
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/878F32CAA5C711F0A1CA3540C4F9AE02.roa
File: 878F32CAA5C711F0A1CA3540C4F9AE02.roa (raw, json)
Hash identifier: hZl0JrXWkjxLsc1kSl8ghXX+96AVNFfiLwimEWxbLGA=
Subject key identifier: A4:FD:D0:60:50:1F:2D:5F:1F:31:59:69:D0:13:E7:E2:46:86:05:A3
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2FC5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/878F32CAA5C711F0A1CA3540C4F9AE02.roa
Signing time: Sun 31 May 2026 16:28:40 +0000
ROA not before: Sun 31 May 2026 16:28:40 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 154027
IP address blocks: 165.101.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12229 (0x2fc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:28:40 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c61b8-9dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f7:96:f1:ad:89:6e:04:e9:ae:cf:e8:cd:bd:
bd:6c:20:a1:4d:8c:57:75:cb:d0:48:05:35:d9:da:
f4:8f:12:50:e1:5a:12:cf:87:53:f7:41:e0:5f:e0:
62:5e:98:75:93:09:6d:93:a2:2a:46:a0:30:ad:bd:
d5:7c:d3:01:3f:88:3a:6d:9c:c4:7a:be:57:6d:0a:
f7:96:ee:67:f4:3f:39:2f:64:55:03:1d:a2:7b:19:
83:2e:c6:ea:1e:47:7f:3a:4a:fe:36:88:59:60:08:
61:4c:69:3e:cb:ce:da:09:df:88:35:ec:13:6a:31:
c0:e5:9e:d1:b3:72:dd:81:b3:8b:de:96:36:69:67:
03:53:0d:64:fd:34:24:f9:52:3f:cd:5b:08:07:52:
c5:85:d2:e5:81:b4:ed:b4:a0:a7:be:60:be:91:17:
44:02:ff:76:42:8e:e6:2e:f2:9c:72:a6:e1:97:40:
a8:da:33:04:06:46:6c:55:61:b8:e6:e2:64:e3:3f:
01:9e:a4:c5:14:51:c8:3c:e2:ac:fc:d3:25:2e:0a:
04:92:76:60:4b:17:91:58:d9:e8:c9:ea:8d:ad:d6:
0b:4d:9a:0a:5d:fd:7b:57:3d:19:bc:c1:7c:97:b9:
67:4b:fb:30:1f:a1:10:2b:5b:42:6e:fe:08:05:2b:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:D0:60:50:1F:2D:5F:1F:31:59:69:D0:13:E7:E2:46:86:05:A3
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/878F32CAA5C711F0A1CA3540C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.138.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:5f:e9:5a:bd:8c:35:24:87:a2:80:9c:68:58:8d:91:5f:13:
36:aa:19:ed:24:81:77:c8:a3:8f:b8:1a:24:05:2f:aa:be:6a:
85:3a:87:13:c7:c4:5c:df:54:e0:62:bf:d4:ad:8e:09:e7:25:
c3:e3:17:cd:b3:77:7e:a1:3a:e2:94:2f:c7:f2:c6:0e:4f:3c:
8a:35:96:66:e4:65:56:90:3b:4b:a8:54:78:f4:76:6c:e8:fd:
11:bc:07:79:02:ed:76:9b:15:8e:3b:d2:7f:fc:11:25:16:a1:
34:c9:d9:75:cd:3a:56:8c:ff:d2:f4:24:19:1b:12:b6:de:e6:
8a:2d:99:28:bf:ff:bf:75:63:cd:6c:1b:fe:23:da:3e:95:31:
7b:63:c2:2f:46:65:0b:53:21:68:79:c2:62:87:89:77:36:ba:
51:35:ee:51:22:a0:f2:10:68:10:f4:a4:88:23:11:f0:46:68:
f1:8b:68:88:2d:dc:83:53:a8:45:4d:e3:c3:44:75:c2:23:ca:
d4:82:f4:ea:31:d3:4b:77:a4:5f:d8:b7:f0:36:96:2f:c5:e8:
19:81:f3:1b:97:e1:71:35:1e:8a:53:2c:11:03:6e:ef:76:92:
fb:e5:95:19:14:9f:36:77:f7:a9:c4:f8:db:d8:d8:32:da:41:
7b:d5:de:10
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICL8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyODQwWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjFiOC05ZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5feW8a2JbgTprs/ozb29bCChTYxXdcvQSAU12dr0jxJQ4VoSz4dT90HgX+Bi
Xph1kwltk6IqRqAwrb3VfNMBP4g6bZzEer5XbQr3lu5n9D85L2RVAx2iexmDLsbq
Hkd/Okr+NohZYAhhTGk+y87aCd+INewTajHA5Z7Rs3LdgbOL3pY2aWcDUw1k/TQk
+VI/zVsIB1LFhdLlgbTttKCnvmC+kRdEAv92Qo7mLvKccqbhl0Co2jMEBkZsVWG4
5uJk4z8BnqTFFFHIPOKs/NMlLgoEknZgSxeRWNnoyeqNrdYLTZoKXf17Vz0ZvMF8
l7lnS/swH6EQK1tCbv4IBSsR8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKT90GBQ
Hy1fHzFZadAT5+JGhgWjMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODc4RjMyQ0FB
NUM3MTFGMEExQ0EzNTQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWWKMA0GCSqGSIb3DQEBCwUAA4IBAQDJX+lavYw1JIeigJxoWI2R
XxM2qhntJIF3yKOPuBokBS+qvmqFOocTx8Rc31TgYr/UrY4J5yXD4xfNs3d+oTri
lC/H8sYOTzyKNZZm5GVWkDtLqFR49HZs6P0RvAd5Au12mxWOO9J//BElFqE0ydl1
zTpWjP/S9CQZGxK23uaKLZkov/+/dWPNbBv+I9o+lTF7Y8IvRmULUyFoecJih4l3
NrpRNe5RIqDyEGgQ9KSIIxHwRmjxi2iILdyDU6hFTePDRHXCI8rUgvTqMdNLd6Rf
2LfwNpYvxegZgfMbl+FxNR6KUywRA27vdpL75ZUZFJ82d/epxPjb2Ngy2kF71d4Q
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:15 2026 by rpki-client