
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1C089672407811F089B24D29C4F9AE02.roa
File: 1C089672407811F089B24D29C4F9AE02.roa (raw, json)
Hash identifier: B2h6hubSnB9ztO39EAdQLVjtPaj1wq/53L6r7fs+mTU=
Subject key identifier: EF:DB:58:6F:86:F1:72:73:F3:15:E9:B1:98:EB:C2:8F:4D:36:60:AB
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C7E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1C089672407811F089B24D29C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:48:08 +0000
ROA not before: Tue 03 Jun 2025 12:41:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153931
IP address blocks: 165.99.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11390 (0x2c7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jun 3 12:41:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c228-3f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:c3:8f:53:ee:33:53:72:67:e2:1a:27:3b:
ee:e1:fb:5e:fd:0e:6d:a8:22:a1:86:49:f0:9f:b7:
81:8a:5b:39:7e:70:07:6e:61:42:42:86:f3:c5:85:
31:42:89:15:82:77:14:02:22:0c:9a:5f:11:79:d0:
66:ea:ff:e0:15:ed:db:a3:30:76:9b:f3:f5:36:ad:
1d:21:9c:4e:9f:d3:ec:d0:78:15:6a:9e:17:48:88:
74:4f:20:a0:dd:75:70:5d:6c:26:d7:a5:a3:7e:eb:
11:4e:ca:f0:cd:dd:8b:2b:5e:d5:90:74:de:02:cd:
6e:e1:18:eb:57:d6:f1:ea:1f:8a:70:e2:e4:40:a7:
c2:b5:dc:23:9b:45:3b:f5:46:d4:e1:c2:8e:44:da:
fb:19:89:ba:96:27:98:e8:2a:4f:54:58:22:f9:56:
6f:7d:94:07:92:04:8a:eb:56:f1:03:3a:4a:28:64:
8c:db:96:6a:2c:dc:2c:22:e6:ba:09:db:16:f8:fa:
f7:a6:f0:97:da:91:27:a6:bf:48:67:e8:48:77:8d:
29:d4:b6:18:d7:83:55:84:97:95:66:28:67:cf:3b:
72:c9:dd:bf:85:04:cf:d9:4b:aa:a9:b1:5f:0a:44:
a6:e5:ff:2e:bc:19:f8:72:92:cc:f3:a8:05:d0:73:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DB:58:6F:86:F1:72:73:F3:15:E9:B1:98:EB:C2:8F:4D:36:60:AB
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1C089672407811F089B24D29C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.166.0/23
Signature Algorithm: sha256WithRSAEncryption
75:28:02:e6:bc:eb:40:ef:b7:7a:1e:d1:39:03:bc:85:8f:24:
eb:e3:09:81:80:1b:43:f8:51:18:61:c1:c1:6e:5b:78:21:b6:
97:d4:d1:d8:3c:1d:a5:c7:a6:1e:6b:0e:da:94:a2:ea:d4:af:
12:74:9e:1f:d9:cc:4e:d1:b9:55:9e:88:f4:12:58:4f:c6:80:
8d:4c:7a:e7:17:ba:0f:2d:fc:3b:4f:44:55:8f:01:53:ce:36:
50:f2:ea:e8:84:bf:81:8f:57:2a:c4:9d:71:6f:93:2f:4e:77:
d1:21:fe:2d:2a:84:27:e5:69:b8:f9:0b:d0:e1:ca:dd:d6:0b:
25:cf:3d:c3:63:93:f3:d0:2a:dd:e2:91:e7:7e:a1:09:ae:5c:
92:9c:ab:14:6f:4f:f6:ce:f6:8f:6f:6f:17:91:9b:9b:fb:fd:
d4:fb:e3:6c:25:85:6a:ef:16:84:9b:e6:bd:67:ee:77:94:ce:
ba:e6:cb:57:5d:a5:ae:44:38:8d:fa:f5:15:78:02:13:23:7a:
af:c7:39:6d:3a:75:f8:36:b3:4c:a8:c5:bc:73:26:64:e2:37:
e2:25:51:58:8a:b1:ed:3d:cc:6c:3b:6a:e9:42:c3:f8:df:fe:
93:13:1f:42:59:e7:08:34:51:91:0e:a8:16:8f:cc:49:29:26:
2a:88:34:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:26 2026 by rpki-client