
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F7FBF3C0AE2B11EFA17C3E70C4F9AE02.roa
File: F7FBF3C0AE2B11EFA17C3E70C4F9AE02.roa (raw, json)
Hash identifier: C6DtfCaAkzaa+zHM2FvLmibUGjqKHyX7rVeiwpXphis=
Subject key identifier: A0:C7:05:79:F2:BD:FF:1F:11:D2:5F:D0:29:34:43:26:67:17:4F:CD
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1D95
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F7FBF3C0AE2B11EFA17C3E70C4F9AE02.roa
Signing time: Thu 08 May 2025 15:53:21 +0000
ROA not before: Thu 08 May 2025 15:53:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150093
IP address blocks: 160.22.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7573 (0x1d95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:53:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd371-5c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:f8:f7:a1:77:96:e5:ad:43:5c:02:a6:94:
76:bb:57:39:58:86:0b:8e:ea:c3:0c:0b:dd:49:8d:
e9:f7:e4:7d:47:17:c6:26:76:ab:9e:6f:70:5b:36:
0f:78:e7:f0:e0:8d:40:62:a0:7d:a9:a6:ef:33:25:
43:02:02:87:d8:87:39:d1:52:f6:45:4c:d7:d8:29:
6e:24:80:bc:44:c3:60:f1:d8:80:c6:f1:98:bb:6f:
be:97:31:2b:31:ab:d4:cd:1c:c3:df:b9:f5:f0:da:
d1:5f:d7:4e:c7:a9:1b:ea:0b:19:39:75:07:cc:69:
ff:de:0f:7b:39:28:02:be:8e:bd:54:fc:6c:3a:19:
89:67:8f:e6:fc:97:60:09:2e:a0:bf:45:75:a8:a8:
7d:5c:d9:75:93:87:9a:13:11:b3:97:bc:ac:f1:7d:
d5:38:07:36:37:a8:e9:03:2c:1c:49:1a:0d:43:55:
21:e4:3b:94:14:ea:a6:97:7e:3a:a1:d9:ef:18:8d:
8f:04:98:3e:f2:59:44:af:ab:a4:2a:0b:b8:1a:e4:
0f:09:f5:7c:dd:79:a6:bc:d1:a3:e0:aa:ad:f3:3d:
a1:ed:34:e8:c6:ce:3e:b6:fd:a7:be:3d:94:70:6d:
66:f7:5f:64:fe:60:9d:c1:0d:7a:ab:f3:bb:a0:2e:
12:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C7:05:79:F2:BD:FF:1F:11:D2:5F:D0:29:34:43:26:67:17:4F:CD
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F7FBF3C0AE2B11EFA17C3E70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.235.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3f:e9:c1:17:9a:06:12:51:7a:da:34:32:d0:b4:ff:7e:9b:
71:96:0b:b0:eb:9d:a7:c5:1c:bb:1d:cf:9a:d4:ce:4b:5b:3c:
1c:b2:80:17:3f:b1:99:74:a2:bd:fd:8b:18:3a:e2:7e:41:c0:
6a:94:3b:92:0e:44:d0:ef:cd:77:53:80:c1:56:1f:79:92:8e:
c9:11:55:eb:c2:fe:fc:57:de:d3:61:d3:45:90:45:18:8d:9b:
28:81:a6:d5:13:00:b6:76:aa:57:1e:33:4b:b1:37:c2:03:11:
39:15:1b:19:28:a2:de:c5:22:9e:68:93:1f:53:28:8b:15:6a:
ee:5c:cc:28:d3:08:44:3c:3c:93:23:21:d0:53:c6:fe:f7:7e:
5a:6e:78:a9:c7:ca:49:90:18:c9:a3:9c:a6:09:8f:2f:0c:f2:
7d:e5:69:e3:d6:60:bf:02:e8:5e:c0:a4:32:bd:3b:b4:b1:ea:
40:1f:5f:9c:70:c4:dd:24:a4:b1:16:e0:66:d4:1b:5e:c7:0c:
dc:ab:86:e1:7b:4c:3e:e1:e3:1e:58:9a:47:9b:4e:6e:2f:9f:
ca:08:e6:70:f2:3a:a3:51:7e:fe:e3:ce:b7:01:ca:92:12:6d:
bc:d8:20:17:c1:b2:e0:b7:b7:27:bd:f0:06:0b:d3:f9:2c:0f:
40:a1:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:00:58 2025 by rpki-client