
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DDB6618E071311F19399F419273D8C67.roa
File: DDB6618E071311F19399F419273D8C67.roa (raw, json)
Hash identifier: CJyfDGTKFRjAIRfsz+6K9hKFJpvYnTFbkLZVJKi/p6E=
Subject key identifier: 5D:89:95:19:04:A1:57:41:1E:F9:85:B7:46:BF:C5:C1:7E:8D:30:3D
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2E7B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DDB6618E071311F19399F419273D8C67.roa
Signing time: Sun 31 May 2026 16:18:16 +0000
ROA not before: Sun 31 May 2026 16:18:16 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133652
IP address blocks: 165.101.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11899 (0x2e7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:18:16 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c5f48-205f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:01:4f:96:28:65:cf:3b:24:18:8b:61:a1:
a7:82:5f:32:eb:25:11:26:ed:fb:3d:82:5a:c8:74:
14:44:93:b3:c4:7a:b6:83:f6:a2:37:ae:e5:b3:2d:
ed:a3:69:88:a4:c6:34:e0:24:c9:72:4a:b5:4a:e8:
2c:bc:10:4e:03:88:0f:f1:8f:d2:04:7b:9e:c5:e8:
8f:80:8c:d7:b4:ab:9a:de:d2:ad:a0:bd:a6:39:d6:
c1:c6:a4:39:16:c3:c7:00:85:77:e4:0d:24:ed:a0:
a5:06:07:25:e0:91:40:69:7f:b2:b1:51:0c:9a:e4:
b5:11:94:00:57:c7:d7:f4:54:7a:81:ec:5a:50:c4:
0c:54:fa:d1:4c:c6:25:a3:50:29:22:7d:0e:18:9b:
e5:4e:9d:65:d5:e9:3f:74:95:50:94:5b:12:ff:e4:
aa:9f:21:bd:f9:00:95:12:37:1f:fe:1b:4d:d0:02:
3e:58:67:9b:05:91:8d:1c:21:fa:14:c1:a5:de:c1:
49:3f:c2:4a:56:b6:84:e1:2a:80:72:04:62:8e:2a:
44:bf:f5:19:30:67:36:93:ce:bd:63:bf:db:9d:a7:
66:6b:a0:5c:f9:5b:9f:67:8f:99:4d:f0:76:2f:40:
3f:dc:00:b1:83:71:dd:d5:14:7e:40:d1:fc:92:28:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:89:95:19:04:A1:57:41:1E:F9:85:B7:46:BF:C5:C1:7E:8D:30:3D
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DDB6618E071311F19399F419273D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.206.0/23
Signature Algorithm: sha256WithRSAEncryption
81:d7:77:e2:89:fc:ba:d1:2b:cb:14:79:74:88:8c:71:00:e8:
a5:0c:75:6f:97:c4:b6:07:e9:ad:63:39:65:74:5e:14:f9:51:
13:35:6a:82:07:d1:cf:e8:b4:9e:e1:f7:62:80:af:4e:11:8c:
d6:01:64:a7:58:05:01:f0:c8:c9:03:b3:f8:26:b0:86:1b:5c:
f5:bf:88:ce:de:51:9f:86:88:46:55:1b:6b:e3:1b:be:b6:0d:
ad:b9:e1:b4:41:03:43:01:06:33:27:8e:e0:7b:7b:b2:f3:d0:
29:f4:93:9d:78:db:fc:4f:d9:63:82:36:47:ce:a8:d8:04:c2:
1f:12:d8:dd:39:65:43:5d:c8:3c:b8:e3:70:47:21:64:7a:db:
0c:6b:a4:9a:88:52:5d:a3:83:92:c7:6c:69:84:4b:b3:f5:75:
e6:c3:6a:0c:49:04:45:79:83:3b:bf:5f:1b:18:68:fe:bf:04:
be:c0:fc:6c:b9:33:a8:4f:d1:d8:fd:0f:38:06:5f:1b:12:e0:
c1:24:81:27:12:43:f7:f8:1f:4b:bf:40:21:08:a4:bd:de:30:
33:a3:71:9d:05:98:d4:9a:12:a5:0b:be:f3:90:0d:27:97:8c:
38:09:3b:48:89:d4:b5:4c:5f:b4:cc:e8:c3:09:f3:b1:ea:c6:
20:03:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:25:22 2026 by rpki-client