
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/529C31F82BDD11F085C9B049C4F9AE02.roa
File: 529C31F82BDD11F085C9B049C4F9AE02.roa (raw, json)
Hash identifier: IpbrCutJiYMVwDJunxWyRW7+WcwgHQvCjUXY8x3DP3M=
Subject key identifier: 09:B4:78:A6:0D:85:A2:A6:96:31:51:A3:3C:7A:D8:48:F9:37:6F:5A
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2B9D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/529C31F82BDD11F085C9B049C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:42:39 +0000
ROA not before: Thu 08 May 2025 15:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133697
IP address blocks: 165.99.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11165 (0x2b9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c0df-8d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:98:91:dd:df:2e:60:43:31:57:4c:ed:de:
3e:ca:44:68:98:b8:6e:5b:0f:ea:85:dd:1b:7c:d6:
51:ef:ba:46:35:cf:b5:d1:36:86:e7:87:73:42:90:
df:0b:04:49:e2:7f:41:09:33:86:53:84:71:82:37:
84:77:c8:66:90:f0:b4:1b:8a:95:c8:15:5f:2a:7b:
3f:a9:5b:83:a6:ee:7d:4e:00:db:e5:91:27:84:ab:
e5:cc:68:7b:5e:05:60:55:e2:13:7a:c5:ba:a2:ee:
51:d4:b1:2d:63:eb:6d:2f:2e:1f:d3:17:fa:96:23:
58:e2:21:5c:22:22:09:ac:c7:57:76:05:54:d0:f6:
06:9b:3b:74:ba:9f:d8:ca:69:b0:ae:3a:d8:d7:77:
e0:81:e4:be:f7:4b:1c:6b:1f:ca:4b:ea:c2:07:69:
39:b2:98:ff:0a:73:e2:b2:5a:2b:a5:28:fb:68:d2:
37:5b:60:ae:23:2d:2b:25:3d:3d:ea:ef:5e:f0:3b:
da:f4:41:ad:61:00:bb:f2:f9:bf:e4:72:72:86:2e:
8f:9d:82:5e:ec:98:a8:9e:1d:02:11:1a:2a:ec:3a:
71:82:87:64:b8:79:70:bb:f5:e7:04:ea:c9:e5:17:
6b:6c:1e:86:d0:5d:3f:09:ed:7f:3b:08:53:72:ac:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:78:A6:0D:85:A2:A6:96:31:51:A3:3C:7A:D8:48:F9:37:6F:5A
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/529C31F82BDD11F085C9B049C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.0.0/23
Signature Algorithm: sha256WithRSAEncryption
20:d9:c8:2f:51:9c:2c:ca:22:cf:48:c7:78:31:c3:0e:55:41:
11:89:74:f6:90:50:3b:19:de:7c:d8:90:a1:c9:1a:59:2a:13:
59:2c:97:34:b4:c3:ce:12:2b:10:af:ab:ad:8a:cc:27:4f:b9:
c4:e0:ea:4c:d7:04:30:f2:bb:67:42:cc:67:3e:23:bc:a2:61:
6c:87:f4:bb:ad:e3:31:76:a4:19:ec:c2:bc:04:ff:ff:b1:fb:
29:a0:fa:e0:e0:db:df:01:c7:3b:f3:43:36:30:94:15:8a:95:
99:42:42:61:fa:1f:a7:08:4f:c4:34:04:2e:cd:97:5a:db:d8:
72:81:d8:b3:9b:02:80:8d:5f:fa:38:11:57:f2:7a:f6:cb:b4:
68:b8:3b:75:92:f5:7f:2d:44:94:34:bd:1f:fb:11:dd:2f:6e:
ed:0f:bb:ec:36:91:20:4d:5f:be:11:17:3d:46:97:b9:6d:7e:
5c:b1:6f:dc:2b:14:74:6c:07:d0:5e:5c:ab:98:d3:c7:0e:9e:
fe:fc:5c:3c:44:91:90:0a:42:94:00:8f:58:24:4c:37:ae:24:
fa:e9:e8:a0:6f:19:ff:8d:30:d4:b1:56:ce:67:5c:ce:b0:ed:
a9:9c:b0:21:6a:fb:a1:33:00:3a:4a:4b:c8:ce:ed:d4:8c:79:
9d:af:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:47 2026 by rpki-client