
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7E94620E469911F088C2CD47C4F9AE02.roa
File: 7E94620E469911F088C2CD47C4F9AE02.roa (raw, json)
Hash identifier: xGtgZFIsEjcKnxB22IuJbTClRBzY1raejbjsau86QRo=
Subject key identifier: 92:2A:46:D4:CA:B8:E3:C5:35:C7:ED:2E:97:2B:A2:2E:78:10:8B:DF
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 31E7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7E94620E469911F088C2CD47C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:26:26 +0000
ROA not before: Mon 06 Jul 2026 16:26:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153955
IP address blocks: 165.99.226.0/24 maxlen: 24
165.99.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12775 (0x31e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:26:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd732-c2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:19:a2:dc:70:44:75:81:d9:4a:d1:d4:73:
53:61:72:48:ba:2a:d9:c6:72:94:1b:a3:fe:01:41:
1c:39:ea:b5:81:6c:c4:a0:09:56:9c:86:95:5e:d9:
79:dc:f6:32:c9:1f:90:8f:4f:63:85:24:25:b4:44:
68:08:be:51:17:5a:23:41:37:2b:05:55:ad:c7:5e:
db:db:0d:b1:02:d2:ef:19:2f:83:a3:fa:c8:9c:8d:
04:b4:a0:82:c8:45:8c:20:2e:49:11:d0:a1:05:57:
1d:aa:dc:a0:8b:79:ef:eb:95:fb:ba:63:ac:7f:ec:
d0:7f:ea:ca:ca:43:2e:f3:c2:ed:70:7a:ed:21:b1:
b0:74:11:94:ac:2e:bf:37:a4:f5:9b:2b:fe:ad:d9:
7e:1e:d6:be:f9:58:af:9e:88:71:8a:c7:10:4e:36:
92:9b:de:95:52:a2:9a:df:b4:7a:2d:ed:f1:4b:e8:
df:65:5a:bf:2e:13:7e:73:19:94:60:fa:8b:f2:d7:
0e:32:c4:5a:02:82:77:45:47:28:46:10:e3:f4:a5:
da:f7:39:1e:26:d6:79:ff:77:a9:33:62:db:b6:3d:
8a:d1:6b:52:f8:90:7b:91:45:31:0b:e7:ae:60:0b:
dc:37:f9:11:52:3d:92:61:a6:7a:8b:5b:9c:25:c3:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2A:46:D4:CA:B8:E3:C5:35:C7:ED:2E:97:2B:A2:2E:78:10:8B:DF
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7E94620E469911F088C2CD47C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.226.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:1c:29:c7:cb:13:f9:b9:e3:ae:29:e7:3f:29:e2:f3:c7:6d:
06:a1:90:71:ab:90:be:8d:07:8e:22:53:d0:22:d7:e7:8e:b5:
3a:42:1e:2f:49:2f:2c:57:fb:c6:05:84:93:b7:b3:55:0d:80:
4d:36:a6:66:6f:d5:86:4c:8d:57:d5:4c:5d:aa:77:e8:19:ba:
2b:4d:f8:2b:3a:7f:ca:90:89:ef:60:15:c2:b3:93:1a:49:8c:
92:4e:a7:c0:72:4d:e0:8f:67:99:be:85:61:9b:88:1d:83:47:
0d:72:f7:df:8d:9c:e6:fc:64:ff:bb:25:06:e8:31:7d:63:1d:
43:39:6d:b2:73:71:cf:5c:a4:86:1d:6b:e7:7b:31:e7:30:e3:
15:d3:af:d6:51:0a:1d:70:c8:65:68:fc:a6:da:9a:af:f5:1a:
43:08:66:de:14:3f:ea:7e:d2:b3:6d:50:96:51:da:7c:ce:33:
dc:7c:66:12:37:99:91:c9:f5:25:e4:fc:11:d7:0e:ae:c1:b2:
12:41:90:0c:95:5e:60:c5:b6:6e:38:d4:23:ff:2d:af:69:37:
2b:3c:4f:51:1c:da:0a:5c:7b:cd:eb:f8:73:3b:98:47:c1:e8:
61:c7:22:dc:3f:4d:a2:34:0c:30:11:c9:70:69:8c:79:00:36:
54:da:69:a5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYyNjI2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDczMi1jMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApUEZotxwRHWB2UrR1HNTYXJIuirZxnKUG6P+AUEcOeq1gWzEoAlWnIaVXtl5
3PYyyR+Qj09jhSQltERoCL5RF1ojQTcrBVWtx17b2w2xAtLvGS+Do/rInI0EtKCC
yEWMIC5JEdChBVcdqtygi3nv65X7umOsf+zQf+rKykMu88LtcHrtIbGwdBGUrC6/
N6T1myv+rdl+Hta++VivnohxiscQTjaSm96VUqKa37R6Le3xS+jfZVq/LhN+cxmU
YPqL8tcOMsRaAoJ3RUcoRhDj9KXa9zkeJtZ5/3epM2Lbtj2K0WtS+JB7kUUxC+eu
YAvcN/kRUj2SYaZ6i1ucJcMYFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJIqRtTK
uOPFNcftLpcroi54EIvfMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0U5NDYyMEU0
Njk5MTFGMDg4QzJDRDQ3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWPiMA0GCSqGSIb3DQEBCwUAA4IBAQBdHCnHyxP5ueOuKec/KeLz
x20GoZBxq5C+jQeOIlPQItfnjrU6Qh4vSS8sV/vGBYSTt7NVDYBNNqZmb9WGTI1X
1UxdqnfoGborTfgrOn/KkInvYBXCs5MaSYySTqfAck3gj2eZvoVhm4gdg0cNcvff
jZzm/GT/uyUG6DF9Yx1DOW2yc3HPXKSGHWvnezHnMOMV06/WUQodcMhlaPym2pqv
9RpDCGbeFD/qftKzbVCWUdp8zjPcfGYSN5mRyfUl5PwR1w6uwbISQZAMlV5gxbZu
ONQj/y2vaTcrPE9RHNoKXHvN6/hzO5hHwehhxyLcP02iNAwwEclwaYx5ADZU2mml
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:35 2026 by rpki-client