
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3FCE5254477F11F18E418BD095833773.roa
File: 3FCE5254477F11F18E418BD095833773.roa (raw, json)
Hash identifier: 7MQL0/ofyilWcO2JxRS9tYi+pI3twtJscFSEfGehzWM=
Subject key identifier: D2:23:9D:F9:93:CE:8C:B0:F4:B9:98:23:3E:76:4D:B8:98:55:FF:DE
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2E99
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3FCE5254477F11F18E418BD095833773.roa
Signing time: Sun 31 May 2026 16:19:13 +0000
ROA not before: Sun 31 May 2026 16:19:13 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 135702
IP address blocks: 165.101.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Jun 2026 09:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11929 (0x2e99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:19:13 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5f81-f285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:1f:72:97:2a:0c:7f:52:4b:0f:f3:c9:2f:
2c:4d:74:5c:a2:0e:14:e8:bf:3f:8a:1a:fa:df:cc:
57:64:17:0c:30:4b:69:fe:42:22:9c:d7:82:33:df:
04:60:b4:6d:59:a3:e5:f6:ca:40:68:7d:91:08:2f:
ce:65:ff:90:e7:04:f9:15:c9:17:6e:46:56:74:74:
75:f0:a0:1a:f1:ea:0d:1c:f6:df:c3:15:93:0b:3f:
6a:cd:ad:da:be:cf:9a:2a:60:77:3c:81:90:64:33:
91:b5:01:ad:d2:3d:b2:e1:27:9e:ea:5a:a5:b7:b3:
cc:eb:65:07:c0:31:95:dd:7f:67:3f:09:06:5e:17:
20:a3:ed:0e:f8:00:11:9e:84:36:e8:59:77:b1:11:
5e:11:73:21:f4:41:28:39:6f:ef:d0:30:01:04:ad:
cd:2e:51:18:75:48:7b:42:0f:5a:06:b9:d5:ea:81:
75:cd:ed:7f:db:32:ab:5b:84:bf:2e:84:6c:23:4f:
40:10:22:f1:72:3f:14:d9:6f:b3:9f:5d:1f:2f:1a:
b3:9c:c9:cc:96:de:0c:32:2d:54:d6:90:79:bf:db:
b8:e9:01:38:b2:9e:18:d0:b3:42:39:74:7f:2f:11:
35:c2:ce:1b:67:be:16:eb:42:51:58:0b:b9:eb:98:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:23:9D:F9:93:CE:8C:B0:F4:B9:98:23:3E:76:4D:B8:98:55:FF:DE
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3FCE5254477F11F18E418BD095833773.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.138.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:3e:d8:e1:26:4b:38:3a:87:8e:e6:5d:b4:76:f0:90:95:ea:
fb:da:de:4d:3e:f4:7c:9c:26:0d:e6:22:85:34:f5:d2:d8:9b:
81:68:b9:a3:ca:0e:61:10:73:38:d6:19:8e:98:f0:3e:ad:47:
a1:d1:12:66:79:70:b8:b9:ed:ae:9d:d0:d5:81:a3:f8:d5:d6:
fe:b1:b0:a1:73:78:35:88:9b:0c:18:01:4b:a5:a6:4f:f2:90:
2e:94:4c:ed:41:78:01:f4:b3:23:5a:2e:4d:50:26:8e:3e:6d:
ca:6d:fa:7f:56:1f:3e:92:77:eb:3e:d7:dc:2a:c1:32:39:5d:
09:e9:8e:a5:dc:42:2b:be:ac:b7:e7:bd:ea:1c:77:a8:c4:21:
cb:c7:d9:ca:71:61:1d:49:71:22:8d:64:07:37:d8:ab:da:56:
52:f7:13:e2:7b:b7:c4:03:82:da:ea:c2:b5:71:60:97:4b:45:
6f:35:89:58:d7:00:22:b5:16:a3:57:d1:ed:7b:50:36:a2:12:
b1:e5:a8:38:91:bf:9b:ef:be:19:a8:54:db:eb:b6:54:f4:3b:
d5:30:85:0c:91:80:4c:d3:f7:03:56:b3:0d:ec:78:e6:9f:47:
15:23:60:b7:aa:07:e4:89:0c:07:f9:a3:da:f3:61:e1:cc:e0:
2e:e7:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:20:18 2026 by rpki-client