
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/13470B1A8A5D11F1831FA6813B11F970.roa
File: 13470B1A8A5D11F1831FA6813B11F970.roa (raw, json)
Hash identifier: KTWKvrQIcAJhvdnwPkuYb68Uex7MkjqQ3SocdV59zYA=
Subject key identifier: CD:77:85:10:6F:C5:0A:49:E9:68:7D:39:F8:FC:82:27:2F:9C:DB:63
Certificate issuer: /CN=A919A43E/serialNumber=399C87253E54ED6DE3770E55746466661ACED5CD
Certificate serial: 03
Authority key identifier: 39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/13470B1A8A5D11F1831FA6813B11F970.roa
Signing time: Tue 28 Jul 2026 08:19:39 +0000
ROA not before: Tue 28 Jul 2026 08:19:38 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154767
IP address blocks: 160.236.180.0/23 maxlen: 23
160.236.180.0/24 maxlen: 24
160.236.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl
rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 08:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A43E, serialNumber=399C87253E54ED6DE3770E55746466661ACED5CD
Validity
Not Before: Jul 28 08:19:38 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a68661a-6d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:25:ed:60:0a:83:ac:49:5e:bd:b2:84:f5:
a6:51:31:69:21:ec:77:93:1f:48:bf:9b:32:25:c4:
2b:22:5c:62:8e:49:f4:92:47:0d:ad:10:9e:a9:2a:
bd:91:0f:5d:83:90:aa:64:83:09:78:f5:a8:47:69:
2d:97:a1:74:4d:f2:aa:63:0f:15:5a:20:59:7d:d1:
f2:df:cc:2f:46:2a:74:07:42:b4:09:8a:18:c2:9d:
90:77:b5:ea:71:a0:34:19:d9:db:65:6a:f3:87:00:
0c:ec:f6:f0:c9:59:88:23:c0:ae:c7:1f:25:74:dd:
57:f9:67:70:0a:56:d8:70:08:89:43:5e:2b:8d:82:
34:e1:41:af:ba:e4:69:81:fd:84:ee:3c:89:d5:23:
56:2f:d7:84:d4:41:73:4a:1a:7e:94:2c:99:7d:03:
c9:7d:b8:2f:e3:0e:04:bc:d6:de:8c:0a:03:a3:35:
82:e6:41:13:13:56:52:30:76:e1:21:5e:1e:2b:82:
c0:9f:1d:12:8d:1b:b1:ac:f5:3e:53:12:22:4a:bb:
09:c1:cf:66:0a:04:17:cc:69:73:6a:b3:a9:bb:02:
5e:9e:cd:67:d6:95:0d:ec:08:e3:f5:0a:a3:dc:11:
75:99:e5:53:44:ec:40:d6:4c:fc:86:f3:ff:df:94:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:77:85:10:6F:C5:0A:49:E9:68:7D:39:F8:FC:82:27:2F:9C:DB:63
X509v3 Authority Key Identifier:
keyid:39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/13470B1A8A5D11F1831FA6813B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.180.0/23
Signature Algorithm: sha256WithRSAEncryption
02:5a:a2:fc:8d:c1:be:ff:50:f9:39:1b:ad:9f:d2:dd:e1:e7:
bb:37:6b:70:8a:fd:63:65:5a:c6:3c:a2:64:8e:c4:c8:74:2e:
01:ca:b7:24:05:36:51:cc:c1:3d:40:a7:02:11:8b:a6:dd:fa:
4a:d7:61:a6:25:6e:6f:b7:9e:44:8e:ee:1e:16:34:41:5d:3f:
31:8b:18:62:57:68:8a:dd:6b:aa:cf:7d:52:b6:f5:86:b7:7b:
b7:44:72:43:85:6f:48:76:f7:4d:36:d1:1a:14:1f:6f:5b:72:
5e:b0:91:ae:01:66:09:d2:4a:db:ad:52:b0:6c:15:ee:4f:8f:
b1:59:42:da:f1:9d:f6:8d:0f:e2:fc:8a:65:5e:3f:4a:a6:5c:
6b:c3:c9:b2:15:07:84:98:ca:78:6f:9d:e7:39:f1:ef:b8:b5:
0c:67:5f:0a:98:ea:af:f9:88:89:47:20:3b:09:1f:5c:55:8d:
ba:d5:82:26:e7:ac:0f:4f:55:b6:1b:70:d7:c0:86:b0:4a:6f:
23:29:3a:7c:96:8f:70:16:32:e3:25:e0:77:5b:1b:b7:53:2d:
b4:5e:29:50:7a:c4:60:5e:09:e9:fe:f4:e4:51:53:4b:6f:c6:
89:76:23:82:75:96:2c:28:2d:f9:74:72:82:3f:7b:c5:5a:e6:
59:73:21:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:51:37 2026 by rpki-client