
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2955377658B611F0B105E156C4F9AE02.roa
File: 2955377658B611F0B105E156C4F9AE02.roa (raw, json)
Hash identifier: rkAw/5kVyszq25yrVKCnu23sVYf+sO2fqfhkw0M0vyY=
Subject key identifier: 42:CE:81:DC:A7:4C:CF:64:60:E8:F9:D2:DD:A5:73:BA:E5:99:73:AE
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C93
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2955377658B611F0B105E156C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:48:38 +0000
ROA not before: Fri 04 Jul 2025 09:06:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152298
IP address blocks: 165.101.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11411 (0x2c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 4 09:06:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c246-1b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:01:3c:a4:f3:3f:b6:7a:d0:28:b2:a6:d8:
ae:dd:fb:8f:bd:8a:d4:d9:a1:ac:1a:3f:20:0f:00:
ab:fc:ae:42:17:09:85:29:5b:2b:1f:83:32:36:51:
de:37:54:78:c7:02:72:4e:88:37:e0:1f:92:4c:01:
72:f3:37:6d:b6:f3:4c:1e:58:23:61:4b:cc:06:58:
01:44:89:ff:ce:1f:8a:a7:9e:1f:d6:dd:90:00:66:
2c:90:63:eb:7b:74:b5:8e:dd:ff:fd:bd:9f:d7:ae:
cb:8c:2e:9d:e4:9a:e3:40:c3:c2:ee:67:1a:00:70:
76:0d:5b:1b:8e:44:62:35:e3:0b:7a:1f:ca:07:03:
bc:46:e6:a3:7a:18:01:28:f6:7e:92:6c:af:7d:ce:
89:1e:15:2d:e1:f3:f5:2d:2c:a1:18:8b:68:80:fb:
8b:68:dc:85:e8:16:93:ec:d9:3e:98:85:3c:10:0c:
a9:6e:03:98:48:7d:a4:32:31:03:af:42:ca:a8:88:
46:ba:8f:d3:80:1f:1b:13:e6:a2:6d:53:a3:57:7e:
8d:fc:e1:11:e1:c2:a8:20:bf:4d:3c:d7:16:5d:9a:
e4:8f:45:47:5f:0c:c4:d6:93:43:33:ea:b8:5f:59:
c2:f1:dd:4b:ef:b9:60:af:a0:2a:01:49:00:2b:e0:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:81:DC:A7:4C:CF:64:60:E8:F9:D2:DD:A5:73:BA:E5:99:73:AE
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2955377658B611F0B105E156C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.104.0/23
Signature Algorithm: sha256WithRSAEncryption
10:d6:c3:5f:4e:dd:49:f0:ca:2a:f2:c6:1d:e3:40:7f:44:78:
76:b1:59:83:93:4c:32:49:7b:9f:13:ef:2f:34:2e:1d:ab:5d:
97:aa:46:60:87:8b:ee:bb:f8:5d:d5:23:52:63:0f:b7:a5:f2:
85:42:ac:19:ee:b5:63:60:b8:92:5c:f3:f4:87:8d:e9:79:45:
0a:85:f7:c0:6d:68:1c:96:b0:cb:8f:e7:8f:41:de:36:ef:38:
2e:ed:55:64:0d:a6:7a:85:ef:a2:41:52:fa:70:3d:e2:af:4c:
b2:4c:85:6a:e1:fe:27:f1:24:ee:61:43:45:e0:b1:ed:f2:48:
ed:ad:84:63:eb:8f:2a:88:fa:72:5a:14:63:5d:30:89:1f:a7:
99:cb:d4:5e:f0:bd:2e:5b:09:6d:90:a1:fa:a9:05:30:b1:74:
ea:bb:5b:79:28:7a:ff:af:ce:a4:84:d9:ef:4c:7b:f1:9b:1e:
27:da:b7:24:61:cd:a5:2e:48:49:02:b3:d9:88:44:57:6b:48:
63:f0:e6:8a:a2:45:18:73:e2:49:27:d1:6b:23:cc:cd:27:b6:
13:4d:80:db:f9:a2:87:5a:7c:0c:74:27:d9:2e:e4:37:a0:79:
31:a5:1b:58:06:1d:b6:fb:dc:0e:9f:22:9a:8a:cc:a0:4d:64:
6c:92:37:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:19 2026 by rpki-client