
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa
File: EF2F049E74C411EFBE28DF30C4F9AE02.roa (raw, json)
Hash identifier: T4hxw+Nsd8UMDoS1ubIaYVPACqcqdQc2hOzAjBpagcw=
Subject key identifier: 9F:5B:BB:E5:82:97:14:C5:14:F1:C6:06:32:F6:AC:DE:2B:A6:63:93
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2D02
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:51:11 +0000
ROA not before: Wed 21 Jan 2026 08:37:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151690
IP address blocks: 160.19.35.0/24 maxlen: 24
160.187.48.0/24 maxlen: 24
160.187.207.0/24 maxlen: 24
160.191.124.0/24 maxlen: 24
160.191.125.0/24 maxlen: 24
165.99.142.0/24 maxlen: 24
165.99.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11522 (0x2d02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 21 08:37:47 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2df-1ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:e6:32:9c:d8:47:df:0c:75:c1:e1:93:ba:
10:b6:91:de:72:19:66:d0:d0:4d:2c:5c:32:1d:35:
56:00:37:5e:ed:83:ce:08:2b:b1:7b:06:5e:c7:00:
e6:f7:1e:2d:0c:3b:3d:0d:76:2f:bc:ce:b7:27:e8:
0d:4a:72:66:47:1f:2e:1b:d8:07:4c:49:70:2e:19:
e0:03:d9:b1:8a:e9:8d:d6:04:70:2a:65:0c:20:ef:
4b:9c:01:d0:bc:83:55:52:89:ec:32:99:2f:d8:67:
80:3e:63:56:0c:4e:b3:d8:61:49:03:0f:93:59:f4:
d8:23:93:df:f3:9e:a0:bf:8c:0c:9c:3f:36:e3:8e:
8d:b8:82:16:aa:68:c7:3b:65:8b:0e:6e:dc:d4:3a:
96:54:10:ba:4a:19:a2:fa:1a:93:a8:d9:a9:a3:dc:
5c:8d:9e:f7:e9:8b:8b:5f:35:92:01:29:3c:14:0f:
3b:b3:d4:c5:37:d9:20:ad:d5:94:53:8e:0c:aa:57:
7b:67:92:64:9e:76:3c:62:d4:39:27:01:a4:c5:e8:
e4:f0:c3:6c:a6:48:c9:c6:2a:71:cb:0d:0f:89:3b:
a5:99:f0:b9:bb:d2:b2:ba:4b:cd:c9:8f:c4:0e:dc:
25:65:d5:77:eb:46:87:98:d2:87:dd:cb:0a:0d:8d:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5B:BB:E5:82:97:14:C5:14:F1:C6:06:32:F6:AC:DE:2B:A6:63:93
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.19.35.0/24
160.187.48.0/24
160.187.207.0/24
160.191.124.0/23
165.99.142.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:75:71:7a:c4:3b:d2:72:f9:ae:78:2b:1c:4b:2a:cc:3a:dd:
ad:84:9a:24:e5:44:b4:ad:c2:bf:4c:e7:a8:d7:a4:ad:d6:24:
41:b7:cf:08:1e:df:e9:58:b8:84:9e:cf:fd:03:62:83:2b:60:
f1:67:0c:46:8b:b3:89:91:aa:24:c7:db:d9:2d:84:e6:d3:d5:
9e:14:f2:47:84:b6:31:0d:1d:27:f2:3d:38:99:3b:27:c5:e3:
8a:90:d4:61:0e:ac:84:d4:e5:3f:b6:3e:35:17:1f:9e:af:55:
23:10:43:ac:21:7b:57:94:58:2d:39:60:79:e1:5d:7e:69:ac:
96:b1:89:f9:86:b3:02:2c:93:90:87:e9:b6:bb:e7:64:17:8c:
67:67:2d:ec:20:c6:ff:c8:08:f9:70:f8:34:58:42:a5:3c:da:
46:bd:b7:e3:f4:59:f8:d1:62:ca:e6:8c:b0:c1:63:21:26:d6:
c5:95:96:4e:f9:b7:d5:99:35:51:6a:68:f0:e1:d4:4f:81:46:
e2:fa:8e:0f:8b:59:d4:c1:2d:51:a4:67:93:23:cd:65:36:97:
c0:80:c2:b9:99:aa:9c:a3:04:bf:15:a1:05:ba:ef:89:7c:75:
24:35:7e:df:03:48:65:3e:6c:77:e9:ad:b5:d4:c7:66:d6:a1:
2f:e1:d2:05
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICLQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwMTIxMDgzNzQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzJkZi0xZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs7zmMpzYR98MdcHhk7oQtpHechlm0NBNLFwyHTVWADde7YPOCCuxewZexwDm
9x4tDDs9DXYvvM63J+gNSnJmRx8uG9gHTElwLhngA9mxiumN1gRwKmUMIO9LnAHQ
vINVUonsMpkv2GeAPmNWDE6z2GFJAw+TWfTYI5Pf856gv4wMnD82446NuIIWqmjH
O2WLDm7c1DqWVBC6Shmi+hqTqNmpo9xcjZ736YuLXzWSASk8FA87s9TFN9kgrdWU
U44Mqld7Z5JknnY8YtQ5JwGkxejk8MNspkjJxipxyw0PiTulmfC5u9KyukvNyY/E
DtwlZdV360aHmNKH3csKDY2DWwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFJ9bu+WC
lxTFFPHGBjL2rN4rpmOTMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUYyRjA0OUU3
NEM0MTFFRkJFMjhERjMwQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk
BAIAATAeAwQAoBMjAwQAoLswAwQAoLvPAwQBoL98AwQBpWOOMA0GCSqGSIb3DQEB
CwUAA4IBAQBKdXF6xDvScvmueCscSyrMOt2thJok5US0rcK/TOeo16St1iRBt88I
Ht/pWLiEns/9A2KDK2DxZwxGi7OJkaokx9vZLYTm09WeFPJHhLYxDR0n8j04mTsn
xeOKkNRhDqyE1OU/tj41Fx+er1UjEEOsIXtXlFgtOWB54V1+aayWsYn5hrMCLJOQ
h+m2u+dkF4xnZy3sIMb/yAj5cPg0WEKlPNpGvbfj9Fn40WLK5oywwWMhJtbFlZZO
+bfVmTVRamjw4dRPgUbi+o4Pi1nUwS1RpGeTI81lNpfAgMK5maqcowS/FaEFuu+J
fHUkNX7fA0hlPmx36a211Mdm1qEv4dIF
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:52 2026 by rpki-client