
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/18F343922A5711EBB59D6526C4F9AE02.roa
File: 18F343922A5711EBB59D6526C4F9AE02.roa (raw, json)
Hash identifier: MfBYIfef5q6axAJciYZD+YSWEevAKozoCGz/YdfVQD8=
Subject key identifier: FF:C8:0E:88:E4:19:80:C0:7A:54:69:8C:B5:45:E8:D6:2B:7B:DB:92
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 0939
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/18F343922A5711EBB59D6526C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:50:58 +0000
ROA not before: Thu 12 Jun 2025 20:58:46 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9498
IP address blocks: 106.210.199.0/24 maxlen: 24
117.96.0.0/16 maxlen: 16
117.96.0.0/17 maxlen: 22
117.96.0.0/18 maxlen: 24
117.96.64.0/19 maxlen: 24
117.96.96.0/20 maxlen: 24
117.96.112.0/21 maxlen: 24
117.96.120.0/22 maxlen: 24
117.97.0.0/16 maxlen: 16
117.97.0.0/17 maxlen: 18
117.97.0.0/18 maxlen: 24
117.97.64.0/19 maxlen: 20
117.97.64.0/20 maxlen: 24
117.97.80.0/21 maxlen: 21
117.97.80.0/22 maxlen: 23
117.97.80.0/23 maxlen: 24
117.97.82.0/24 maxlen: 24
223.224.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 20:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2361 (0x939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Jun 12 20:58:46 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a45252-1f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:b4:fe:90:49:ca:72:62:54:0e:2b:40:59:
a6:b5:83:6b:03:d2:aa:0c:d9:3b:ae:19:7e:0c:ae:
7b:6c:1e:21:2c:0b:51:d1:ca:da:b9:26:9c:57:a9:
d4:d3:e3:35:a9:a4:e0:e5:9f:bb:17:39:5c:7c:4f:
c4:8d:4f:d2:c3:68:43:c9:67:e8:f2:32:50:db:93:
37:b3:85:da:d1:c0:10:6b:76:c9:0f:2a:51:01:7c:
ff:f9:03:84:18:30:89:74:0d:37:b9:ec:13:47:af:
59:2f:0b:b4:90:99:93:1f:56:02:3e:f5:cf:c6:ce:
43:43:16:de:3f:2f:6d:b3:8b:bc:64:55:d0:0e:08:
47:cd:92:d2:01:d6:6f:c0:48:19:03:0c:33:70:42:
ed:18:e7:c6:5c:50:c9:b0:80:24:95:71:c5:d6:c7:
22:09:ac:f3:9a:3f:54:ca:97:ed:2f:ea:63:f2:ef:
c2:30:db:de:7a:dc:58:f2:cb:c9:25:ec:9f:63:85:
d9:63:d5:ea:72:3b:8c:a0:e6:6d:95:41:ac:3e:47:
38:16:cd:d8:9e:65:1a:09:f6:89:e1:3e:79:1b:64:
ba:ff:32:ee:7c:b1:f6:3e:08:a9:6b:0a:1f:5b:13:
74:5c:80:1c:f6:45:b7:31:da:3a:29:f8:b9:48:94:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C8:0E:88:E4:19:80:C0:7A:54:69:8C:B5:45:E8:D6:2B:7B:DB:92
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/18F343922A5711EBB59D6526C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
106.210.199.0/24
117.96.0.0/15
223.224.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:31:c1:45:1e:67:aa:73:81:b4:44:05:09:26:41:8e:ea:69:
2c:c6:3e:4a:1f:0d:b2:87:a7:c9:f2:12:f0:85:fa:e4:cf:a2:
44:1d:b6:5a:77:ba:c9:37:ed:f4:ec:f0:da:c0:c3:64:e7:11:
59:6b:db:df:b0:19:56:1f:cd:c7:f1:20:b5:aa:ab:66:55:63:
02:ad:6d:dd:11:b2:03:48:11:0e:2a:27:f4:33:5e:6d:46:1b:
8f:c9:94:95:38:a1:6a:02:64:1f:d5:5d:04:28:ec:ac:a1:f8:
ed:84:ed:7a:3a:b9:07:1e:36:fd:5f:c9:0f:f3:ab:71:29:7d:
c4:28:1b:44:0b:e8:f4:6e:20:75:9c:30:84:6d:18:b4:c3:8e:
bc:35:f1:11:35:ea:48:f1:6a:a2:b4:34:27:61:8e:8e:16:27:
d3:75:77:c0:78:66:79:59:54:c4:d3:8e:34:24:c3:71:24:9e:
58:b0:95:2e:13:a1:01:3f:8f:83:46:e1:63:49:aa:f4:fd:a8:
07:ff:16:23:d7:47:ec:21:b7:30:c9:f3:bc:16:de:e8:3c:cd:
d3:72:03:5b:40:a1:de:7e:78:25:8b:46:98:db:fa:08:34:9d:
cd:37:3b:57:c8:21:ed:15:2d:9a:43:88:e7:6a:f3:68:07:76:
87:e7:ba:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:55:34 2026 by rpki-client