
$ rpki-client -vvf rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/CDCAE45AEFA011F0A40A3DE8696F56BC.roa
File: CDCAE45AEFA011F0A40A3DE8696F56BC.roa (raw, json)
Hash identifier: iKMOZndSspUWn/Q2dD9wJzioM8CavlEGjQksPJ9SKPs=
Subject key identifier: 76:4B:68:1B:A9:4F:B3:D1:98:71:35:EC:7A:E0:E4:E5:74:24:76:A8
Certificate issuer: /CN=A913270F/serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Certificate serial: 29
Authority key identifier: 75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/CDCAE45AEFA011F0A40A3DE8696F56BC.roa
Signing time: Tue 17 Mar 2026 07:44:42 +0000
ROA not before: Tue 17 Mar 2026 07:44:42 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 38486
IP address blocks: 160.30.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913270F, serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Validity
Not Before: Mar 17 07:44:42 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b9066a-1bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:13:42:b0:e6:81:74:9f:18:08:e3:cf:98:
70:15:f7:d1:53:59:7c:4d:aa:12:bb:dc:a7:10:ae:
ed:bb:79:a9:c3:aa:b6:6c:be:a9:c0:40:9d:22:70:
7a:43:5a:e0:0d:a4:71:c8:e7:13:ad:f2:7e:d4:02:
e6:37:a2:53:43:a1:13:cd:28:81:38:38:2e:50:18:
67:6b:29:19:9a:a5:a6:61:96:61:4d:f2:48:45:4b:
b2:a6:84:b7:08:28:64:ce:f3:88:a6:b3:e7:86:bd:
7d:b7:55:fd:86:24:5a:cd:02:d8:d4:59:ff:02:bc:
c3:e9:62:3c:26:d5:1a:c2:a7:73:c6:e2:ee:ed:31:
5c:d8:01:25:ba:d9:94:b5:40:90:d3:b4:dc:e9:f7:
af:1d:ab:74:0c:db:61:83:de:c9:84:92:be:09:04:
64:99:ff:20:d4:ac:6b:3e:ef:d2:9e:19:81:dc:cc:
ef:4f:34:b0:fd:f2:30:52:e4:c2:d1:57:a7:a2:f5:
53:f4:b6:e1:64:5a:46:13:3e:4f:3c:7b:1d:3c:16:
22:5b:e0:78:a5:e3:7c:48:ca:3a:a8:e8:34:fc:52:
03:77:51:db:84:87:02:77:6a:2e:49:37:e6:46:2c:
45:f4:e6:83:5c:c7:d4:e9:6b:48:9f:5f:94:d3:13:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4B:68:1B:A9:4F:B3:D1:98:71:35:EC:7A:E0:E4:E5:74:24:76:A8
X509v3 Authority Key Identifier:
keyid:75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/CDCAE45AEFA011F0A40A3DE8696F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.94.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:6a:32:86:6e:2e:3e:b5:2e:dd:3c:fc:38:ea:33:9c:8f:0b:
65:96:e5:5d:b4:44:60:fb:e1:26:af:0f:41:18:fd:5c:f6:28:
5a:8c:cd:2f:85:c9:48:c4:3c:f9:54:83:f5:e0:15:df:b0:b0:
00:c8:86:25:e2:b3:0b:22:e9:3e:d2:21:1a:c3:89:fc:d7:e4:
ba:21:af:dc:fc:7b:13:2b:f3:81:52:6e:c9:4b:b3:6b:fc:93:
fb:64:fb:a7:e6:81:b8:90:11:98:57:4b:af:8c:bd:2b:50:0f:
25:08:bf:21:e2:1e:8b:e1:cf:c6:99:cf:58:c0:9f:9c:41:c2:
c9:b3:20:31:17:d4:3e:91:fd:0e:c1:e1:f5:c6:e2:5a:86:b1:
4e:a5:06:bb:16:84:2a:a0:a1:db:e7:54:42:fe:eb:f6:14:af:
fc:98:df:bf:c0:3e:e2:82:8e:0e:d2:df:a1:56:80:e9:9d:d4:
c7:31:87:0f:9e:ea:cc:a5:f3:8f:43:b0:37:ca:8f:aa:14:6e:
4c:14:5e:99:d9:f9:f2:c1:c9:ee:89:3a:83:fc:1c:2e:99:c3:
43:6b:4e:79:a4:dc:2c:11:04:13:d4:aa:f0:ec:db:da:16:71:
b4:29:7e:c4:01:f7:9e:90:88:10:f4:26:42:0d:e5:90:9a:d4:
f6:b1:40:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 27 07:48:20 2026 by rpki-client