
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/44870F16B89B11F0AA8BE540C4F9AE02.roa
File: 44870F16B89B11F0AA8BE540C4F9AE02.roa (raw, json)
Hash identifier: 6MEPy4TbEF8KY0nnToZHYvyVBrVJUTtn24QQv888rTw=
Subject key identifier: AD:8F:F3:67:E6:F3:48:D9:CD:0E:A4:77:1D:63:FA:BA:04:67:E9:A7
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1FDB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/44870F16B89B11F0AA8BE540C4F9AE02.roa
Signing time: Mon 03 Nov 2025 09:59:19 +0000
ROA not before: Mon 03 Nov 2025 09:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150605
IP address blocks: 165.99.178.0/24 maxlen: 24
165.99.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8155 (0x1fdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Nov 3 09:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69087cf7-d382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:eb:8d:01:2c:5a:67:3a:cf:1c:bf:c1:a4:
d1:50:ae:17:eb:01:ea:f9:18:4f:77:2f:e3:0f:0a:
bb:34:72:c0:15:d2:78:17:73:77:2d:e4:79:e3:67:
5b:b6:ed:83:14:57:89:78:4d:a5:22:c8:17:fa:b4:
4d:05:0b:10:f8:e0:21:0f:dc:5b:27:f2:30:23:71:
56:32:e3:80:d2:dc:bd:76:45:8a:d2:af:35:a2:ef:
26:20:01:8d:b3:be:20:ce:a0:f0:7e:a4:df:20:42:
0e:47:b7:3c:ee:df:9d:95:d2:c2:49:2b:2a:8c:a6:
fb:49:4b:a1:3c:73:d9:67:e5:51:68:42:76:0d:0e:
16:5f:81:e3:05:92:07:2e:22:48:83:93:70:ee:12:
3f:09:4d:7b:52:df:af:05:19:24:a5:bf:a3:4e:83:
a0:0d:77:93:86:2e:06:03:d8:02:30:73:7d:d3:ea:
bf:89:bb:f2:ec:00:39:0d:0d:22:01:c6:fb:57:b5:
5a:32:d5:bc:bf:c9:ca:cb:28:5a:79:8e:e7:de:8d:
de:fb:1e:20:9c:8d:37:7c:d3:0f:bf:c5:1e:71:31:
9d:3d:af:a4:82:b7:1e:7b:98:97:68:ee:d1:9e:75:
e4:8b:0e:2c:b7:4a:69:e6:82:75:16:17:26:ff:ca:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8F:F3:67:E6:F3:48:D9:CD:0E:A4:77:1D:63:FA:BA:04:67:E9:A7
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/44870F16B89B11F0AA8BE540C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.178.0/23
Signature Algorithm: sha256WithRSAEncryption
65:82:4b:66:ff:1f:91:5f:bb:b9:b7:f7:22:4a:ae:89:33:66:
f8:85:f5:6c:60:10:18:a7:0c:02:ca:28:58:10:3f:d1:bb:3f:
52:23:66:f4:67:46:cb:e1:68:50:ce:09:82:13:9d:24:03:c7:
37:e6:54:52:53:10:a6:8e:d5:2e:00:6c:c5:62:6c:a4:91:2b:
f8:fb:42:9a:ac:f3:94:51:ef:86:38:39:b5:7e:f9:24:f3:fc:
27:cd:18:e1:f4:b7:a2:06:e2:70:89:17:49:6f:9e:39:47:20:
a6:a4:a6:22:1f:54:f1:b4:c5:7b:03:e0:b4:66:18:fe:ee:79:
ee:8c:79:6c:17:26:58:ca:41:4b:63:83:1b:9c:e6:5e:64:20:
14:5c:df:51:f4:a0:ae:2c:ba:2b:85:a5:85:22:c4:26:87:2c:
18:c5:cb:ee:1a:be:88:fd:64:cd:ff:64:cb:98:c8:d5:fb:c8:
c9:6b:a7:a1:32:ee:b5:84:41:a8:44:f2:f1:60:d5:0d:94:e2:
9a:aa:d6:90:3c:33:5a:b0:5a:5a:c5:1d:26:ba:75:ef:e9:95:
20:39:07:b4:f6:8f:50:71:27:dd:03:74:27:b8:29:f4:96:79:
b5:d1:03:a6:c0:ab:34:f0:0b:88:fd:bf:d5:10:f1:90:42:18:
77:a3:35:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:13:24 2025 by rpki-client