
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FD70F5608D4311F0B13B2181C4F9AE02.roa
File: FD70F5608D4311F0B13B2181C4F9AE02.roa (raw, json)
Hash identifier: Q2pxX9JLa4S3o13wHClawF5fDnbbxoK/FVRoeTPN8G0=
Subject key identifier: 12:62:08:F2:9C:6E:D4:41:5D:1D:16:8C:EE:5E:F9:05:63:48:82:12
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CBA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FD70F5608D4311F0B13B2181C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:49:31 +0000
ROA not before: Tue 09 Sep 2025 06:12:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135760
IP address blocks: 160.22.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11450 (0x2cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Sep 9 06:12:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c27b-4629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:b1:de:8a:e3:82:cf:c4:8b:7b:35:10:2e:
fb:ca:5e:5d:eb:99:9c:28:d3:70:e0:f4:63:5e:d2:
0b:5f:ca:b1:e7:4d:51:d8:82:7f:49:47:73:42:01:
1f:17:bb:c8:97:d0:4d:66:4b:05:f2:b3:41:d2:6e:
e7:f7:67:6e:1e:a6:ee:3e:af:07:80:68:e0:9a:49:
ce:99:cf:9b:ef:3c:85:cf:81:4a:dc:1f:5f:ca:08:
9d:05:c2:98:10:cc:ca:76:60:db:ac:79:a8:f3:fe:
ab:6d:88:b8:1d:bd:53:65:cd:50:7b:3a:c1:63:c6:
00:9c:33:b6:30:f0:55:7a:f5:2e:ee:41:86:28:71:
52:d0:17:4d:74:90:f8:58:29:d7:23:ca:cc:1a:9f:
c4:19:97:3e:f2:56:e8:9a:45:02:bf:31:f6:76:d8:
dd:1b:f0:9f:a9:2f:03:15:15:50:64:61:dd:67:d6:
81:56:21:ea:c8:fc:1d:5c:90:ad:8f:21:7d:1c:7e:
ff:4d:b8:c6:2d:ef:45:f7:1d:fe:07:2a:b0:15:1b:
32:1e:5d:a2:d8:e1:81:7e:ac:aa:90:11:9f:ec:82:
1d:ec:2e:3d:f1:41:b4:09:28:72:9b:d1:d1:7a:ec:
54:7d:3d:2f:aa:65:70:50:14:d4:3f:62:80:c1:dc:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:62:08:F2:9C:6E:D4:41:5D:1D:16:8C:EE:5E:F9:05:63:48:82:12
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FD70F5608D4311F0B13B2181C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.131.0/24
Signature Algorithm: sha256WithRSAEncryption
52:05:1d:60:64:90:9c:21:3d:28:44:38:5d:a3:2d:23:5e:c3:
24:c4:1a:d4:50:c9:34:bf:76:15:05:30:a1:69:24:43:9b:23:
e8:aa:ed:d7:03:a9:9a:32:af:3c:c0:af:f8:41:cc:ee:4a:ba:
f8:32:d6:a3:19:a9:db:3d:13:4e:c3:2a:c2:3a:14:08:c6:10:
45:80:1b:9c:34:88:fe:1f:a3:66:e7:95:82:db:1b:8b:4d:6f:
2e:e0:12:86:7f:97:4d:3e:b5:3b:e5:25:30:62:8e:50:50:2b:
03:93:e4:52:ef:24:b4:f1:d7:01:05:32:f4:e5:fa:9f:4a:af:
e6:38:30:e0:dc:1c:fc:8d:83:b4:9d:90:5a:62:e5:53:c0:ca:
83:c2:cd:8e:62:cd:8c:f9:20:46:93:d3:51:90:4b:95:ff:0d:
fc:12:2f:06:8c:e1:b7:5c:ab:38:39:00:86:a1:4b:d3:a0:d9:
bc:3d:3c:49:06:16:22:2b:a1:16:48:a5:c4:37:18:fc:fb:06:
d1:7b:7e:8f:7e:c4:22:c4:de:94:f6:e6:6b:dd:1e:56:df:71:
bd:8a:cd:0f:99:23:f1:77:de:09:97:06:0a:49:11:ba:f2:96:
7d:89:dd:e8:90:ec:34:fe:5d:ae:65:20:57:7c:4a:e3:0b:f9:
20:46:ea:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:37 2026 by rpki-client