
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D55B660C345011EF8A3C1274C4F9AE02.roa
File: D55B660C345011EF8A3C1274C4F9AE02.roa (raw, json)
Hash identifier: GXtRfh4Htr0zt5x3A5Jl4MPMXJUo1nGH/eKydEQy6Ow=
Subject key identifier: 25:99:27:20:AD:04:F7:3E:1A:69:F1:B3:CA:55:AF:AD:52:13:0B:98
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2D15
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D55B660C345011EF8A3C1274C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:51:38 +0000
ROA not before: Thu 19 Feb 2026 10:36:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152547
IP address blocks: 160.22.252.0/23 maxlen: 24
165.101.160.0/24 maxlen: 24
165.101.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11541 (0x2d15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Feb 19 10:36:50 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2fa-3894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:18:ba:ad:cf:44:56:a1:75:b2:3f:14:5b:6b:
cf:dc:a3:a4:5f:f5:3c:a1:85:4e:ff:2d:b1:be:88:
50:7d:8e:12:df:6a:5e:35:65:5e:5e:b2:a5:6e:93:
3e:5f:6a:66:6e:ad:81:b5:8d:2d:64:1c:77:7f:54:
07:58:f1:b0:00:83:6f:b2:2a:82:b7:51:0c:47:b8:
b7:46:bb:fe:ab:a7:76:09:16:7f:14:ec:48:9c:f7:
22:1a:96:a3:8f:6a:78:48:28:c6:ff:9e:ea:1d:b5:
31:7c:64:e6:6c:7c:5a:92:0e:10:e4:55:d0:1c:18:
fa:ca:89:53:b7:38:41:41:e6:3b:8d:13:3e:0d:dc:
7b:bc:7c:36:a2:d5:9a:ca:2c:ca:b1:aa:79:76:76:
9f:b5:a2:6c:5a:93:b5:85:9c:63:bf:76:bb:a5:97:
9e:82:14:b7:52:18:d9:e1:97:82:0b:52:c8:bd:40:
9b:ae:b8:fd:57:df:aa:b2:f0:92:4b:82:94:04:46:
ed:a9:98:4c:e6:dd:f0:0b:5e:4e:d1:e6:4b:6d:ff:
c9:47:ad:37:b7:af:62:16:79:ae:97:9c:f0:39:0c:
64:4e:b8:72:5f:b0:f1:97:e6:27:e6:6e:dc:1a:ba:
ac:fe:20:ff:17:9e:6a:f5:f0:e6:21:c7:f7:05:f8:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:99:27:20:AD:04:F7:3E:1A:69:F1:B3:CA:55:AF:AD:52:13:0B:98
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D55B660C345011EF8A3C1274C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.252.0/23
165.101.160.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:62:1e:3b:4e:b9:48:39:fe:96:f4:c1:50:f6:06:19:c6:d4:
11:85:10:28:b1:08:5e:e6:2d:77:14:c4:67:59:be:0b:e6:db:
f5:0f:f2:77:26:3d:7d:58:0e:f0:c5:b2:39:4e:65:6a:59:b6:
05:84:a0:b2:58:70:f6:eb:13:a3:9b:34:96:f8:77:05:cc:67:
ed:90:3c:8b:a8:b1:96:41:e4:7d:15:69:79:38:13:86:2c:89:
92:13:f3:21:d8:1d:2d:6a:39:c6:37:ff:bc:26:cf:cd:1f:d1:
3e:86:9d:33:6b:d9:e0:c9:4b:00:49:84:11:74:68:08:d9:e1:
e6:e0:b2:6e:f7:07:17:c1:b9:46:33:2c:a4:3b:7d:da:a8:e0:
58:64:1f:f0:11:b4:75:16:10:da:04:17:f0:a9:2b:9e:c8:06:
35:2a:07:92:84:07:58:87:fd:90:05:96:05:48:ef:e4:7e:37:
4e:eb:c1:e8:95:d5:6a:e0:13:f2:fb:b6:a7:ed:4d:d3:99:49:
a7:c8:14:9a:ca:9a:69:5a:e4:ae:e2:6c:f8:11:d5:03:ca:55:
3e:ba:28:a4:8f:e7:81:76:78:59:d2:4a:81:fa:5c:d3:9e:ab:
a2:f8:99:6d:bf:1a:51:9b:1f:09:19:62:f0:cd:c0:d1:49:57:
38:c7:ce:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:21:05 2026 by rpki-client