
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa
File: 407A24884C3C11F0A124A87BC4F9AE02.roa (raw, json)
Hash identifier: KgwVPuF72+9Qm7ncTcvls0VEtDVO4wuHz+tNe+EgzlI=
Subject key identifier: 51:94:15:BC:58:25:84:AB:27:12:8F:A4:53:6B:E2:BB:FE:DA:DB:FB
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1EB2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa
Signing time: Wed 18 Jun 2025 12:03:31 +0000
ROA not before: Wed 18 Jun 2025 12:03:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153973
IP address blocks: 165.101.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7858 (0x1eb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jun 18 12:03:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6852ab13-f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:4c:4f:15:1f:51:54:16:e7:5f:fb:6f:53:
ad:de:7f:c1:4b:ff:1a:1e:6a:92:73:6d:35:22:bc:
0b:91:68:f6:b0:54:ad:e9:e4:89:24:d2:d5:ef:71:
a5:77:45:42:b8:37:27:b7:6f:71:b8:f7:c5:5b:b8:
f3:d9:ee:82:8a:c3:d8:c0:35:b3:bc:2b:d6:ef:ef:
3b:c1:1c:4d:8a:84:16:c9:39:c6:d6:cf:21:a2:20:
db:55:bd:db:53:d6:df:19:f5:3c:38:c8:ec:5b:6e:
04:37:ca:d7:ee:c5:df:42:32:7f:e8:6d:90:37:f4:
f6:b5:6f:42:41:11:05:37:e7:08:c6:21:2c:53:d5:
db:b3:3a:49:6b:cc:d8:81:c9:c9:07:a1:94:5b:19:
e3:90:d3:35:bb:94:f3:c7:03:5d:28:b6:b7:b3:5c:
88:9b:72:a4:4d:9c:d7:b9:56:a7:fa:6f:34:04:ce:
3b:13:00:8d:89:5d:10:55:b7:f7:84:c7:2b:fe:cb:
1e:5f:79:32:68:c0:5d:b7:db:e1:d0:b2:66:73:0a:
86:97:e8:1f:3b:2d:25:a1:a3:53:3e:f5:82:c0:63:
ce:28:e0:51:0a:ee:a2:52:e0:ea:87:95:0e:33:d1:
a7:b1:f8:b9:2b:f7:f3:6e:97:71:e3:2b:f8:af:98:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:15:BC:58:25:84:AB:27:12:8F:A4:53:6B:E2:BB:FE:DA:DB:FB
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.10.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:34:6f:6e:b7:80:b1:9c:b1:11:41:15:67:b9:1f:71:13:56:
43:c6:bc:88:09:33:f5:f6:18:f1:da:fc:57:6b:20:02:42:63:
9c:5a:0a:62:8b:22:dc:4c:fd:7e:83:4e:cf:94:cd:5d:47:89:
42:30:37:e3:c4:e0:5a:f1:6c:d8:eb:50:69:41:30:e6:76:98:
ed:6f:69:e0:99:39:49:79:ea:f8:d3:77:6c:d5:fa:0b:31:2d:
72:d7:ac:b1:f7:f9:2c:db:29:82:25:dd:56:1e:15:35:fb:5d:
0c:d1:fe:e9:c7:44:37:20:8a:70:49:09:03:52:f1:9d:60:eb:
28:fe:36:fe:66:20:bd:d2:a2:b2:10:53:0d:57:43:66:87:94:
68:7b:7a:f4:f9:8c:2f:37:26:67:8a:2a:4d:f8:9c:87:98:54:
e8:53:2e:8a:72:76:7a:e5:9d:96:d3:06:33:32:fa:6f:98:5e:
ae:cb:fb:3e:bc:aa:00:f0:1f:43:68:96:64:16:3a:1a:e1:19:
eb:54:97:ee:d7:f3:42:65:d2:d0:9c:35:92:3e:bd:29:01:0f:
59:9c:d1:f1:70:7c:22:f3:b5:5b:50:fa:d6:c3:e5:85:ae:38:
28:26:0d:90:6d:9c:5f:a5:4a:c3:44:0a:e5:a2:a0:b7:bf:1a:
b2:7c:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:20 2025 by rpki-client