
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9D9581FA228B11F18450BA11AA833773.roa
File: 9D9581FA228B11F18450BA11AA833773.roa (raw, json)
Hash identifier: MWt+ifG+Cka4NJNzPoOCnsonjwZbGpGhsX58rmA4P7M=
Subject key identifier: 9E:35:0F:2A:74:58:C2:52:FF:55:EE:AB:5A:6A:7D:EA:77:AE:2A:FB
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30C9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9D9581FA228B11F18450BA11AA833773.roa
Signing time: Mon 06 Jul 2026 16:17:01 +0000
ROA not before: Mon 06 Jul 2026 16:17:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135834
IP address blocks: 160.25.132.0/24 maxlen: 24
160.25.133.0/24 maxlen: 24
165.99.132.0/24 maxlen: 24
165.99.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12489 (0x30c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:17:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd4fc-3b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:ca:c2:b0:b5:e9:7f:53:47:4c:8e:26:a8:
fd:27:b1:ce:a0:9e:eb:90:45:09:c0:af:7b:62:7f:
2c:c8:6f:39:88:c6:64:de:c6:2c:7b:2a:34:5a:55:
e8:f0:89:4a:3a:70:de:39:9a:41:2d:43:25:9b:ec:
a3:12:52:cd:e1:44:f8:07:85:80:7a:ab:f8:53:f5:
0f:af:04:0a:c6:9e:7a:bb:10:61:67:83:d1:c8:a9:
69:f3:24:5f:ac:62:fb:38:69:06:c5:bf:a5:63:06:
ee:e4:41:8b:72:f6:b2:f0:3c:bb:30:52:d8:2d:74:
88:3a:60:a2:d5:47:9f:cb:07:5f:e2:8a:25:be:26:
13:1d:ca:14:a9:ea:e6:a7:ca:a1:b5:8b:78:8e:cd:
7e:6a:77:e4:63:49:a9:80:c1:b3:61:e4:67:b2:79:
78:f9:eb:de:27:fb:cb:44:88:7a:b4:eb:4b:c9:69:
81:53:35:f9:ec:04:47:c4:02:10:1e:dd:a6:d5:2e:
e6:26:e2:42:1a:32:97:ac:fe:a0:12:95:b9:82:05:
50:59:6b:cc:8f:05:6e:bb:bf:40:2a:03:9a:69:5a:
9b:ae:05:c4:8f:b7:84:5e:f2:d8:fe:44:94:c8:e1:
93:7c:db:3b:b1:e9:41:89:36:0d:6c:e9:67:02:00:
f5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:0F:2A:74:58:C2:52:FF:55:EE:AB:5A:6A:7D:EA:77:AE:2A:FB
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9D9581FA228B11F18450BA11AA833773.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.132.0/23
165.99.132.0/23
Signature Algorithm: sha256WithRSAEncryption
90:08:bf:c2:39:e1:2c:75:fd:e1:61:e9:80:73:ee:3d:53:83:
f4:59:fb:e2:2f:64:54:7a:e3:1e:fa:fb:b9:5d:cf:f8:72:c0:
d3:2c:a4:9a:39:d4:e6:46:91:68:92:df:0c:10:45:de:15:de:
b2:6c:c2:5f:cd:ea:5d:42:01:33:65:c4:bb:5c:b8:f8:54:63:
97:63:b8:ab:58:3b:02:7e:24:32:59:06:ab:d7:e6:f2:e2:e7:
73:98:09:cf:dd:f2:2e:7a:a6:22:9e:9a:cb:18:3a:3b:c3:ad:
1d:93:27:2c:83:a4:12:1d:f3:e7:d0:a8:e1:52:11:ea:99:bd:
8d:fc:f1:0e:73:50:bb:2b:fd:72:55:a1:a2:1f:d9:37:f9:3c:
15:1d:7d:93:69:f5:7e:32:a1:55:e2:46:40:12:2e:e6:ea:0b:
81:cf:39:96:29:d6:98:b8:e0:6f:23:39:7d:f0:01:15:74:90:
7d:fe:07:ef:dc:75:3b:44:37:a6:f1:18:93:fd:c6:b3:79:a1:
fd:99:a7:ec:69:90:68:47:9a:52:b7:b4:68:2a:3c:59:b2:4d:
6d:1a:a9:5d:32:19:03:2f:49:98:d5:27:e2:22:ae:1a:e1:0d:
65:ff:22:8d:d8:26:b4:fe:cf:78:04:5a:95:64:5c:ca:0d:3d:
43:3f:1e:1c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICMMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYxNzAxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDRmYy0zYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0VTKwrC16X9TR0yOJqj9J7HOoJ7rkEUJwK97Yn8syG85iMZk3sYseyo0WlXo
8IlKOnDeOZpBLUMlm+yjElLN4UT4B4WAeqv4U/UPrwQKxp56uxBhZ4PRyKlp8yRf
rGL7OGkGxb+lYwbu5EGLcvay8Dy7MFLYLXSIOmCi1Uefywdf4oolviYTHcoUqerm
p8qhtYt4js1+anfkY0mpgMGzYeRnsnl4+eveJ/vLRIh6tOtLyWmBUzX57ARHxAIQ
Ht2m1S7mJuJCGjKXrP6gEpW5ggVQWWvMjwVuu79AKgOaaVqbrgXEj7eEXvLY/kSU
yOGTfNs7selBiTYNbOlnAgD1HQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJ41Dyp0
WMJS/1Xuq1pqfep3rir7MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUQ5NTgxRkEy
MjhCMTFGMTg0NTBCQTExQUE4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBoBmEAwQBpWOEMA0GCSqGSIb3DQEBCwUAA4IBAQCQCL/COeEsdf3h
YemAc+49U4P0WfviL2RUeuMe+vu5Xc/4csDTLKSaOdTmRpFokt8MEEXeFd6ybMJf
zepdQgEzZcS7XLj4VGOXY7irWDsCfiQyWQar1+by4udzmAnP3fIueqYinprLGDo7
w60dkycsg6QSHfPn0KjhUhHqmb2N/PEOc1C7K/1yVaGiH9k3+TwVHX2TafV+MqFV
4kZAEi7m6guBzzmWKdaYuOBvIzl98AEVdJB9/gfv3HU7RDem8RiT/cazeaH9mafs
aZBoR5pSt7RoKjxZsk1tGqldMhkDL0mY1SfiIq4a4Q1l/yKN2Ca0/s94BFqVZFzK
DT1DPx4c
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:33 2026 by rpki-client