
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa
File: F05801E2872711F0913B9D7CC4F9AE02.roa (raw, json)
Hash identifier: xoF8LTFcEvD+VUOcm/CVQ5R7CLzs0DgdpdNIWCO0nVM=
Subject key identifier: A6:49:B7:1A:DD:3C:1F:3F:01:69:A6:03:B1:B7:69:01:58:69:50:10
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1F7E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa
Signing time: Mon 01 Sep 2025 11:36:45 +0000
ROA not before: Mon 01 Sep 2025 11:36:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133311
IP address blocks: 160.22.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8062 (0x1f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Sep 1 11:36:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68b5854d-6069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:78:81:73:54:d1:77:27:92:74:8c:67:8e:
da:5b:91:5b:a9:64:4a:25:d0:e9:2f:9c:79:f8:1f:
dd:88:9b:a3:bc:1c:57:49:db:b3:9e:ce:f4:24:dd:
f1:d4:d2:3c:6f:32:0f:36:a9:c9:24:14:89:15:48:
6a:0f:b9:9c:0f:d9:f0:59:d9:49:1b:7e:26:33:1e:
89:cb:71:99:8d:a6:d8:d1:45:7e:36:0a:74:5b:b2:
8b:80:3e:3d:8a:d7:8c:52:59:89:27:46:19:99:c8:
46:43:ba:ec:a2:d2:6c:05:0d:54:56:b8:a4:53:31:
34:8a:df:d5:fd:f4:f7:26:73:2e:d3:ba:85:a2:ff:
60:2d:90:f5:ad:f3:06:44:19:a9:a0:37:98:86:e0:
db:90:ae:31:83:ca:0e:e9:07:67:43:f4:68:a6:19:
0d:da:0e:3c:d1:6c:29:aa:8e:00:a1:b3:5a:54:cd:
87:6b:eb:36:4e:9b:14:ca:4d:64:29:32:e4:fe:e5:
c7:2d:0b:17:2d:31:35:4c:86:62:f4:15:20:f3:94:
ea:36:55:f4:e1:c8:02:02:c5:ac:a4:a9:92:a5:af:
f8:2c:96:e5:67:4f:78:72:02:81:c1:2c:85:70:a9:
6a:63:a6:32:48:90:a2:ae:81:61:b1:72:0c:e2:c1:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:49:B7:1A:DD:3C:1F:3F:01:69:A6:03:B1:B7:69:01:58:69:50:10
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.254.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:b1:81:8b:65:94:a2:03:1f:32:64:80:61:c9:c2:23:e9:99:
aa:10:6c:a0:d0:69:06:07:86:9a:6a:2d:75:d5:4b:1c:63:77:
70:03:33:99:74:44:97:7a:c8:2f:13:f2:1b:1f:51:50:1e:52:
6e:20:3a:87:ca:62:ec:85:d1:ad:8f:aa:de:a7:b8:e8:34:27:
e2:c8:42:8b:9d:30:17:75:d9:09:9c:08:b0:44:cf:f4:c3:85:
e6:42:00:b6:3b:e9:d7:e3:03:72:5f:0e:55:b5:11:e6:09:cf:
3d:97:4b:6c:28:e1:f7:b6:12:d5:2f:db:05:19:21:ba:ff:3d:
55:83:78:9a:49:94:0b:ae:6d:ab:66:20:53:90:c1:88:83:24:
60:cd:8e:70:6d:b0:a9:b0:ed:9e:3e:a6:f0:94:d4:e0:fa:43:
a8:fb:ab:75:15:f2:0c:45:24:87:f7:20:31:e5:23:2a:af:f2:
10:2e:50:c8:67:d1:8c:31:dc:91:b2:d7:62:c7:4a:d7:82:1f:
ca:91:eb:4f:95:d5:30:34:e8:ff:51:a4:cf:40:f4:1f:58:5d:
ee:7a:c7:1e:fd:d5:f5:ee:f2:d7:d3:15:70:3c:b1:26:41:41:
71:26:29:4a:e4:02:fa:82:94:1e:f0:e7:da:b9:5c:3a:bf:3a:
39:58:e5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:13:26 2025 by rpki-client