
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF5C73284F1311EFAA36CD5EC4F9AE02.roa
File: FF5C73284F1311EFAA36CD5EC4F9AE02.roa (raw, json)
Hash identifier: 5CchsHpDOefYawaSuytcCuII2jZR4bMXdN85rXX70os=
Subject key identifier: B0:34:11:D9:45:EC:FC:B7:32:EC:28:2A:E7:75:0A:8C:F9:8C:0C:CB
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2BC2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF5C73284F1311EFAA36CD5EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:43:31 +0000
ROA not before: Thu 08 May 2025 15:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138765
IP address blocks: 160.30.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11202 (0x2bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c113-eac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:18:69:ae:f3:6e:0b:88:19:3b:a8:95:89:
97:2f:e4:8e:3a:60:7f:e2:34:7d:35:a2:31:29:a4:
17:05:79:2c:b4:59:6f:62:82:c8:9d:1d:be:88:e9:
cb:39:bd:50:2e:c8:e1:48:79:2f:64:47:6b:8f:2f:
d4:04:aa:4e:a7:7f:5f:c4:21:4b:45:bc:78:91:cc:
e1:1d:19:38:ed:a3:d4:ac:ca:58:4e:32:68:9e:e8:
09:07:90:56:2a:e6:22:34:a6:2b:11:bf:55:63:d8:
24:c3:7f:98:73:63:91:85:69:fb:58:72:8d:77:62:
78:8d:af:55:09:91:ab:d9:a6:db:6e:d4:2a:3b:72:
88:44:fd:21:87:73:fb:2f:a2:6b:14:96:29:90:69:
52:00:ec:b6:70:a0:bb:3e:9f:4a:fb:69:86:1d:45:
38:c4:64:17:56:59:54:30:7a:55:d5:ac:19:ac:b2:
e3:9e:3e:25:99:95:a8:a4:73:28:4b:d7:bc:6d:64:
93:74:a3:6b:1e:f5:e8:79:90:28:9c:c2:c8:f1:a0:
09:23:e4:a0:17:06:07:25:9d:40:05:43:b7:aa:5b:
a1:14:f3:5a:e3:0d:65:06:91:8a:d4:e1:10:29:b1:
5e:00:05:ca:f2:a2:bb:4e:f5:7b:1d:c1:a5:cf:07:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:34:11:D9:45:EC:FC:B7:32:EC:28:2A:E7:75:0A:8C:F9:8C:0C:CB
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF5C73284F1311EFAA36CD5EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.36.0/24
Signature Algorithm: sha256WithRSAEncryption
31:56:71:28:7e:30:65:df:82:87:fc:28:97:cc:69:99:54:39:
77:e5:fb:c2:fa:ce:8b:ff:22:d1:29:23:ac:24:3b:a3:ab:19:
56:a7:42:83:79:9d:5e:3e:98:63:b9:61:b5:48:3b:dc:77:fb:
f8:37:a0:e6:7f:10:35:14:6b:0e:a1:33:cd:56:e6:76:9f:30:
46:c9:72:1e:ee:47:28:da:c9:22:68:f0:f8:a1:40:8b:90:c2:
4e:f9:b9:46:38:25:d8:9b:ab:f0:55:b5:8e:c1:48:ba:6b:78:
fa:76:92:bf:19:02:ca:af:7c:50:75:1a:98:26:6d:0f:02:cd:
f3:b5:82:76:5b:a0:ff:ab:6f:e9:fd:e0:bd:41:a5:63:83:7a:
e0:ff:a2:10:f4:8e:c9:20:2d:80:68:22:b9:a2:af:99:92:2e:
64:10:dc:0b:7e:7d:9a:ff:1e:d9:39:3c:e7:b6:6a:a4:99:54:
cd:8a:66:7c:3d:77:e4:34:9b:1e:29:1c:2c:dd:26:e5:57:2b:
1a:40:cc:63:60:04:4f:48:74:01:e0:0c:b3:4d:19:fe:a6:7d:
e7:4c:19:80:db:58:5f:7a:70:22:ad:89:b2:cb:f2:6d:8c:e8:
62:25:da:9e:14:8d:b7:87:f2:c0:c0:40:28:fc:05:fb:86:cc:
d1:31:3b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:48 2026 by rpki-client