
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DECB9805B1B11F086BA5E0FC4F9AE02.roa
File: 4DECB9805B1B11F086BA5E0FC4F9AE02.roa (raw, json)
Hash identifier: VlUVeuwA8GhF6Q5/4ASgbksEef8J8Lv78HLQCqw0bus=
Subject key identifier: AF:76:71:43:80:1B:DA:B0:B4:5C:CA:94:B5:1B:DA:4C:28:E3:86:FB
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C95
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DECB9805B1B11F086BA5E0FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:48:40 +0000
ROA not before: Mon 07 Jul 2025 10:32:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154026
IP address blocks: 165.101.136.0/24 maxlen: 24
165.101.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11413 (0x2c95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 7 10:32:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c248-6fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:19:cf:51:ae:e9:b0:86:25:ba:07:83:96:
b0:a8:47:02:a5:22:94:9e:96:6e:7d:7a:2a:5c:2c:
9e:33:46:2a:fa:1f:9a:39:cb:db:f4:52:c2:3a:e2:
37:67:cd:b3:9e:30:58:1f:e4:2d:cb:5d:19:d0:49:
e9:26:0d:3a:ca:66:aa:e2:57:59:46:75:e3:51:90:
ac:25:1a:27:e4:99:f6:82:4a:e4:e8:24:79:5e:8f:
5c:70:96:b5:93:9b:f0:13:e8:ed:4a:9b:00:5f:0c:
2f:26:a5:9b:ca:f5:0b:7f:ba:e0:e4:74:22:eb:44:
89:13:b5:0c:b5:83:c4:a9:3b:98:4e:75:29:be:74:
4b:95:4a:1a:6c:23:56:6d:ef:d7:f0:d7:c3:b1:b8:
9f:ea:e0:f4:ef:cb:a3:14:bf:e0:cb:7a:27:63:96:
33:6f:a2:99:5b:c3:d3:85:f3:6f:f3:29:12:09:f6:
4c:19:27:15:06:88:bc:ff:7c:03:ca:d8:f9:f1:9f:
5e:f9:0c:86:2d:35:04:e7:d2:6c:0b:29:8e:0d:2d:
50:5f:68:f1:d1:24:2e:1d:28:6c:7a:06:17:4f:16:
07:fc:10:ce:4c:3a:69:ed:7d:11:f6:11:65:59:57:
1a:99:96:b9:00:7d:a9:9b:4e:a9:d4:86:76:44:f0:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:76:71:43:80:1B:DA:B0:B4:5C:CA:94:B5:1B:DA:4C:28:E3:86:FB
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DECB9805B1B11F086BA5E0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.136.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:9e:ed:6c:a0:7a:9c:1b:34:08:33:16:25:d8:b8:00:ed:e4:
82:b0:2a:87:43:8f:77:62:6c:5a:de:9b:4c:ba:f0:46:3a:f4:
f2:3e:f0:27:29:73:27:5f:9f:de:bf:1c:2b:9c:15:84:05:95:
91:e9:fd:a2:d7:96:73:5d:7e:65:e9:42:28:77:82:6c:78:d5:
b4:82:df:ec:28:c9:b6:b7:bc:7d:f8:65:94:6a:a6:0e:8a:cd:
dd:e2:f3:53:c9:94:81:ee:1f:d0:84:44:9f:7f:3c:fc:a0:3d:
9f:e9:a3:ad:6d:a7:94:c3:06:c2:cd:1b:b1:c5:a9:d7:8b:4f:
91:89:4a:50:8c:43:48:cd:00:29:8f:10:7b:bb:7b:f1:31:1f:
9d:1f:46:cc:91:6b:d7:76:51:8c:0b:29:b7:f2:b7:c3:8a:8c:
63:47:4a:8f:da:df:1b:d3:ee:a9:79:a8:1d:c0:30:7b:dd:4b:
69:c7:34:a6:54:5d:ec:40:be:0f:3e:6a:36:9e:06:38:80:28:
02:a5:bf:4a:96:32:b7:d3:dc:e0:c1:da:10:1b:fc:b0:e2:10:
d6:4a:34:15:06:0d:c2:f4:4b:72:3a:f1:3c:0d:f2:4d:78:a3:
f4:96:08:cc:97:49:2d:fb:b4:40:19:c0:30:e7:3f:cb:b2:b0:
7d:6d:30:2f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNzA3MTAzMjU0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzI0OC02ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1KYZz1Gu6bCGJboHg5awqEcCpSKUnpZufXoqXCyeM0Yq+h+aOcvb9FLCOuI3
Z82znjBYH+Qty10Z0EnpJg06ymaq4ldZRnXjUZCsJRon5Jn2gkrk6CR5Xo9ccJa1
k5vwE+jtSpsAXwwvJqWbyvULf7rg5HQi60SJE7UMtYPEqTuYTnUpvnRLlUoabCNW
be/X8NfDsbif6uD078ujFL/gy3onY5Yzb6KZW8PThfNv8ykSCfZMGScVBoi8/3wD
ytj58Z9e+QyGLTUE59JsCymODS1QX2jx0SQuHShsegYXTxYH/BDOTDpp7X0R9hFl
WVcamZa5AH2pm06p1IZ2RPBCVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK92cUOA
G9qwtFzKlLUb2kwo44b7MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNERFQ0I5ODA1
QjFCMTFGMDg2QkE1RTBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWWIMA0GCSqGSIb3DQEBCwUAA4IBAQCbnu1soHqcGzQIMxYl2LgA
7eSCsCqHQ493Ymxa3ptMuvBGOvTyPvAnKXMnX5/evxwrnBWEBZWR6f2i15ZzXX5l
6UIod4JseNW0gt/sKMm2t7x9+GWUaqYOis3d4vNTyZSB7h/QhESffzz8oD2f6aOt
baeUwwbCzRuxxanXi0+RiUpQjENIzQApjxB7u3vxMR+dH0bMkWvXdlGMCym38rfD
ioxjR0qP2t8b0+6peagdwDB73UtpxzSmVF3sQL4PPmo2ngY4gCgCpb9KljK309zg
wdoQG/yw4hDWSjQVBg3C9EtyOvE8DfJNeKP0lgjMl0kt+7RAGcAw5z/LsrB9bTAv
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:36 2026 by rpki-client