
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C7BC6F6E11EB11EFBEDFDE42C4F9AE02.roa
File: C7BC6F6E11EB11EFBEDFDE42C4F9AE02.roa (raw, json)
Hash identifier: ic5i+kY2kw9XRexpOmtS27mvcvk2ESxwWM3wpT21f+c=
Subject key identifier: 48:E8:F8:91:7A:C6:4A:76:C9:4B:E2:8B:37:1A:79:16:01:55:9A:68
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C17
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C7BC6F6E11EB11EFBEDFDE42C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:45:38 +0000
ROA not before: Thu 08 May 2025 15:54:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152518
IP address blocks: 160.19.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11287 (0x2c17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c192-9ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:47:d4:bc:15:bc:2e:0f:aa:f8:37:ae:d5:
61:a0:3d:bf:be:b1:24:77:c5:a1:00:3f:18:42:c5:
71:83:b7:e0:9a:6b:7e:6a:23:96:09:14:dc:87:0d:
95:fc:48:13:d0:24:fc:8d:b3:14:27:d3:be:71:f4:
85:d2:64:73:e5:bf:1a:99:c3:f5:3a:30:02:91:55:
6c:6b:47:45:d7:d9:3a:d9:35:7b:e7:07:58:14:d9:
7b:6a:0a:48:0f:3b:6d:a4:2f:e5:8a:43:b8:d6:55:
c4:25:d1:92:23:b3:a0:3f:6c:b7:74:9e:27:85:c4:
ba:d1:f9:ec:38:4e:e4:3d:d8:e7:76:11:28:f1:4b:
51:cc:d0:50:49:71:ba:ab:8c:f1:ad:95:1f:7c:dd:
44:cb:4a:5f:f2:21:43:e2:89:2a:ed:38:db:b6:52:
6e:4f:dc:fd:ed:46:8f:25:63:7a:e9:3f:88:0a:d7:
ac:cd:88:ab:9f:39:f0:cf:07:58:fb:fa:5f:87:cd:
05:07:c7:e9:2a:30:2e:f8:b5:0a:16:0c:a3:fa:7c:
7c:62:8f:ed:6b:22:44:ed:7b:77:61:9c:e0:12:9b:
53:25:fa:38:92:c5:1b:23:6e:04:57:6a:2e:7f:c7:
9a:cb:9f:97:d7:6c:01:09:cd:05:e0:4a:f7:78:b6:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E8:F8:91:7A:C6:4A:76:C9:4B:E2:8B:37:1A:79:16:01:55:9A:68
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C7BC6F6E11EB11EFBEDFDE42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.19.68.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:51:86:f5:b3:0b:6d:27:7f:44:68:21:a7:cb:bc:64:02:7d:
fa:88:bc:19:a6:90:c6:14:92:14:1d:63:ef:c0:d8:97:0b:b2:
37:27:a3:ef:f9:64:f3:b4:e0:19:14:27:1c:61:b6:56:35:eb:
fc:5f:b7:be:af:8d:0b:89:14:9a:ca:67:e4:e1:04:aa:e5:25:
04:de:80:80:32:d4:ee:40:46:10:2e:3b:67:d6:35:09:d5:3b:
21:59:a5:05:0d:45:af:91:51:ca:01:db:16:0c:e7:e8:7a:fa:
9f:cf:0f:61:37:73:e6:20:54:56:6e:7d:d8:b7:ad:43:e3:b2:
22:1d:36:c7:fc:6e:c2:b0:bd:be:d2:94:40:6d:f3:e0:ee:0e:
cc:5e:e8:ba:28:f2:4c:22:13:b4:52:17:47:8c:df:30:50:d8:
0c:93:af:1b:a0:f0:f3:08:b9:4b:b4:64:0b:cf:c8:a2:64:84:
89:56:9d:e9:e5:f5:50:f0:dd:ea:4c:65:01:99:11:b5:8f:c8:
3a:ed:7a:2d:00:78:3e:fb:7d:7b:de:36:77:06:8f:00:85:43:
6e:e3:8b:08:ea:5e:ee:5c:21:22:6b:36:41:5b:e6:c0:64:2d:
d0:c4:e1:fa:e5:09:ab:fb:3e:ef:52:95:f2:c0:96:fe:24:e8:
45:66:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:13 2026 by rpki-client