
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFD1E392195311F18E42D39C403D8C67.roa
File: DFD1E392195311F18E42D39C403D8C67.roa (raw, json)
Hash identifier: szAETdqAxaeeDGfdyFSRmGQRszWJxYWAKeMnKeQ2tOM=
Subject key identifier: F9:25:3F:3D:B2:02:45:DF:86:25:8D:89:77:AB:A1:F1:CD:13:73:03
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2FB4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFD1E392195311F18E42D39C403D8C67.roa
Signing time: Sun 31 May 2026 16:28:09 +0000
ROA not before: Sun 31 May 2026 16:28:09 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153915
IP address blocks: 165.99.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12212 (0x2fb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:28:09 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6199-bc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:c2:a0:28:8e:56:92:51:ed:0a:da:24:2e:
23:c6:5d:1d:bf:bc:6f:86:6c:5d:b6:d8:3e:f3:2e:
43:0b:4f:19:8a:99:b0:39:4e:a5:65:96:a6:17:91:
e0:a8:46:b9:bd:84:e3:9c:81:b6:c9:97:28:9b:7d:
6e:ba:72:a2:01:71:11:48:93:b2:11:03:ca:ab:4d:
a6:65:62:55:17:89:c9:b4:83:c6:f8:9f:d2:21:cc:
c9:ba:c0:d7:53:78:c9:a6:8e:6f:0f:c6:d9:b2:20:
b4:82:98:36:eb:01:5d:cf:16:cc:dd:c9:51:f2:8e:
3a:96:1c:d9:84:98:1b:5a:58:e7:43:1c:ea:4f:2d:
af:c9:55:35:8b:e9:03:65:eb:47:31:5d:81:53:67:
ad:43:9c:5d:aa:e9:59:e3:e5:2d:84:0e:af:dc:13:
b1:bc:7f:ca:bc:ae:54:37:73:8c:46:9c:e4:11:a4:
3d:e1:be:e2:fb:7a:47:12:d7:03:07:1a:50:ea:42:
50:07:09:18:78:9e:b7:22:22:88:f3:2b:75:1a:01:
8f:e4:51:9a:bf:84:66:b8:4c:95:5f:68:32:c0:ff:
a6:0c:93:93:99:b3:af:e6:16:3f:31:33:1a:c5:6c:
99:69:53:86:8a:bd:f7:3a:fd:b4:32:bb:23:a6:ae:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:25:3F:3D:B2:02:45:DF:86:25:8D:89:77:AB:A1:F1:CD:13:73:03
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFD1E392195311F18E42D39C403D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.132.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:10:d5:92:03:cc:b6:bb:fc:71:ee:d7:03:18:8a:71:d1:65:
4c:c2:09:7c:7d:83:c8:1e:2d:2b:f0:ff:62:b6:9d:a5:d4:3d:
e2:47:ef:94:d3:76:6a:bc:64:85:e6:d6:16:b8:67:69:48:e5:
f9:bf:df:e7:1d:46:44:7b:e2:8a:eb:4a:cc:5b:f4:32:4e:ba:
b2:d6:d2:23:e5:2b:29:66:d0:25:db:f5:01:9f:2f:fd:14:4b:
be:ce:bc:6d:72:c1:38:3d:bd:f1:6d:50:c8:cb:45:24:e8:0f:
a3:3b:c3:1b:01:6b:f2:d2:f9:08:53:4c:63:cf:d1:2d:c5:70:
7e:ac:5f:e0:53:39:06:1f:56:f2:ab:e1:27:a4:1b:7b:a5:a2:
98:65:77:6e:8a:12:f4:43:03:57:53:b2:30:0b:fe:1e:e3:f6:
a8:3f:39:68:09:82:b6:fb:44:e1:30:6f:22:ed:1e:6b:ca:93:
db:b0:22:61:f5:76:93:4d:bc:0a:37:30:e1:0b:02:89:c5:a8:
6f:bf:bb:54:1e:cc:ca:08:a4:a1:d9:49:c8:1d:0e:ea:de:e8:
4a:30:09:2b:24:c2:59:68:cf:ed:06:f6:5f:e4:c0:7a:6c:80:
d4:c2:ed:12:c4:38:77:d7:b0:69:e1:6d:2b:c0:b0:40:42:cc:
dd:a0:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:41:21 2026 by rpki-client