
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/9CAF31CA5D8111F0A04DD550C4F9AE02.roa
File: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (raw, json)
Hash identifier: QL6KSZOWPh1C+zrm842UFBIzEB0gpz15bOD/UGoBYYM=
Subject key identifier: 8B:E9:5F:34:19:C2:AF:17:54:6F:DF:B7:56:E3:DE:88:8C:A2:53:FF
Certificate issuer: /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Certificate serial: 7F
Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/9CAF31CA5D8111F0A04DD550C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:23:07 +0000
ROA not before: Thu 10 Jul 2025 11:32:51 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 149486
IP address blocks: 160.30.16.0/24 maxlen: 24
160.30.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Validity
Not Before: Jul 10 11:32:51 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58f3b-9435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0a:f4:a5:e7:e9:ac:2a:cc:b3:b6:41:77:4b:
b4:92:01:95:91:9b:63:b6:4c:ff:bf:1d:9b:60:c5:
07:03:2c:31:e0:d1:0d:23:35:d9:91:44:80:5b:a4:
fb:cc:6e:5d:be:c1:0b:bd:cc:f1:b2:8c:8a:e6:a1:
c1:4e:40:4b:f4:2e:4f:f1:e8:b2:12:c1:e8:52:f0:
43:9d:8a:b7:07:26:7b:d0:bd:e2:41:05:62:89:a7:
97:27:3c:e1:96:46:25:a0:7d:48:3f:0f:08:f9:35:
ec:d0:6b:46:94:7f:f6:ac:71:a7:1c:7e:f8:f4:63:
ae:98:2f:16:7e:de:3b:ea:bb:9a:08:58:a9:9b:27:
d8:1c:0c:85:ce:15:93:fa:7f:49:2c:e6:22:0d:9d:
66:52:8e:ad:ed:f3:3d:82:1e:43:4e:ba:11:5d:f6:
03:2b:e4:bc:8d:4a:7b:1d:2f:4c:76:e2:e0:53:46:
e1:59:81:13:4b:6e:2b:77:ac:43:ce:dc:70:28:82:
d0:79:62:ed:9b:6f:41:2a:12:a9:b5:88:37:68:3a:
08:cd:a0:28:cb:33:68:57:4d:d3:20:4b:8d:2a:7f:
a7:95:1a:c3:f9:1b:47:eb:92:16:a6:fd:f5:45:48:
f7:70:bb:06:e1:19:7b:9f:03:86:e0:b5:77:a5:18:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E9:5F:34:19:C2:AF:17:54:6F:DF:B7:56:E3:DE:88:8C:A2:53:FF
X509v3 Authority Key Identifier:
keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/9CAF31CA5D8111F0A04DD550C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.16.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f9:54:ee:4b:f1:4e:79:86:eb:e8:51:b8:0a:f2:fa:72:51:
33:d1:b7:5e:8a:0f:a6:68:bc:da:59:31:ed:66:c5:8f:ff:8b:
a4:aa:99:ed:a0:b5:59:6f:85:3f:78:22:56:d5:7a:5e:68:39:
da:b5:ae:a6:2f:20:f8:41:d6:4d:f6:5f:8b:43:38:5d:30:6e:
37:ff:e3:78:fb:10:88:38:a4:9d:ae:51:45:cc:cb:12:e8:dd:
7f:9d:d3:04:c0:af:04:0a:97:d7:c6:89:33:a7:21:31:09:3f:
20:e4:d7:ec:86:36:52:5b:3e:aa:85:fb:6e:3c:26:2d:2d:fa:
5a:e0:b6:c1:cd:68:dc:f4:92:d1:74:94:13:71:9b:42:82:a6:
dc:db:ef:af:43:7b:13:3b:7f:91:fd:bf:d4:0e:44:b3:e8:4f:
3f:4d:b7:ec:91:58:4d:41:9e:b5:4c:00:5a:b2:c2:5c:05:7e:
fe:9f:6d:df:d6:9f:56:c2:2a:83:fe:96:c9:45:db:52:13:30:
7c:56:27:03:b5:bd:7b:ff:df:e9:b1:ec:3c:71:cd:78:01:71:
98:fa:d3:6c:6b:97:c0:58:9d:dd:a6:0d:b2:fc:4c:80:ba:8c:
ca:0a:7f:62:e8:fe:e4:4e:07:78:93:f9:a0:da:24:65:a6:07:
c8:7e:e4:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:22 2026 by rpki-client