
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2955377658B611F0B105E156C4F9AE02.roa
File: 2955377658B611F0B105E156C4F9AE02.roa (raw, json)
Hash identifier: aBxF9r1RGv9m88SxIbir8JPHYqbBX8yv58fk4kJvF7g=
Subject key identifier: A1:5B:D1:D4:DC:62:CE:FE:FD:C4:86:7B:42:E6:48:A5:6A:B8:E6:B4
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 315B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2955377658B611F0B105E156C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:21:50 +0000
ROA not before: Mon 06 Jul 2026 16:21:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152298
IP address blocks: 165.101.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12635 (0x315b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:21:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd61e-9af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:5e:7c:99:0c:0b:68:87:97:c8:ed:f2:7b:
cf:90:40:06:c3:a9:c6:54:0f:83:32:79:1b:6c:8c:
4e:2f:31:fa:57:83:76:11:fa:6b:89:2e:4f:a5:84:
82:a8:7b:62:c2:cd:af:31:09:bf:ab:ea:32:ef:e7:
2a:a6:6c:e1:54:b6:55:90:7e:36:8d:e5:96:aa:70:
da:a7:8a:0e:df:0a:e7:0b:b1:2b:50:13:1e:e8:63:
3d:8c:f8:e1:7e:82:65:90:f1:75:0b:4c:35:33:78:
31:b2:0d:46:70:bc:3b:36:71:84:09:ad:65:ad:dc:
9f:c2:6a:6d:27:dd:d0:d6:b2:c9:19:65:f3:8c:e2:
53:b7:04:8e:8d:36:d7:f9:b6:11:ae:90:52:fe:0a:
37:c8:83:4a:25:17:b1:8b:dd:ab:40:63:31:5a:be:
b5:b7:6c:ab:40:9a:54:9a:6b:41:74:94:92:8b:d4:
8c:ad:4a:7d:58:80:3e:0b:13:22:22:15:97:01:d9:
e5:c7:86:e0:64:57:a8:9d:e5:6b:5a:5e:a2:5c:f2:
bb:6c:7b:cc:1d:39:0f:f0:3f:6f:e4:ce:dc:12:4c:
e4:08:79:70:d9:33:15:6c:22:7b:85:aa:71:c3:fc:
3b:26:45:36:43:78:3a:16:78:bc:55:53:c6:fc:b5:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5B:D1:D4:DC:62:CE:FE:FD:C4:86:7B:42:E6:48:A5:6A:B8:E6:B4
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2955377658B611F0B105E156C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.104.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:0b:9d:e6:f9:21:2a:fd:49:f3:76:de:b0:0e:d7:17:f6:ef:
45:a5:83:41:57:ce:99:e3:9d:16:23:aa:14:3f:ac:ab:da:da:
21:43:67:6f:b9:d0:b5:cb:06:ac:c4:fa:f7:c4:78:85:d7:cf:
13:d4:48:d6:ab:20:5e:e2:82:51:8f:f7:f9:29:94:c1:63:89:
74:5d:5e:83:66:6d:fa:72:55:d4:c2:18:fd:b5:21:f9:65:6a:
2f:e7:6c:48:2d:85:41:a6:1c:f1:23:3d:08:b8:19:24:d0:df:
eb:6e:48:df:8f:33:b6:07:ff:ed:5b:40:d1:51:a7:fd:7a:11:
03:c8:86:44:69:f4:aa:04:a3:d1:7e:76:5f:4d:6a:f7:02:30:
32:ee:60:fb:ab:15:1e:4a:e5:77:0f:32:1a:43:27:90:a1:f6:
31:3b:8f:f9:0b:3c:5a:04:50:a3:71:2f:b6:f1:a1:d9:9e:6d:
ff:c8:17:b5:f7:15:47:bf:88:07:12:a4:9f:d4:41:10:de:da:
12:a7:88:67:e7:97:13:50:66:b0:0d:84:1b:ba:93:cc:e8:c4:
f6:3e:db:0e:59:3b:8b:1e:8f:54:b4:08:1a:10:9f:97:9c:50:
53:d8:56:f1:1d:1b:f4:a0:08:d2:21:d2:5e:9c:57:44:25:86:
3d:e7:42:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:37 2026 by rpki-client