
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/CBEBC99A622B11F09AC60265C4F9AE02.roa
File: CBEBC99A622B11F09AC60265C4F9AE02.roa (raw, json)
Hash identifier: EriMxkKUBJx5Xw15e8N5dYbbr/AUbZc0WvM0QC4DQFk=
Subject key identifier: D1:F2:5B:E2:B5:7B:EA:BC:05:61:93:8C:0F:4A:55:F6:8A:F5:3C:20
Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Certificate serial: 99
Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/CBEBC99A622B11F09AC60265C4F9AE02.roa
Signing time: Tue 21 Apr 2026 06:54:27 +0000
ROA not before: Tue 21 Apr 2026 06:54:27 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 135158
IP address blocks: 160.250.174.0/24 maxlen: 24
160.250.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Validity
Not Before: Apr 21 06:54:27 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69e71f23-f74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:5c:3b:5f:32:9e:09:35:3c:94:98:31:a1:
d0:ec:84:6d:a3:f4:95:3e:c9:6e:ef:55:82:e1:3a:
49:0b:f2:71:52:66:c2:4c:8d:9e:b1:ee:f8:b4:63:
01:d9:33:fb:f6:5d:46:7f:78:b0:49:89:32:4b:fb:
89:87:ad:f9:5d:8b:4f:7b:1c:e8:ab:6f:dc:ed:d9:
69:b1:0b:64:cb:64:fc:56:7c:50:d3:73:9d:79:8d:
90:cc:b7:0f:b9:ba:19:35:a6:d4:d0:b8:10:ff:d0:
48:32:61:78:f1:27:44:e8:1d:98:c2:4a:fb:12:c5:
9a:83:4f:6d:25:55:6d:50:54:64:0d:dc:c7:b1:68:
8c:cb:ca:46:b5:c7:58:13:46:fa:3b:08:dc:2d:05:
ab:28:41:5c:52:2b:8a:1f:26:15:a6:15:63:86:55:
b6:a1:59:51:e6:6b:7d:2b:18:d5:4d:f5:cd:16:ac:
53:b8:16:da:c1:88:f5:84:91:d3:89:8a:bc:36:36:
82:54:c4:1a:1a:84:af:f5:cd:97:2f:ce:cf:14:fb:
72:98:62:80:91:9e:92:88:55:f8:a1:98:ee:47:68:
00:32:9d:28:8c:9c:f0:b8:e0:8c:f9:cc:e9:65:6b:
5d:f2:c3:a3:74:a0:d9:20:78:a4:7f:1c:e4:b1:b6:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F2:5B:E2:B5:7B:EA:BC:05:61:93:8C:0F:4A:55:F6:8A:F5:3C:20
X509v3 Authority Key Identifier:
keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/CBEBC99A622B11F09AC60265C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.174.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:2d:dc:e3:28:3b:e4:17:e9:5a:77:62:e8:b2:f0:bb:54:0b:
31:7a:9f:f1:6c:5c:57:f8:aa:f3:b5:19:50:80:42:d7:2d:29:
59:6c:d3:2e:ec:33:b2:cc:03:bf:a6:bf:3c:6e:14:3b:b9:ba:
1d:01:27:f3:b7:ec:b3:82:3f:8f:d5:e9:8c:a1:31:d0:c0:9c:
4a:29:09:3d:74:56:b1:b4:25:bc:3f:b3:8f:7f:02:ac:5f:8b:
e9:c7:d4:c0:8c:0d:ea:ef:9f:15:27:88:fa:5c:cf:be:d6:40:
e3:00:16:db:ab:d5:7c:aa:ef:a0:24:bc:b9:6d:37:3e:9e:0f:
e8:da:7e:ed:cb:04:4f:21:12:6c:df:94:dc:e2:42:c9:84:90:
6e:af:c4:75:3f:64:58:3c:28:35:41:3c:9b:cd:a0:3b:0e:e4:
bc:1b:3c:7d:bc:77:e9:2f:16:45:9a:c1:9f:99:38:57:c7:11:
0a:78:c0:7f:f2:fd:d2:7b:03:87:61:69:ef:3c:20:25:a5:1b:
4a:ff:fa:9d:6c:14:da:9f:9c:7f:92:f8:5b:9a:2f:10:f3:2c:
3b:0e:c8:74:59:ba:1f:a5:0f:22:d2:bd:18:d7:93:4f:4a:09:
3b:38:a0:da:e6:00:27:18:ab:bb:fa:2d:03:16:7a:b2:af:e2:
22:ea:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:55 2026 by rpki-client