f1:0c:b9:
6f:96:7f:cd:b6:72:c7:d8:4d:28:b7:69:00:e9:d4:
9c:6b:b7:d5:a3:9e:dd:b4:ec:f3:83:83:24:00:f6:
c9:fb:40:7f:09:33:43:d3:43:00:20:96:46:80:f7:
73:25:36:9f:b5:c2:ef:e4:ff:36:be:e3:06:29:0e:
01:fb:f3:7a:9a:35:b4:4d:7a:7e:d1:75:10:08:3c:
4a:c2:ba:6c:3a:ff:f0:35:7d:9c:3e:40:5a:41:d4:
41:c7:8c:cd:f0:48:48:6c:e3:4a:9e:12:e1:fe:bf:
46:e4:b8:b1:d6:63:35:34:4b:1c:23:83:28:82:bb:
00:5b:77:75:22:0b:6e:90:ff:6f:73:54:32:f1:af:
11:16:ed:c0:10:ce:c5:ab:5e:ae:09:80:9e:f3:66:
08:fc:10:fc:ea:1f:49:87:b2:7f:d9:8c:6e:70:d5:
43:96:95:8a:b4:7c:69:cc:35:a8:97:da:cf:9a:64:
ff:7b:80:cf:67:1d:d9:24:20:aa:76:c4:a4:9d:46:
f1:63:12:1f:2b:37:d0:1b:88:a4:bb:14:95:0b:20:
8c:a2:c7:64:c4:2f:cf:21:21:e3:3f:43:41:aa:ee:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:87:EB:C3:FE:8D:07:DF:B4:E0:E6:73:9E:DD:F2:37:BD:A5:C6:0C
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B5300C8C383A11EFA2A6EE6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.232.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:98:e0:1c:54:5f:0a:7a:07:ab:67:a2:ae:39:71:cb:86:97:
f5:be:54:9d:f8:bf:55:d8:e4:4f:d4:41:7d:a2:8d:f3:97:5f:
46:a7:10:b5:e0:d6:c6:fd:8c:2f:76:81:88:b1:45:b7:c4:0f:
7d:86:1b:06:b5:86:cc:7f:aa:c5:17:29:b3:c1:41:42:fa:8d:
04:dc:24:1f:20:ad:78:23:79:41:04:7d:c4:01:38:a3:5e:4e:
48:da:7e:20:f8:7c:ca:9c:83:76:b6:2a:3b:80:8c:28:78:dd:
ff:24:11:c5:02:d1:ec:7e:f8:f0:b5:14:26:4b:51:12:af:0d:
1a:b1:90:ff:79:19:f6:e2:ae:63:72:26:85:87:ea:cd:be:79:
50:b9:93:8c:6f:31:87:5c:ce:bb:3f:47:a3:5c:68:bc:2c:d5:
77:92:e1:36:c1:61:47:a6:57:e5:a0:3b:af:ea:45:5c:9e:5e:
60:85:5c:81:6b:f5:9a:a4:17:04:93:86:18:d2:df:6e:c7:16:
3c:44:85:94:2c:ca:80:86:4f:b8:d8:9f:3f:74:5d:62:37:25:
42:0f:a3:bb:e9:63:3f:cb:1e:33:46:4b:51:64:98:2a:53:ef:
2d:9d:85:45:a6:13:a3:26:a5:4f:96:78:f1:e6:66:61:78:bf:
77:39:b6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:51 2026 by rpki-client