
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa
File: F05801E2872711F0913B9D7CC4F9AE02.roa (raw, json)
Hash identifier: kuPkW752G0QpWGTCPahHH2vBx13Qn31N+Cp3RvQqDmI=
Subject key identifier: 21:89:44:65:DD:67:2A:D9:11:46:C4:28:7F:7C:1B:3C:4F:D7:65:1F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CB7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:49:27 +0000
ROA not before: Mon 01 Sep 2025 11:36:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133311
IP address blocks: 160.22.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11447 (0x2cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Sep 1 11:36:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c277-878c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:bd:b0:27:c0:95:b1:7c:bd:1e:32:6d:05:
c3:90:db:03:0e:5e:3f:4b:5a:8a:23:e3:da:1e:3b:
40:55:a5:24:d4:ea:0f:12:03:87:6b:0b:04:cb:cf:
0f:3b:17:c4:ed:d2:c3:8d:c8:81:ee:3c:85:40:55:
ae:37:63:c2:a0:33:fa:7b:99:6d:72:fc:6f:89:5c:
e2:be:c9:98:a6:e1:fe:91:af:c7:90:5e:29:df:d2:
14:c2:bd:75:06:54:7e:f7:bc:97:ee:15:f8:c0:d6:
83:55:f4:bc:02:3c:f0:bc:cf:ff:94:60:12:b8:f0:
16:77:dd:dc:db:53:c4:13:0f:a5:05:cb:53:20:34:
4a:08:65:06:b2:64:bf:d7:7f:8c:fa:ca:8a:21:e3:
93:12:be:dd:dc:73:99:03:e2:c5:c5:00:a1:e1:5f:
f8:73:64:c0:ce:2a:45:3a:03:b2:88:08:77:05:3d:
1f:51:25:07:a0:7c:8f:9c:dd:10:b0:eb:4f:52:a0:
41:4d:43:62:d9:94:0e:97:d1:11:28:a0:95:e9:f7:
30:41:ca:13:db:6b:96:4f:8c:60:1d:8a:b5:cb:f3:
6b:bb:b7:29:ad:c2:58:bf:5f:b9:e7:df:46:4e:4d:
8a:7d:30:e8:2e:fe:25:bb:e1:33:3c:48:53:90:a8:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:89:44:65:DD:67:2A:D9:11:46:C4:28:7F:7C:1B:3C:4F:D7:65:1F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.254.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:1d:57:9f:0c:ee:ce:70:21:70:6a:eb:d7:5f:7f:33:3e:50:
5e:9f:f1:30:30:54:8c:02:a9:50:51:fd:72:e9:7f:17:a2:e1:
a7:c5:04:6b:42:2a:08:1e:5e:86:bb:29:6e:52:95:43:42:23:
cb:fd:f1:3a:3a:83:e7:a7:d9:b6:b1:19:0c:05:f1:28:b3:89:
53:b2:24:e0:16:2f:ec:ba:b7:48:b7:7b:33:64:4d:ee:7d:b3:
2f:72:70:a7:54:4a:fa:f6:47:7f:ad:77:06:9f:16:3d:57:03:
fd:89:ed:5e:c1:5a:30:9d:f6:0e:0c:37:5b:03:20:8c:c9:63:
1e:f0:21:44:e6:d5:01:d6:fa:18:72:92:9a:d6:33:7a:bc:01:
d9:b9:13:4c:82:87:d4:84:e3:81:ca:c6:8b:13:df:aa:20:26:
7a:fd:f7:68:f7:12:23:13:70:6f:88:c9:a9:63:c2:70:09:4a:
87:38:14:8c:97:1f:e7:20:05:c6:fa:1d:33:a2:d3:f5:fd:d6:
9e:7a:48:e7:f2:14:14:c3:5d:62:8f:3d:c0:e5:3b:af:1c:0d:
bc:63:94:1f:a6:cd:77:c6:bb:0d:df:86:8a:a7:68:75:f1:d6:
86:67:d8:6d:cf:3e:56:a2:07:55:02:6a:6c:b9:9c:46:c8:80:
dd:9b:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:24 2026 by rpki-client