
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CF264E6FCD211F0AE068C126C6F56BC.roa
File: 3CF264E6FCD211F0AE068C126C6F56BC.roa (raw, json)
Hash identifier: lHv8YpL3l+KIgLti3ZBVPTPszapjGT4aNuRWlAPrQuo=
Subject key identifier: 1E:C4:7D:E0:AE:18:C3:3B:F7:F7:F7:E9:54:62:E5:21:8B:CB:DA:3A
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2E77
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CF264E6FCD211F0AE068C126C6F56BC.roa
Signing time: Sun 31 May 2026 16:18:08 +0000
ROA not before: Sun 31 May 2026 16:18:08 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133591
IP address blocks: 165.99.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11895 (0x2e77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:18:08 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5f40-1493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:b7:f4:27:85:e3:41:69:b2:06:9b:8c:1f:
f0:13:7a:ad:3e:6e:db:00:b7:96:ff:7e:bf:54:37:
86:72:c0:0a:0b:0b:d3:be:70:82:6f:87:cf:34:76:
1f:48:19:00:2e:91:a5:b8:89:a5:6a:fd:67:66:0d:
fc:02:5d:e4:be:ca:6d:cc:be:77:1b:9f:3f:a9:ab:
4f:9b:36:ca:73:be:e3:6f:e6:75:d8:5b:9f:6b:6e:
53:1b:7a:7e:d3:5f:b7:b7:6a:d8:fc:95:de:18:a0:
d0:6a:55:0d:96:2d:0b:6b:a3:9f:b8:23:83:27:22:
ba:fa:04:42:ac:35:ec:70:f3:dc:67:01:3b:8c:47:
a0:36:a1:5c:63:27:63:1b:e7:59:d6:0a:b2:c6:b6:
bd:e7:01:ab:0f:54:f4:34:36:e9:11:b7:ee:4e:5b:
f4:24:3b:dd:f2:ae:26:40:01:b9:ca:8a:95:07:45:
29:6a:88:b0:d8:81:04:f3:62:b9:65:c9:f1:f2:65:
30:65:55:a2:a5:1a:17:22:43:bb:26:d4:7a:58:82:
c1:af:48:76:09:af:59:85:de:8f:ae:12:ab:34:fc:
2d:cf:d6:45:b0:1d:94:29:2b:66:50:21:d8:9a:ee:
21:49:3f:6d:70:61:9d:3f:25:1e:3d:c1:20:5d:13:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C4:7D:E0:AE:18:C3:3B:F7:F7:F7:E9:54:62:E5:21:8B:CB:DA:3A
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CF264E6FCD211F0AE068C126C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:06:4d:3d:84:bb:06:a1:c0:5c:e9:10:17:f3:e5:8d:e9:f1:
44:e4:2c:fe:21:ac:67:d2:a9:1b:a1:d3:c7:93:9e:43:c8:69:
8c:a8:ab:8e:1b:f5:ae:86:4a:24:1d:6b:40:1f:55:53:c8:6e:
17:3a:45:d5:3c:40:83:eb:b0:cf:b1:fb:b5:f2:0c:e5:7a:4d:
a9:d6:b6:a6:73:54:0c:71:ef:b6:45:5e:30:68:08:32:5c:fe:
39:08:38:2c:5c:66:9a:cb:92:7c:f6:9d:85:d9:db:96:28:43:
90:0b:ed:a7:69:55:36:89:b3:fd:f4:17:0e:4a:ca:a0:27:1a:
9a:ba:37:8d:b6:aa:2c:bd:0c:f3:c3:81:33:82:d6:67:7a:f4:
0d:87:c3:d8:b8:2b:de:d7:9d:65:14:58:a7:72:07:14:81:20:
8b:1e:cc:af:16:c2:46:82:e2:a6:a0:54:d4:a7:c7:9d:ef:5d:
90:ed:21:52:c3:02:f8:90:2b:17:b7:f0:68:7e:ea:65:dc:40:
a2:88:c1:8b:6a:97:1c:cf:cb:28:10:35:05:4a:17:27:7a:d2:
0d:46:2c:cd:55:db:e8:62:f7:86:5c:35:a3:6f:e8:af:dc:24:
1a:c5:07:ec:ff:13:2d:88:85:ee:43:bc:87:4d:3c:c3:fa:cb:
8c:43:15:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:41 2026 by rpki-client