
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/30695B4066BD11F0A139834EC4F9AE02.roa
File: 30695B4066BD11F0A139834EC4F9AE02.roa (raw, json)
Hash identifier: tuKV+XJ9oFf4l5CW68AAzUNiBe+/dLxTRpMLMy+BZ5E=
Subject key identifier: 2A:AD:28:78:11:78:3E:5B:F9:C1:80:E5:3B:CB:C4:5C:F1:F2:C8:A9
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C9E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/30695B4066BD11F0A139834EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:48:53 +0000
ROA not before: Tue 22 Jul 2025 05:31:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154069
IP address blocks: 165.101.228.0/24 maxlen: 24
165.101.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11422 (0x2c9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 22 05:31:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c255-e8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:14:2b:67:b3:53:e3:64:06:27:ca:f4:23:
0d:23:f6:5b:f3:93:62:0b:17:a7:74:f1:e6:f3:c4:
61:1a:26:73:4c:77:ff:80:10:06:7f:cc:76:17:09:
4a:3d:64:72:be:ff:5a:02:1b:98:3a:f7:20:20:d8:
f1:a5:83:b5:ee:6e:f5:06:cc:ea:3c:ea:18:b7:56:
22:ef:eb:0a:04:74:ae:d0:3c:4f:8f:62:71:c9:99:
a3:9d:91:51:ab:a9:95:e7:ce:cb:4b:9a:05:9e:c9:
c1:ea:2b:3d:89:3a:f3:bd:f1:52:86:76:6f:6a:3c:
8e:8a:84:aa:97:64:fc:43:6a:69:a7:fb:c0:d5:70:
ba:d9:fb:87:6a:fb:37:18:e0:57:c9:05:90:ce:0e:
62:7b:3e:95:1a:93:d5:01:1f:a8:f9:90:ad:f8:d4:
1e:b3:5d:60:86:67:ae:fa:4e:fa:21:8c:f1:2c:30:
f2:23:f5:55:a6:b9:cf:a1:27:dc:cd:a2:9f:31:bd:
74:08:49:8e:45:37:e2:72:11:c0:ff:b5:8d:63:f0:
ba:84:7d:7a:64:52:7d:43:c6:3f:f9:1b:17:a2:df:
7d:1f:9d:98:c3:4e:46:d5:b1:83:df:35:c6:0c:4e:
16:6d:fd:76:db:d4:68:e6:6b:ff:a7:93:65:e3:47:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AD:28:78:11:78:3E:5B:F9:C1:80:E5:3B:CB:C4:5C:F1:F2:C8:A9
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/30695B4066BD11F0A139834EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.228.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:0a:e4:8c:e6:da:9d:c6:fd:02:47:67:97:58:1c:a4:d7:67:
28:58:68:74:cb:d7:6e:c7:b5:81:13:f7:dc:6f:1d:b7:58:ed:
01:99:28:69:97:c3:5b:ab:66:27:1c:53:7d:6c:48:c4:59:10:
dd:7a:ff:b1:c4:35:3b:f8:37:d1:5a:43:73:ad:b5:c1:61:73:
0c:c5:28:91:fe:6e:8f:fe:13:44:67:0f:9e:3d:4a:9e:65:ce:
0d:8f:96:15:8e:4d:ec:28:7d:75:30:b1:b5:4f:d4:fd:84:6c:
60:52:a1:c3:66:1a:a1:af:a4:fd:0f:bc:05:f5:9a:06:f1:d7:
49:6c:45:2e:cc:8c:91:8e:98:db:c1:c9:12:6d:cd:53:68:83:
c8:5c:84:f2:fd:ad:08:09:0f:fd:67:f7:ed:89:40:42:41:d1:
d3:a7:d9:51:df:bd:87:a3:d6:3e:1d:1e:a8:43:61:79:5d:7a:
06:23:51:10:2a:b3:16:84:8c:5c:47:c4:1e:e6:89:60:a0:5a:
0d:22:ca:61:37:76:64:8d:98:ba:a5:9a:67:f1:76:3b:5a:08:
87:9b:a4:e2:31:0b:94:15:3a:fb:bc:9c:55:66:64:e5:54:80:
34:ec:d9:22:33:1a:2b:87:bd:f3:8e:b2:04:ae:b1:6b:16:35:
8d:4f:0b:cd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNzIyMDUzMTU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzI1NS1lOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1VQUK2ezU+NkBifK9CMNI/Zb85NiCxendPHm88RhGiZzTHf/gBAGf8x2FwlK
PWRyvv9aAhuYOvcgINjxpYO17m71BszqPOoYt1Yi7+sKBHSu0DxPj2JxyZmjnZFR
q6mV587LS5oFnsnB6is9iTrzvfFShnZvajyOioSql2T8Q2ppp/vA1XC62fuHavs3
GOBXyQWQzg5iez6VGpPVAR+o+ZCt+NQes11ghmeu+k76IYzxLDDyI/VVprnPoSfc
zaKfMb10CEmORTfichHA/7WNY/C6hH16ZFJ9Q8Y/+RsXot99H52Yw05G1bGD3zXG
DE4Wbf1229Ro5mv/p5Nl40eouQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCqtKHgR
eD5b+cGA5TvLxFzx8sipMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzA2OTVCNDA2
NkJEMTFGMEExMzk4MzRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWXkMA0GCSqGSIb3DQEBCwUAA4IBAQCrCuSM5tqdxv0CR2eXWByk
12coWGh0y9dux7WBE/fcbx23WO0BmShpl8Nbq2YnHFN9bEjEWRDdev+xxDU7+DfR
WkNzrbXBYXMMxSiR/m6P/hNEZw+ePUqeZc4Nj5YVjk3sKH11MLG1T9T9hGxgUqHD
Zhqhr6T9D7wF9ZoG8ddJbEUuzIyRjpjbwckSbc1TaIPIXITy/a0ICQ/9Z/ftiUBC
QdHTp9lR372Ho9Y+HR6oQ2F5XXoGI1EQKrMWhIxcR8Qe5olgoFoNIsphN3ZkjZi6
pZpn8XY7WgiHm6TiMQuUFTr7vJxVZmTlVIA07NkiMxorh73zjrIErrFrFjWNTwvN
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:19 2026 by rpki-client