
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5C23494BD0711EFB92D9250C4F9AE02.roa
File: F5C23494BD0711EFB92D9250C4F9AE02.roa (raw, json)
Hash identifier: gtq+rKZEK7LvIwD86UvnjR4vu3UcXcKelnfv/REGoXE=
Subject key identifier: 5E:8D:D4:21:D6:3B:B8:EF:AD:DE:DF:C5:85:0E:A9:F8:B0:F0:AC:98
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C53
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5C23494BD0711EFB92D9250C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:47:07 +0000
ROA not before: Thu 08 May 2025 15:55:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153257
IP address blocks: 160.191.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11347 (0x2c53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:55:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c1ea-052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:3f:c2:56:b5:a9:b2:ba:e2:9d:b0:23:a5:
01:39:cb:51:87:91:8b:49:8f:b2:1c:29:ae:a6:8e:
b7:49:8c:02:80:83:5a:c4:10:3c:29:d5:6c:af:1c:
cc:e0:2e:21:3d:94:87:a6:85:1d:12:de:f7:e9:57:
58:50:e6:f9:ef:21:1f:cd:2b:2b:25:59:33:f8:9c:
7b:02:35:dd:53:f5:3b:44:a9:2c:90:11:05:6c:45:
15:fb:e5:6c:cb:2b:bc:f7:01:7f:ba:ef:b2:0b:95:
cb:97:02:3d:49:4a:07:14:19:7d:fb:94:3b:a7:3e:
40:65:71:6d:94:c0:34:3b:70:e6:c1:52:e0:56:c4:
67:31:38:09:0a:a4:4a:cc:4a:08:1c:32:84:0a:f7:
01:22:ec:37:c2:60:44:64:2c:5a:18:ee:51:a9:b4:
95:5e:5f:7f:1e:ee:5d:6e:fd:96:aa:e0:55:09:30:
97:14:44:d4:d6:49:6d:fb:4f:b8:c0:35:f4:5a:6c:
9c:c9:f5:71:b5:ce:9f:00:1c:29:d2:26:47:c1:5d:
43:c1:93:55:1b:a2:99:92:e9:8c:6f:2e:46:e7:3c:
e1:19:d3:7f:8e:fb:f9:d5:62:f5:7a:98:87:ff:58:
27:ca:80:72:f7:08:96:ec:7c:cf:75:09:46:09:30:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8D:D4:21:D6:3B:B8:EF:AD:DE:DF:C5:85:0E:A9:F8:B0:F0:AC:98
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5C23494BD0711EFB92D9250C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:60:ce:0d:58:20:59:c3:5c:16:68:74:93:ce:1d:98:72:48:
e7:58:95:99:4d:82:34:d2:b1:e7:ce:bd:70:b9:ac:b6:9d:04:
2a:f9:22:29:f8:5b:c1:90:03:97:0b:45:48:a7:37:d9:b3:d8:
09:d2:2b:b5:01:ae:b5:f6:fa:9b:ee:30:60:ca:60:40:7e:ed:
bb:6e:d5:fe:f8:ec:02:32:f8:89:71:97:70:aa:9d:ff:1a:14:
2e:0d:4b:2a:8c:df:cc:9a:6a:a5:74:40:b6:b9:32:f2:26:0b:
e8:4d:ab:de:b4:5a:25:b9:37:01:4a:50:e4:76:4a:80:56:21:
73:62:07:a0:44:d5:7a:84:83:63:63:ca:ad:9f:64:f8:04:80:
eb:8b:24:36:c9:90:fe:6f:31:9e:8d:f1:56:c5:bf:88:56:81:
12:8f:99:ac:63:1c:41:ea:c9:9f:36:6f:d8:81:52:36:a3:e1:
2a:a8:da:f9:30:d5:0f:f4:7e:3a:65:f2:ae:17:34:23:81:b5:
c3:c7:ed:b2:53:5e:f1:17:ac:fa:e7:60:d0:74:33:43:e4:46:
d0:72:bd:c2:66:83:39:31:22:46:e7:c7:c1:29:87:3a:14:62:
d4:5d:99:a4:40:2d:d1:66:87:8e:b0:77:96:a7:5e:06:10:38:
0b:c7:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:20 2026 by rpki-client