
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DECB9805B1B11F086BA5E0FC4F9AE02.roa
File: 4DECB9805B1B11F086BA5E0FC4F9AE02.roa (raw, json)
Hash identifier: 1um5jqotqHciKjuGolY3SHCNgxYiGVX4878qoPpTZnI=
Subject key identifier: 1C:8C:91:BD:C4:C6:93:8C:CD:9D:C1:F7:21:C0:6E:E7:DB:92:47:40
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 31EF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DECB9805B1B11F086BA5E0FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:26:42 +0000
ROA not before: Mon 06 Jul 2026 16:26:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154026
IP address blocks: 165.101.136.0/24 maxlen: 24
165.101.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12783 (0x31ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:26:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd742-e521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:3e:33:b8:68:f0:9f:cd:33:94:1c:3b:81:
3e:4b:d0:a5:1a:64:a5:90:6e:6c:06:66:87:67:ff:
81:e0:0f:1f:86:d5:2f:44:6a:84:8d:5c:32:f5:4d:
9e:9c:cb:42:7d:17:65:96:47:63:4e:d0:46:12:f1:
7b:bd:e3:03:55:19:82:e6:2b:86:64:ea:88:14:a7:
8e:bb:e7:98:0d:11:e7:e5:38:65:0d:41:f7:20:c3:
20:07:4d:77:9e:39:e4:4d:6b:58:d7:f5:b5:16:12:
85:19:18:60:6d:e5:2d:89:e3:4e:9c:6c:c1:5e:0c:
2a:c5:59:1b:65:cb:65:a3:58:30:c0:7d:b3:d5:b1:
5e:a8:62:d4:20:52:aa:43:ca:7a:9a:5a:f3:92:d6:
87:27:d6:5a:4b:26:39:bc:6c:81:e3:8b:88:61:1e:
e4:1e:29:d7:80:2a:02:e4:ad:3a:b0:e1:aa:ca:80:
f9:d5:ca:70:d9:e2:0c:08:a4:bd:fd:e9:03:14:14:
17:82:2a:4d:a9:0b:05:3c:9a:fe:b7:e6:81:f7:f3:
a9:b2:b2:1b:34:06:93:76:32:c1:a5:4a:23:a2:62:
63:9d:01:c0:57:d9:87:f7:46:7c:1e:bc:b4:00:57:
84:0e:1d:db:10:11:0a:52:fd:c4:e0:a8:73:cc:8a:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:91:BD:C4:C6:93:8C:CD:9D:C1:F7:21:C0:6E:E7:DB:92:47:40
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DECB9805B1B11F086BA5E0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.136.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:3e:b7:53:4c:02:d9:a4:bc:df:47:00:29:fd:5d:1b:d0:b9:
ec:9a:2e:b7:ff:eb:cc:db:58:80:0b:80:64:db:21:e5:4d:19:
a3:ea:7f:f0:ea:26:15:df:70:9f:5b:0a:96:d1:83:9c:2e:36:
39:49:a7:23:c7:ff:91:81:35:f1:21:04:6d:49:39:c3:37:5d:
94:9b:84:e1:1f:70:c0:49:db:48:0a:cc:70:4f:01:5a:9b:06:
8c:80:aa:14:c9:4c:55:b6:29:fd:bd:69:8c:92:5a:3d:d9:a9:
16:1e:be:20:e3:a0:8f:0c:97:42:82:8d:6b:cb:56:f9:93:fa:
1c:9f:04:76:31:e9:b4:aa:23:03:a6:90:30:68:58:d5:f7:c4:
d5:43:cd:0c:92:ad:5a:36:b0:31:bc:cc:08:bb:98:e9:dd:20:
5f:3d:17:3a:46:e7:9c:84:85:5b:ce:fa:2c:4b:35:1d:28:37:
a8:77:36:10:88:ed:58:66:d2:db:b7:5c:c7:4b:2f:0e:59:3a:
a5:e7:a8:82:00:ac:4e:d7:d6:1d:e1:33:c8:85:32:7c:c2:b2:
5c:75:24:e4:92:ec:58:1f:fc:95:4d:53:ce:0e:82:0b:ce:95:
74:89:02:65:ef:16:e5:47:90:f2:16:0e:a1:01:6b:7b:53:ee:
f3:78:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:59 2026 by rpki-client