
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CF264E6FCD211F0AE068C126C6F56BC.roa
File: 3CF264E6FCD211F0AE068C126C6F56BC.roa (raw, json)
Hash identifier: 9zS+4vRU8hi7cEDjSZkAqGIMCDIKlvvBsJKpBWT1+CQ=
Subject key identifier: BD:A4:56:39:56:49:C7:18:CC:B3:9E:90:1C:DB:4E:C2:B5:53:47:D1
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 309C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CF264E6FCD211F0AE068C126C6F56BC.roa
Signing time: Mon 06 Jul 2026 16:15:30 +0000
ROA not before: Mon 06 Jul 2026 16:15:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133591
IP address blocks: 165.99.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12444 (0x309c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:15:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd4a2-0d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:7c:39:4f:a0:83:c5:ba:59:80:22:93:08:
b4:14:c5:ce:8f:c6:31:d0:b0:d0:17:23:b4:ab:10:
45:0e:e8:ad:f8:9b:bd:f5:28:3f:5e:b4:2e:18:0c:
a0:14:2e:9e:00:b1:6d:6f:51:16:b1:df:48:76:fc:
17:8c:44:91:e0:df:2b:1b:e7:af:3c:f4:94:7f:c3:
95:b4:47:54:7f:e8:82:f2:a3:51:84:0b:e9:9f:a2:
52:61:a4:a3:66:f4:a5:b5:84:d2:1e:bc:5a:53:a0:
9c:1e:eb:95:eb:e6:69:d4:7d:1d:5a:d3:43:e1:5f:
9a:ff:bc:e8:9d:43:79:23:e0:c5:ec:6b:45:92:20:
f6:44:d4:bb:5f:fe:d2:21:03:cc:e5:c0:00:14:fd:
3b:5e:e4:c9:86:3d:4a:b8:63:4a:09:76:ab:a8:b5:
67:f8:b0:55:0d:a7:3e:50:54:3f:63:65:67:48:ed:
5f:f3:44:75:03:7c:5e:78:f9:f6:e1:06:d6:55:6c:
64:4f:cd:59:2d:03:35:cd:b4:fe:06:e7:e7:0f:db:
fb:77:5b:4d:de:28:cf:77:d2:92:ae:12:87:80:23:
3d:9f:8d:1b:ca:1c:fb:d8:a5:43:67:30:af:ad:5c:
e2:82:67:44:c9:56:97:99:5c:5a:15:e6:3a:e0:ab:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A4:56:39:56:49:C7:18:CC:B3:9E:90:1C:DB:4E:C2:B5:53:47:D1
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CF264E6FCD211F0AE068C126C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.133.0/24
Signature Algorithm: sha256WithRSAEncryption
40:53:80:aa:79:be:5c:2d:9b:4b:0b:0d:25:86:f4:95:81:43:
e1:91:e5:78:6c:87:cc:57:b1:60:c0:71:a6:3e:09:b6:a5:49:
2e:41:b0:4b:16:3f:d1:2f:eb:fd:39:16:46:86:b1:30:85:82:
d4:56:31:91:fe:06:29:1e:8e:f9:4e:4b:ef:83:55:ee:c6:e6:
b5:06:23:2a:3b:a1:c5:0c:28:13:27:63:fe:c6:94:e2:10:58:
db:b7:4a:c5:66:32:2e:f7:8f:63:33:c3:db:cc:6a:90:3b:86:
23:3f:f0:6e:ff:42:b6:4a:52:8c:f3:07:95:5b:7b:12:27:4d:
c8:b8:df:b7:13:f3:1b:41:f0:f6:a6:39:f1:2e:4b:e0:73:f2:
0a:97:58:77:96:ba:e1:ae:f5:19:ab:e3:d9:f3:83:61:b8:3b:
13:91:32:d8:fa:5a:e0:53:aa:c0:5b:fa:be:54:98:23:fd:bb:
56:9e:ec:55:01:8f:87:f1:a0:d4:7a:2d:c0:73:39:16:3a:cb:
dc:9d:8e:cb:73:12:de:8d:73:a5:30:c9:00:39:17:9a:63:d1:
cc:f7:aa:7b:84:5c:2d:48:01:3d:56:83:95:d7:af:f9:e5:17:
3f:fb:c6:4c:b1:33:d9:04:a9:b5:a3:71:a0:b5:a1:50:81:65:
c0:7b:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:24 2026 by rpki-client