
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF492418847C11EFBD36080BC4F9AE02.roa
File: BF492418847C11EFBD36080BC4F9AE02.roa (raw, json)
Hash identifier: kkeuN+i90ae/eRMdlbuZqukevGfI5IDTRaMmaIyVGeE=
Subject key identifier: 1D:39:64:C8:4E:45:9B:87:44:D2:9F:B5:11:FC:F7:CB:35:8D:41:F9
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C44
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF492418847C11EFBD36080BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:46:46 +0000
ROA not before: Thu 08 May 2025 15:54:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153227
IP address blocks: 160.187.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11332 (0x2c44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c1d5-60a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:32:4e:6c:0f:05:a7:0a:56:59:24:bc:8b:
2c:30:a6:b9:4e:c7:55:80:5b:6b:38:30:5c:06:5b:
eb:c8:4b:50:90:8e:72:9f:c9:45:e7:b0:47:c9:f6:
e1:d9:ca:48:f1:10:e5:89:46:c5:7b:a1:27:2f:3f:
10:42:82:db:71:6d:8c:91:e5:e6:87:50:c1:95:c7:
89:20:da:12:88:d1:1f:93:00:cc:dd:c9:78:70:5f:
02:ba:44:b1:92:3f:2e:ff:1d:09:ce:0d:d1:91:b5:
4f:a6:47:f0:80:a8:8d:d2:90:cc:b0:be:fe:84:5a:
59:39:aa:2d:d9:de:27:c1:e5:64:0b:75:cf:37:47:
45:2b:33:1f:c6:0d:0a:fb:52:0e:df:bf:f2:85:7b:
49:26:fc:f7:5a:36:8e:ba:bf:60:02:39:82:0f:2a:
e8:64:2c:ef:82:4d:c3:29:a4:55:76:88:e2:03:1b:
c5:ea:13:4d:c7:0a:89:f9:48:ed:27:47:1a:2d:69:
dd:06:67:88:bd:50:2c:43:b9:a5:8b:3f:0b:22:ef:
c2:9c:4d:ee:86:f9:0f:dc:56:be:31:a7:0e:06:6a:
21:b5:0b:b3:b2:f2:94:90:23:e1:b5:7f:d0:15:ec:
1a:68:73:8a:9a:44:c1:df:2f:02:e8:ae:c1:11:5c:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:39:64:C8:4E:45:9B:87:44:D2:9F:B5:11:FC:F7:CB:35:8D:41:F9
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF492418847C11EFBD36080BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.168.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:0e:e9:e5:7f:66:be:57:90:b5:f5:0b:0f:ef:1b:41:43:40:
31:e1:d9:9c:4c:23:3c:97:03:8e:ab:a7:d1:bf:c1:2f:12:38:
41:ba:b9:e9:d3:3e:e7:21:a5:62:94:2f:8b:ad:ae:c9:1c:ed:
bf:15:72:81:00:12:af:eb:d1:71:fe:23:2f:14:ab:3a:e2:93:
ea:5f:95:5a:9a:2d:80:fe:f4:a0:1d:98:bd:d8:8d:b7:38:d7:
7c:19:b9:ce:33:9a:ee:f9:88:a2:50:ce:2c:8e:76:c9:55:2b:
c4:45:24:ef:8c:17:18:1e:c3:2a:67:d4:86:40:1f:de:de:fd:
67:76:d7:7b:5b:71:29:53:3b:e4:91:e3:d9:c3:56:a6:5a:e4:
e7:a2:30:ae:34:bf:1f:25:97:ce:84:08:f2:8d:7d:1d:02:63:
c6:d1:0c:98:90:e0:fd:72:29:bd:68:04:6c:82:e6:5a:5b:1c:
d9:3f:e7:8d:47:26:57:ec:81:49:58:b6:7c:a6:af:f8:54:83:
74:9b:4a:f3:4b:8b:b0:df:8e:f5:73:26:32:ad:0b:28:e6:41:
b7:15:f6:36:95:29:e6:da:9e:f6:e9:2e:79:fd:a1:df:4f:59:
79:58:96:56:17:bc:0f:a0:00:52:27:23:6a:5b:18:05:f0:65:
23:cc:14:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:50 2026 by rpki-client