
$ rpki-client -vvf rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/7A696120859F11F1A3889AC758A30FBC.roa
File: 7A696120859F11F1A3889AC758A30FBC.roa (raw, json)
Hash identifier: KZV7RL/SmmvJe7/WlokymWjG4PkMAKi0QPN1OTzQtos=
Subject key identifier: 5F:7A:6C:6A:EF:2A:2B:6C:79:86:60:46:FF:C7:66:A5:3A:7D:11:D4
Certificate issuer: /CN=A914559B/serialNumber=972FD07FD1347A029D601704477BF3A64783A738
Certificate serial: 04
Authority key identifier: 97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/7A696120859F11F1A3889AC758A30FBC.roa
Signing time: Wed 22 Jul 2026 07:34:54 +0000
ROA not before: Wed 22 Jul 2026 07:34:54 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154749
IP address blocks: 160.236.66.0/23 maxlen: 23
160.236.66.0/24 maxlen: 24
160.236.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl
rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914559B, serialNumber=972FD07FD1347A029D601704477BF3A64783A738
Validity
Not Before: Jul 22 07:34:54 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a60729e-6169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:04:fc:96:22:ee:70:d7:b6:ef:32:ac:01:
3c:de:04:61:7b:d2:29:22:c1:ae:e0:f5:3e:0f:5f:
c9:de:b3:e4:6e:de:1b:38:55:d3:78:01:b6:87:c3:
18:3f:f1:b9:c3:6e:6e:ac:65:38:a7:a3:6a:98:5f:
ee:be:18:fc:5b:32:99:10:54:d7:e4:80:29:a7:08:
20:cc:d5:89:ee:4b:b7:f3:d8:1f:1d:c3:3d:7a:2d:
e6:9f:9c:08:e7:41:7d:3c:c4:48:0d:20:ca:f4:16:
58:7b:cd:07:fe:07:29:8d:7d:1f:df:a4:0b:bb:67:
b0:1b:70:5a:57:2d:fc:c7:54:0b:48:cc:b4:05:5a:
5a:e7:01:47:f3:5b:3c:d2:71:37:a8:2c:e8:37:3d:
64:40:56:b9:17:e8:47:26:0a:a0:ff:e2:ce:e3:6a:
ca:78:e8:d9:55:84:f6:06:3a:c7:2a:38:9c:ae:ef:
4d:74:9b:2f:ad:cc:28:5d:c0:f7:1b:8d:ba:24:8d:
ae:be:4b:4e:00:58:91:5f:3d:c4:27:6d:24:02:5e:
3b:03:7e:1c:9f:74:08:76:0c:be:0c:fb:a3:89:3b:
b3:be:c3:92:91:72:5d:9c:60:13:48:9d:4b:ce:1a:
0b:05:ed:bd:a5:b3:16:58:3b:ae:7d:36:8c:09:75:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7A:6C:6A:EF:2A:2B:6C:79:86:60:46:FF:C7:66:A5:3A:7D:11:D4
X509v3 Authority Key Identifier:
keyid:97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/7A696120859F11F1A3889AC758A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.66.0/23
Signature Algorithm: sha256WithRSAEncryption
90:49:4b:8d:99:9f:24:b9:ca:98:b9:c5:d7:21:0e:73:e3:6f:
70:d6:8e:9f:a9:b8:35:f0:8e:1f:5a:f4:6f:54:2a:66:00:13:
42:4a:db:cb:60:33:cf:42:66:ee:e3:d8:3a:49:a9:11:2c:50:
a5:d1:1f:22:17:96:dd:45:c0:30:f3:45:8a:46:f7:cc:16:d5:
03:01:b6:21:70:35:d6:f7:77:af:e7:70:df:fe:a9:74:af:f1:
5a:37:88:9f:fa:fb:71:28:ef:34:40:79:0b:b0:03:e1:69:63:
5f:01:67:59:26:07:8f:d0:8b:94:f2:2a:ec:1f:09:f8:fd:80:
99:e9:da:aa:4a:23:6c:de:fe:95:34:7a:6a:0f:c8:94:18:e4:
df:e9:42:98:10:b3:46:ea:0d:af:85:10:b6:d4:40:0f:2e:4b:
73:28:e3:d4:c1:01:2b:93:a5:93:92:1d:2d:7c:25:b2:48:e9:
54:05:08:13:ce:b2:28:ab:0a:21:7e:5f:30:39:f2:6d:1b:93:
a9:49:bb:2e:fb:ee:cb:d4:3d:4d:80:87:8e:57:62:27:20:d2:
9a:4a:56:a4:14:54:96:99:e2:ef:73:44:e7:e0:ab:c0:5f:d4:
26:79:9e:05:3e:94:50:6b:75:90:75:fb:21:b1:1c:48:f0:26:
8c:71:82:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:09:29 2026 by rpki-client