
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1976F5D2620311F0815B9187C4F9AE02.roa
File: 1976F5D2620311F0815B9187C4F9AE02.roa (raw, json)
Hash identifier: t5L8gGPk2L+ML5RLUAZp5+d2I+P5Q9Tj0J951qXGAPE=
Subject key identifier: 83:25:D4:A0:0E:FC:74:93:46:6F:87:C1:06:A8:EA:2F:60:D4:06:59
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30CA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1976F5D2620311F0815B9187C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:17:03 +0000
ROA not before: Mon 06 Jul 2026 16:17:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136284
IP address blocks: 165.99.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12490 (0x30ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:17:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd4ff-a833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:44:f2:7d:2c:d1:e2:80:c7:58:eb:28:2b:
5e:c9:29:f5:5a:4b:db:33:27:05:20:a8:86:9b:db:
2f:1c:b6:ea:93:2b:90:ae:b6:69:91:fa:c0:10:55:
52:a7:e9:72:d5:76:39:62:d6:6c:d5:08:bb:a0:1a:
aa:b6:02:05:cb:90:86:e5:8e:aa:fa:39:25:4a:24:
23:51:d0:c3:32:9a:fd:37:bb:99:47:63:6c:c8:12:
c1:d7:00:26:15:7b:2f:ec:25:70:b5:bf:2a:ac:28:
2a:06:df:ff:8a:8a:44:e5:ce:72:09:df:b4:1a:0f:
06:c3:0e:88:f1:62:77:4e:51:59:55:b2:88:42:01:
f5:d5:c7:52:65:6f:3a:90:35:f4:02:f8:78:63:ca:
de:15:35:84:e4:cf:bc:2a:66:87:a7:18:17:c1:01:
98:e8:61:71:66:9c:72:88:8e:07:d4:8f:9f:6d:e5:
33:a1:fa:a2:3f:d8:bd:6a:3f:22:d3:42:a1:19:a1:
b0:69:a7:00:71:c4:fe:a5:d3:e0:18:b6:a3:1c:79:
10:df:e2:d1:3a:56:5c:be:6d:b0:25:85:d4:ad:83:
ed:fb:d8:b2:dc:df:5d:7f:fe:8f:99:40:1e:c2:5b:
8f:ac:52:82:a6:23:9f:eb:9c:a8:25:f3:17:1f:59:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:25:D4:A0:0E:FC:74:93:46:6F:87:C1:06:A8:EA:2F:60:D4:06:59
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1976F5D2620311F0815B9187C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.8.0/24
Signature Algorithm: sha256WithRSAEncryption
43:cd:e3:0b:ad:62:7f:2e:4b:ff:95:a8:93:ae:0f:6d:f8:c1:
9f:ef:7b:a1:a7:ce:e7:cd:43:a3:79:dd:66:06:cf:af:b4:de:
c2:a8:6d:07:8a:b7:09:c7:77:24:88:10:27:f6:0a:17:73:71:
c0:d2:84:87:ea:a3:ee:32:c8:f0:8d:9a:55:55:5e:21:62:c7:
6d:3c:2a:22:69:66:1f:81:1b:82:82:79:da:60:8e:7f:86:b8:
18:99:87:b0:56:ac:3c:dd:d9:5d:38:45:7b:82:57:40:f3:bc:
5b:21:fd:71:ec:b0:98:6d:25:3d:89:08:2f:e5:c8:d2:48:97:
40:75:6c:8a:9b:48:11:96:ea:28:ed:36:0c:ad:e8:5d:5e:6a:
07:48:b6:aa:dc:97:aa:4c:e7:f5:93:41:43:27:e7:f9:28:8d:
e4:05:8f:61:f6:21:69:59:d3:98:2f:47:52:4a:b8:1b:5c:fb:
45:cd:81:cf:3b:88:dc:f0:7e:cc:11:5d:eb:04:5b:79:63:0a:
50:35:a2:8b:f3:02:ab:e4:ee:8c:ba:f1:6d:af:d9:76:26:22:
88:8a:e4:86:34:98:be:54:7d:bd:14:fb:bc:37:33:02:fb:71:
f0:e6:5d:4e:0e:c5:fa:ba:78:97:0a:bb:6e:8b:3d:43:05:0b:
f4:91:b0:46
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYxNzAzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDRmZi1hODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo6BE8n0s0eKAx1jrKCteySn1WkvbMycFIKiGm9svHLbqkyuQrrZpkfrAEFVS
p+ly1XY5YtZs1Qi7oBqqtgIFy5CG5Y6q+jklSiQjUdDDMpr9N7uZR2NsyBLB1wAm
FXsv7CVwtb8qrCgqBt//iopE5c5yCd+0Gg8Gww6I8WJ3TlFZVbKIQgH11cdSZW86
kDX0Avh4Y8reFTWE5M+8KmaHpxgXwQGY6GFxZpxyiI4H1I+fbeUzofqiP9i9aj8i
00KhGaGwaacAccT+pdPgGLajHHkQ3+LROlZcvm2wJYXUrYPt+9iy3N9df/6PmUAe
wluPrFKCpiOf65yoJfMXH1nAOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIMl1KAO
/HSTRm+HwQao6i9g1AZZMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTk3NkY1RDI2
MjAzMTFGMDgxNUI5MTg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWMIMA0GCSqGSIb3DQEBCwUAA4IBAQBDzeMLrWJ/Lkv/laiTrg9t
+MGf73uhp87nzUOjed1mBs+vtN7CqG0HircJx3ckiBAn9goXc3HA0oSH6qPuMsjw
jZpVVV4hYsdtPCoiaWYfgRuCgnnaYI5/hrgYmYewVqw83dldOEV7gldA87xbIf1x
7LCYbSU9iQgv5cjSSJdAdWyKm0gRluoo7TYMrehdXmoHSLaq3JeqTOf1k0FDJ+f5
KI3kBY9h9iFpWdOYL0dSSrgbXPtFzYHPO4jc8H7MEV3rBFt5YwpQNaKL8wKr5O6M
uvFtr9l2JiKIiuSGNJi+VH29FPu8NzMC+3Hw5l1ODsX6uniXCrtuiz1DBQv0kbBG
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:26 2026 by rpki-client