
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8649EB6CF30E11EDAD4C2045C4F9AE02.roa
File: 8649EB6CF30E11EDAD4C2045C4F9AE02.roa (raw, json)
Hash identifier: e9H+jz/hZchgdGiS3/iTcBvDFlX7v5o6LqElpGdGTjM=
Subject key identifier: 92:A4:0B:DF:CC:58:A2:45:3C:EF:3D:4B:39:D3:83:B8:E4:43:BF:68
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E865
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8649EB6CF30E11EDAD4C2045C4F9AE02.roa
Signing time: Sun 31 May 2026 17:26:57 +0000
ROA not before: Sun 31 May 2026 17:26:56 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 148001
IP address blocks: 160.202.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59493 (0xe865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:26:56 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6f60-ee7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:93:d0:23:f2:ac:cf:4e:9f:85:9f:46:87:
99:6c:be:ab:d9:0f:c6:43:1d:da:98:87:28:ed:86:
a5:17:f5:c4:61:5f:79:17:6f:2c:18:2c:38:1b:b9:
b5:bc:2a:9e:63:8e:b9:87:2d:73:d4:fc:c6:e4:9f:
62:b6:f4:96:60:b5:c9:32:4b:a6:98:b0:db:bd:e8:
bd:7b:da:82:e0:1f:71:33:06:71:69:a8:e7:2f:27:
45:e4:bf:43:f2:5d:1f:6c:20:b2:f3:2c:c2:ee:5c:
5d:12:17:5f:b2:b4:e7:25:1b:4a:1b:eb:f6:44:dd:
65:3a:d8:29:7e:5a:a1:fa:24:64:88:67:35:ce:e2:
b8:b6:7d:ef:ef:53:f0:76:45:82:c1:8b:d0:46:d3:
04:32:40:0a:a4:86:95:2e:56:77:3a:e8:28:31:4b:
d1:11:74:41:a4:8e:48:15:11:f9:bb:d0:4c:e5:90:
58:fd:34:98:dd:78:a1:00:e0:14:0a:82:fd:9b:77:
81:c3:cf:22:3c:3d:af:f8:45:ac:52:0d:80:f6:ad:
6b:27:81:af:10:ca:64:b8:77:83:9d:2c:cd:5c:25:
65:d9:a6:1d:b6:52:fd:8e:1a:2e:4f:f3:2b:f3:0b:
7b:4f:20:e4:02:56:b1:0c:c7:2f:72:cc:e4:d7:07:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A4:0B:DF:CC:58:A2:45:3C:EF:3D:4B:39:D3:83:B8:E4:43:BF:68
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8649EB6CF30E11EDAD4C2045C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.202.192.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:78:10:89:5a:01:79:3d:ca:cd:91:cd:7c:d1:54:01:81:84:
6f:39:fc:db:57:53:4f:09:54:10:e5:53:75:64:e9:f7:60:b4:
24:9a:0b:e9:e2:a3:d2:28:a3:d6:8e:8b:4c:b3:e0:be:86:4e:
17:dd:21:66:4e:7b:b0:3c:bb:a5:91:05:88:a8:45:9d:00:67:
5d:d0:ab:b3:69:08:f8:0f:b9:df:6e:ee:a5:84:68:d8:ee:22:
02:3a:b2:69:67:7d:f6:e7:16:b5:ac:40:89:0d:38:0d:a7:04:
52:8b:01:4d:bd:3c:ab:ff:09:b7:30:fd:7b:05:16:8d:95:30:
2a:78:57:03:27:b0:f3:a7:bc:09:b1:fa:6b:d2:76:cf:0e:3d:
7b:32:45:02:14:d3:eb:0d:d9:06:ff:b1:89:f7:57:81:6b:98:
0e:29:26:45:a3:4b:b9:5c:54:74:e2:09:15:1d:fc:44:d4:06:
4f:72:de:be:d1:4f:f1:44:c4:9f:c0:39:a5:f8:3f:5a:05:d4:
c3:78:9c:00:08:fb:da:d7:2d:38:3d:8f:d3:01:8c:eb:4d:28:
9f:d8:7f:2c:79:3a:f7:6b:44:00:7e:20:12:2a:b7:fa:59:9d:
dc:2e:aa:56:1d:10:24:cf:ff:cd:3e:ac:44:a1:54:c0:11:b5:
87:e3:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:31:47 2026 by rpki-client