
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F70E660489EC11EF85E2D854C4F9AE02.roa
File: F70E660489EC11EF85E2D854C4F9AE02.roa (raw, json)
Hash identifier: tuGme2/ZqUjoKz6Uq1Nz6eicfOBId203tcaebi+Fnio=
Subject key identifier: 96:EE:31:5B:23:53:01:3E:AD:09:09:77:09:5F:59:15:48:53:5F:65
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2E00
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F70E660489EC11EF85E2D854C4F9AE02.roa
Signing time: Tue 12 May 2026 09:23:26 +0000
ROA not before: Tue 12 May 2026 09:23:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153250
IP address blocks: 160.187.80.0/23 maxlen: 24
161.248.224.0/24 maxlen: 24
161.248.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11776 (0x2e00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 12 09:23:26 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a02f18e-758f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:75:eb:1b:ec:9c:6f:3a:26:b7:43:37:08:
33:97:5d:c1:fe:80:a2:d1:1c:67:e0:e2:b7:52:95:
24:4c:12:79:0c:59:aa:52:98:da:df:98:9e:50:d4:
f4:4c:17:07:37:e2:bb:2f:fe:5a:ea:7f:63:2b:b1:
da:e7:77:e6:f7:bc:9d:18:23:82:b7:a6:e9:cc:ea:
1d:36:15:3a:a4:81:bd:03:9d:35:98:14:ab:43:d9:
03:70:9d:88:12:72:7b:2c:e8:ac:f9:a4:29:4b:8f:
4e:01:2c:68:a7:19:e6:ed:ad:73:ac:af:ba:42:34:
a5:61:ee:5d:25:76:ee:78:5d:d0:1a:b1:50:54:28:
dc:3e:62:e9:2b:44:e8:99:55:d7:e6:cc:ef:00:de:
19:47:55:1d:b5:a0:c4:32:c7:3c:78:c2:8a:15:db:
c5:b6:43:96:bb:b6:7b:b2:72:30:3e:97:4e:b7:e6:
07:1d:77:af:e8:91:93:2b:6d:30:6e:91:72:c1:df:
3a:65:0e:5a:9b:8c:21:2a:34:de:bf:01:5a:e8:88:
1d:43:53:a0:11:b2:8a:dd:ca:28:b4:1f:07:f2:80:
81:9c:ec:79:80:55:2b:59:cc:86:47:41:c0:fa:94:
f3:e0:89:86:41:5b:29:f9:7f:a4:32:eb:4e:13:80:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EE:31:5B:23:53:01:3E:AD:09:09:77:09:5F:59:15:48:53:5F:65
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F70E660489EC11EF85E2D854C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.80.0/23
161.248.224.0/23
Signature Algorithm: sha256WithRSAEncryption
62:18:e7:5e:66:b1:e1:2f:a3:af:fd:64:63:b0:6d:1b:6e:d7:
6d:cc:e0:e2:8d:c8:4d:83:58:78:48:32:4a:29:38:dd:f1:cd:
96:88:81:ee:5b:d0:6d:b1:ee:f6:4b:be:ac:82:6c:83:89:44:
32:01:22:c9:b0:30:98:d6:33:36:27:26:d7:b9:8a:02:bb:89:
da:e5:41:45:42:53:c9:3d:ae:9d:8a:7f:30:dc:7a:aa:50:96:
8c:9c:a4:16:e0:4f:72:87:79:af:92:ea:2f:6a:95:4b:eb:a7:
1e:ba:e4:e8:6c:da:c2:34:ef:ee:78:e7:6f:63:71:68:0b:c9:
89:b4:1e:a7:b7:80:99:48:d2:4f:e3:96:92:bf:2e:43:c1:4f:
3a:34:f3:f3:db:79:6a:b8:ff:c7:3e:ef:33:b0:26:19:bc:2e:
d4:96:5e:d9:5f:fe:b2:7e:63:80:a3:f8:3d:0e:da:9f:60:fc:
10:13:82:b4:b8:7e:c3:4e:be:eb:f4:19:9b:a6:77:fc:c2:1d:
12:95:b1:82:d9:19:99:6d:f6:a0:bf:e1:73:cc:13:73:b1:d6:
ca:6e:5a:ad:0e:fc:24:29:94:5b:35:59:63:27:ff:04:12:a0:
c0:3f:e4:1a:28:00:b6:53:12:b5:78:8b:de:a3:d7:9c:0d:61:
1d:24:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:07 2026 by rpki-client