
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DF9BD8D66C6711F0870D2268C4F9AE02.roa
File: DF9BD8D66C6711F0870D2268C4F9AE02.roa (raw, json)
Hash identifier: pUOPq893msqPupaN4JQD9PFKsuK6UE/Eu1TEvLqKEP8=
Subject key identifier: A5:61:02:F2:53:18:B2:BA:88:38:10:9F:B4:34:08:0C:AC:1D:FD:F8
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 30F3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DF9BD8D66C6711F0870D2268C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:18:24 +0000
ROA not before: Mon 06 Jul 2026 16:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140206
IP address blocks: 165.99.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12531 (0x30f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd54f-9fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:f5:84:b6:a8:a2:de:49:04:a1:68:1e:b5:
2d:e0:0a:f0:a7:16:5d:03:50:aa:c9:05:f2:f5:56:
db:e6:18:ed:04:56:83:19:a9:a4:10:68:52:99:bd:
3d:f7:c9:e7:60:c4:8f:88:92:5e:bf:38:9f:c4:d7:
cf:41:9f:58:a3:4a:96:98:7b:7a:1d:fe:0c:22:8e:
91:4f:28:06:aa:d9:4d:05:95:1a:58:4b:51:e1:ee:
92:67:a4:61:1e:8d:70:aa:fa:d0:c8:48:3e:dd:70:
ee:65:78:b2:21:f0:57:fe:4b:9d:5b:ae:4e:9d:df:
a5:2f:56:b8:cf:60:4b:0a:a7:57:a1:17:56:51:d5:
88:fc:6d:2c:4c:0a:55:a0:4f:f1:ed:d4:60:e3:fb:
78:ca:bb:7a:ac:df:49:61:0c:ef:e8:e5:90:2a:11:
a5:7f:91:de:3a:11:86:6c:a4:7b:9c:d8:79:a9:ad:
20:4d:4b:cc:fe:83:ca:93:0a:d6:02:92:f6:6c:a7:
4f:1d:9a:d7:45:b1:cf:28:11:97:4e:f6:be:9e:59:
3e:de:14:3a:08:f2:82:2f:c7:69:8e:a0:b4:f2:3d:
dd:3f:91:7c:2f:09:12:1e:54:de:2a:ce:bc:19:49:
86:71:4d:c4:18:cf:5f:f2:da:76:44:6e:bb:c8:97:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:61:02:F2:53:18:B2:BA:88:38:10:9F:B4:34:08:0C:AC:1D:FD:F8
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DF9BD8D66C6711F0870D2268C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.190.0/24
Signature Algorithm: sha256WithRSAEncryption
49:26:5b:6f:1c:a7:9d:d6:b5:44:94:6e:b1:8e:bf:c2:31:8b:
25:a0:f7:cc:df:5c:ca:d3:de:3a:3f:c9:9a:f5:5e:bc:cf:0a:
fc:52:47:cf:84:47:a4:be:35:64:78:ab:40:b6:e4:21:ff:aa:
a5:62:22:45:42:3b:48:10:87:7a:a3:2a:40:b7:60:7e:5f:c1:
cf:cc:39:b8:d9:26:85:08:cf:48:c6:26:29:14:97:b9:41:cb:
99:34:65:9a:0d:93:c4:79:5b:f1:55:10:fc:35:76:bf:8e:81:
c6:bd:c3:96:26:d6:63:e8:a1:e5:32:f1:eb:a8:43:98:9e:4e:
e0:79:f9:53:30:b1:b0:89:05:9c:b2:89:3a:a2:fc:6f:53:dc:
ca:02:79:9e:37:e5:cb:a7:2c:77:e3:14:13:31:46:a1:d2:40:
0f:70:26:3e:11:68:12:42:3c:45:44:17:f3:2b:dc:d4:47:b3:
39:cc:ad:ce:53:3c:13:f3:24:e0:9b:fc:17:09:a1:81:2b:02:
fd:b9:cc:70:63:a1:76:13:a0:91:c8:f1:12:2b:29:46:62:cb:
f8:6c:98:a2:c3:d2:85:3c:72:b3:80:f2:65:5b:69:24:9b:e1:
52:da:70:eb:2a:f8:ab:75:80:83:32:6a:14:f6:ba:37:9c:59:
0d:91:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:25 2026 by rpki-client