
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8A2707C631AC11F1AAE19935B9833773.roa
File: 8A2707C631AC11F1AAE19935B9833773.roa (raw, json)
Hash identifier: H5sP4L32DGTgFuVmoWBcvscvwr6B7yLzYlY+/sO+k5o=
Subject key identifier: 60:34:BD:C5:C1:FA:49:B9:E7:AE:75:AD:36:36:3A:68:B9:BD:5E:39
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 31EB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8A2707C631AC11F1AAE19935B9833773.roa
Signing time: Mon 06 Jul 2026 16:26:34 +0000
ROA not before: Mon 06 Jul 2026 16:26:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154000
IP address blocks: 165.101.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12779 (0x31eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:26:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd73a-a464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:10:57:e5:0d:b4:1f:33:bc:92:ca:cc:92:
46:f1:15:6d:4a:af:a4:58:cb:7d:bf:20:79:0d:e8:
f2:db:4e:f1:89:9c:85:bc:94:9d:51:6f:a1:0a:82:
fa:ed:d2:5d:23:2b:4a:00:0f:3a:a9:d9:dd:5c:9c:
8b:42:75:99:91:e0:70:99:6e:16:cc:10:31:01:9f:
c1:7a:3b:18:70:34:ef:96:32:23:e8:ad:d9:59:5a:
a3:83:6c:43:84:10:a0:63:bf:6e:db:c7:38:05:6c:
ab:94:4c:e2:9a:7c:f4:f5:7f:3e:f7:64:7b:bd:29:
f6:a8:dc:7a:78:af:8a:68:15:ee:41:d6:8f:37:44:
3d:44:10:8c:e9:1f:95:50:41:34:2b:80:ca:e3:5c:
a1:0e:73:05:91:42:19:e6:57:cf:d6:6d:82:13:8b:
f2:f7:1f:30:42:08:eb:c6:13:42:9a:e5:86:d8:ca:
d8:8e:c8:1f:56:49:9c:de:7d:59:a0:0d:80:d5:fe:
53:9d:d9:3b:f5:86:53:31:ed:d9:d2:fd:01:7b:a8:
24:a0:3e:7f:f0:09:91:7a:9b:c1:05:89:a1:90:03:
b2:b2:72:fd:25:06:77:e3:46:2c:cc:f6:12:d4:8d:
46:95:e6:5a:5b:cf:8b:0c:98:65:36:dc:a9:e1:57:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:BD:C5:C1:FA:49:B9:E7:AE:75:AD:36:36:3A:68:B9:BD:5E:39
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8A2707C631AC11F1AAE19935B9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fb:38:f8:1f:9d:d9:a7:54:5f:56:df:73:09:6d:3d:e4:87:
c7:b6:15:af:a5:48:c5:28:5c:e6:35:29:56:93:fa:8e:38:98:
7a:5d:64:13:78:21:bf:9c:44:5f:8c:13:2e:de:01:ad:cb:93:
c6:96:9a:9d:96:73:0f:42:4e:db:33:2a:b7:06:6e:d3:0c:de:
10:98:30:b8:0a:ad:56:01:0f:01:dc:8b:17:20:be:4c:00:d6:
0d:e7:ba:85:e4:96:d4:d1:a2:0f:dc:7b:69:4e:47:3f:a7:21:
37:30:1e:e5:0a:ea:0a:5d:78:3b:01:9c:2b:1b:fd:45:f8:36:
0d:8d:84:9b:46:ff:ed:f7:ad:db:b4:c5:b7:6a:ff:25:bd:29:
72:22:2f:75:00:93:4f:97:e4:3b:55:e4:b2:fa:a6:aa:1f:7f:
15:67:36:67:13:52:92:dc:b2:c1:64:2c:ef:1b:4b:b2:f1:c5:
b8:e3:01:9f:17:1e:27:6d:5b:22:2c:ca:ad:7a:8d:d9:2c:63:
9a:b3:8d:0a:b8:ec:d3:cf:e2:7e:ed:c2:fc:dc:04:9c:fc:17:
88:55:c1:8b:e5:a4:c5:06:cb:b4:10:9f:6f:64:0c:e1:77:bd:
f9:00:a8:e7:76:1b:02:34:c2:bf:26:d2:e3:9f:8f:4b:69:74:
35:7a:1a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:52 2026 by rpki-client