
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/4002AE6236CF11F0AA705D26C4F9AE02.roa
File: 4002AE6236CF11F0AA705D26C4F9AE02.roa (raw, json)
Hash identifier: 6U2CgiUvlSZmVIxlf3rv78ibQxmJIaTJLFAkzr+rmKQ=
Subject key identifier: B6:6C:70:01:0A:9D:CB:28:07:FA:50:79:06:4B:54:18:B8:6C:53:2B
Certificate issuer: /CN=A912D71D/serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
Certificate serial: E6
Authority key identifier: 95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/4002AE6236CF11F0AA705D26C4F9AE02.roa
Signing time: Sat 01 Aug 2026 08:56:55 +0000
ROA not before: Sat 01 Aug 2026 08:56:55 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153181
IP address blocks: 160.30.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl
rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D71D, serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
Validity
Not Before: Aug 1 08:56:55 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6db4d6-eabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:8c:ec:32:e5:38:19:92:14:d8:f0:40:f1:
cd:5d:5f:ff:06:2c:09:a9:40:44:22:3a:72:8d:43:
2c:02:bc:1b:e8:d1:cc:76:2d:94:71:1d:bd:b1:bc:
8e:d4:f7:ec:5e:30:ac:b9:c4:0b:a1:9c:89:76:80:
2d:1b:24:e6:d2:e8:0b:b2:80:3a:d6:7e:af:66:d6:
25:79:66:e4:ca:56:8f:71:90:f1:39:83:a6:d7:5a:
64:80:10:51:a8:5d:ec:5e:fb:88:e5:58:c6:10:16:
26:b6:78:14:12:a4:ef:fd:61:b5:4e:a9:36:00:bc:
c3:bb:42:2f:6d:e6:d8:bf:01:97:88:0f:e7:6e:82:
76:49:3e:54:28:87:e2:45:8a:e7:5c:52:fb:10:95:
00:07:8c:9d:35:0b:69:88:71:26:09:db:6d:4c:ae:
77:56:b9:e1:35:a0:17:3c:48:b1:95:b5:df:cc:0c:
03:0e:f2:59:28:3b:86:e9:1e:e1:09:f0:8c:24:ca:
55:44:56:0e:49:47:2c:cc:e0:61:f0:e9:e6:00:15:
63:79:93:fb:be:fc:5f:f4:8d:d6:c9:b6:ed:28:9c:
ff:58:b8:33:61:79:c5:73:e1:63:c6:74:39:8c:6d:
9f:56:41:8a:65:1a:e7:11:a8:61:9f:8b:79:f7:70:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:70:01:0A:9D:CB:28:07:FA:50:79:06:4B:54:18:B8:6C:53:2B
X509v3 Authority Key Identifier:
keyid:95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/4002AE6236CF11F0AA705D26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.42.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:a5:26:b0:5f:b0:89:35:d3:ae:37:58:a8:ea:36:df:9d:d3:
65:76:df:ea:6e:46:7f:e8:93:97:69:f4:26:03:d9:31:16:39:
da:c0:1c:b5:d4:58:fc:67:08:88:03:7b:57:0b:80:07:2b:fe:
25:8e:2d:27:1c:28:fc:5d:f8:cc:59:79:09:1a:99:9c:ef:5a:
f1:40:e6:35:e4:f8:5d:20:95:fc:fa:ae:c9:27:34:d8:54:c8:
16:c2:f8:a4:5c:25:01:ca:48:5b:3d:d7:7c:a0:c4:a9:63:9e:
d1:61:48:41:9b:bf:94:1b:f0:ae:4f:eb:8d:17:fa:4b:97:2d:
32:72:1f:6d:8e:23:16:b6:a9:f4:e1:19:76:c0:66:01:84:57:
85:a2:e9:32:54:b5:91:02:14:15:cf:0c:22:5b:14:35:5e:7d:
ba:76:9d:b4:96:66:8e:1c:85:80:1e:1c:91:30:bd:e0:2a:58:
20:3c:83:33:07:9f:0d:65:d1:03:23:4d:a2:d8:05:46:90:05:
a7:95:59:7e:b1:f1:94:c2:3b:f6:db:58:ca:f1:aa:54:52:8a:
ec:5f:d6:a5:e0:d6:6b:c7:97:a2:77:6a:7b:bc:55:43:d8:f0:
58:b3:3f:d7:de:94:9f:64:ff:d3:10:0f:e8:99:17:bb:03:05:
d2:be:91:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:03:22 2026 by rpki-client