
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/7D7ECB70480611F08B614210C4F9AE02.roa
File: 7D7ECB70480611F08B614210C4F9AE02.roa (raw, json)
Hash identifier: TDS7qbzkjns0lb3qBIPlOIfh7gAVrC0ccm+ewwA1wN8=
Subject key identifier: BC:91:2B:E5:8F:45:C3:B9:6C:86:D3:F4:41:33:99:25:3D:48:CB:89
Certificate issuer: /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Certificate serial: 8B
Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/7D7ECB70480611F08B614210C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:08:07 +0000
ROA not before: Fri 13 Jun 2025 03:28:36 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153966
IP address blocks: 165.99.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Validity
Not Before: Jun 13 03:28:36 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3e5d6-3419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:04:02:59:44:0f:f6:2e:9a:08:58:fe:6f:
25:0e:a1:99:77:71:00:2e:75:8f:6f:ed:ff:cf:36:
15:c1:fa:63:19:71:51:99:37:8c:c4:c8:ad:72:a7:
f5:cf:ed:c9:b7:9b:5b:4e:3d:30:2a:fe:60:43:f6:
85:41:b3:09:6b:28:37:cd:4b:de:f0:a6:0c:28:be:
d6:79:3b:c8:30:9e:fa:9f:48:ee:3c:51:a2:0e:d3:
10:48:d6:dd:da:7a:82:16:b9:ff:b7:9b:71:06:1d:
d9:7f:3d:50:51:4f:2e:cd:06:fb:c6:8c:5d:9b:ac:
0b:c9:76:1e:04:1b:13:ac:a4:11:13:e7:1c:58:c6:
80:7c:bb:5b:2a:05:3c:63:3a:c8:7e:fa:f5:77:22:
94:60:79:2c:c7:f4:40:a1:a6:a6:c3:d5:47:b6:f6:
df:61:99:c3:25:09:58:66:05:3a:bf:88:ff:12:1e:
4c:99:25:70:79:ac:99:ea:89:c9:e0:38:c7:69:23:
7d:02:4d:e7:1c:a6:59:6a:ad:11:03:71:4b:a2:46:
5c:fa:ec:e8:27:28:2c:a8:72:bd:de:26:4e:02:95:
70:ba:4f:f6:60:c5:a0:0e:d8:58:9e:c5:28:32:4e:
8c:81:76:fb:ad:b3:d1:9d:42:be:48:d8:fc:a1:4c:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:91:2B:E5:8F:45:C3:B9:6C:86:D3:F4:41:33:99:25:3D:48:CB:89
X509v3 Authority Key Identifier:
keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/7D7ECB70480611F08B614210C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8a:6f:4c:e4:33:2b:e7:22:89:b6:bd:21:45:37:72:1c:ff:
2c:db:29:1f:09:d9:64:22:75:a8:4d:05:47:09:4c:f5:4d:96:
83:20:0b:93:a8:b5:91:57:7e:bd:25:55:9b:be:2a:e6:47:ed:
a1:e5:50:de:18:40:51:cd:2e:73:69:20:8f:67:75:c9:cc:49:
4d:14:7d:2a:3d:ff:e3:57:40:ef:9c:d2:31:2a:9e:6f:19:18:
ee:97:22:e8:c9:cf:2a:51:f0:9b:23:94:51:f1:ad:63:ff:c9:
e3:a9:84:52:a4:2c:f2:d1:f8:5b:9e:3d:33:d4:91:a0:b8:dd:
25:83:26:13:9c:6e:c9:c4:97:96:4f:ca:fa:f2:d5:c6:c7:28:
64:83:64:c1:02:b9:3d:2c:f9:3c:54:98:bc:fa:54:72:d6:8b:
91:42:1d:88:98:d9:95:d2:0e:a8:4d:f8:4d:39:d2:4c:35:6b:
77:96:d2:47:0d:f7:e7:9b:44:77:d3:52:62:99:70:c8:b0:11:
c3:7f:aa:a7:ad:28:07:20:c5:76:5a:1a:8e:9a:49:98:72:c2:
28:ee:0a:a2:86:06:d7:30:26:6c:18:b6:8c:5a:e2:51:63:2d:
6a:47:0f:68:41:bd:93:f1:3d:09:3e:16:8f:14:69:b9:d1:7b:
0c:6b:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:48:55 2026 by rpki-client