
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D38BF5DCA5D111F0A6C84E41C4F9AE02.roa
File: D38BF5DCA5D111F0A6C84E41C4F9AE02.roa (raw, json)
Hash identifier: 9IRlVgWdPM9jeeVds3AKTAZIJQeudKv10GOjGxga21E=
Subject key identifier: 31:70:84:39:DE:B5:F4:9C:73:64:54:7E:19:59:1F:64:30:1E:77:78
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 31F8
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D38BF5DCA5D111F0A6C84E41C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:26:59 +0000
ROA not before: Mon 06 Jul 2026 16:26:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154059
IP address blocks: 165.101.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12792 (0x31f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:26:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd753-f2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:87:de:55:e9:9d:ea:98:7c:04:b8:da:c4:
45:24:15:08:1e:7a:60:bc:9f:7b:51:bc:51:ef:9e:
bd:b3:4e:87:da:4f:4b:c2:da:68:73:9f:5d:df:10:
11:3c:9d:55:57:7b:62:1f:19:1e:25:ca:c7:96:aa:
31:02:cb:bd:25:99:2b:bc:cd:b3:1e:62:c2:8d:7a:
60:2a:cd:cb:12:64:02:e2:8a:34:a6:5d:78:1c:8b:
f8:5c:84:6b:1b:22:1c:26:dc:4d:22:41:16:4a:55:
eb:60:3b:d8:2c:71:48:bf:d8:4b:02:83:bb:20:0a:
3a:40:0a:d9:c1:c0:5d:25:99:18:e9:55:2f:39:ed:
0a:df:cb:58:d0:b1:57:d1:8e:bd:7f:28:5e:63:54:
bd:85:a2:76:5a:2f:c6:ca:3b:a1:11:e3:49:99:2a:
72:ee:7e:fb:88:83:35:7b:8c:3b:45:38:5d:b8:f6:
82:34:96:c8:1f:ec:37:07:fa:64:74:03:2a:1b:5e:
d9:37:cf:6a:53:1f:f7:dc:de:80:7a:2c:a6:28:8c:
c1:ca:35:00:74:a1:b4:ec:60:c1:0b:a7:af:72:86:
d3:b4:f9:70:96:bd:e8:0f:37:8e:06:b0:8f:ff:4c:
05:98:b9:ff:86:ed:1f:d1:ad:38:86:42:eb:02:5c:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:70:84:39:DE:B5:F4:9C:73:64:54:7E:19:59:1F:64:30:1E:77:78
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D38BF5DCA5D111F0A6C84E41C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:cf:b8:0e:10:b7:da:65:af:15:1d:09:c3:f3:77:e0:82:fd:
fc:42:92:b9:95:a4:e5:63:cc:b2:8f:d3:2a:a1:08:86:19:56:
dc:aa:f5:62:a5:95:c0:03:a4:d6:0d:b1:1d:5c:ed:03:14:02:
3a:78:82:59:9c:17:b3:07:2e:40:cb:25:6c:69:d1:b5:91:a5:
48:90:56:b9:f0:a9:db:2a:f5:c1:52:46:5a:12:40:1d:d1:e7:
1b:9b:f7:8c:97:8a:3a:f7:53:16:52:7e:6b:23:2c:ca:26:f6:
3b:b0:bf:70:93:e7:5f:91:00:b2:17:bf:20:ca:0c:ad:68:ac:
18:02:fe:a7:eb:5e:e3:93:f3:36:4c:18:91:25:9a:bb:97:bf:
7c:c2:98:29:39:da:dd:fc:39:13:48:0b:77:d5:58:4a:b4:a6:
29:79:34:38:b7:fd:e1:88:56:b3:ac:87:14:cb:ab:db:97:a1:
0f:2c:a7:3e:f3:13:63:4b:bc:63:f6:7d:55:51:48:78:5a:34:
14:12:49:12:19:5c:be:64:9b:2a:df:22:4e:ef:db:37:01:11:
3c:d0:bd:e9:93:39:bb:0a:1a:72:86:31:16:01:aa:2a:ef:21:
71:3b:6c:bc:fb:86:72:22:17:e8:99:65:cc:56:2e:f4:52:3c:
d4:01:ad:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:29 2026 by rpki-client