
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/59E4C99A6DD511F0BF66171DC4F9AE02.roa
File: 59E4C99A6DD511F0BF66171DC4F9AE02.roa (raw, json)
Hash identifier: Qz19m1/99W2BaafKcDrYJ4U4INKrNR5TyQyx0giJgbc=
Subject key identifier: 10:1A:4F:6F:F5:67:EA:16:F9:9E:52:86:93:4B:14:8A:31:FD:BB:CF
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1F33
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/59E4C99A6DD511F0BF66171DC4F9AE02.roa
Signing time: Thu 31 Jul 2025 06:12:35 +0000
ROA not before: Thu 31 Jul 2025 06:12:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133294
IP address blocks: 165.99.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7987 (0x1f33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 31 06:12:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=688b0953-b893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:b7:f6:b1:57:6f:f9:51:54:60:ad:16:84:
bf:14:d9:13:69:93:ce:cf:c6:45:f9:fb:76:18:26:
ae:f5:f6:1e:d8:32:81:fb:96:c0:f1:9c:9a:b2:ec:
f2:32:7e:0d:0d:a9:bc:d9:a1:18:90:7a:53:97:30:
86:a6:d6:49:cc:79:11:be:9d:99:1f:03:59:b6:4f:
d2:4b:3e:38:22:78:88:c4:24:51:84:d5:4c:32:c8:
03:60:8a:06:e6:62:13:cd:1f:18:93:65:9f:bc:8b:
61:31:4e:a5:70:e1:d8:4f:b3:96:05:a4:83:3e:2e:
cf:02:64:2e:a1:0c:3c:fd:ec:02:33:76:63:0e:21:
2e:ce:59:73:ef:76:a6:37:94:9b:d7:6a:f2:35:b5:
cd:45:1b:4f:f7:b5:00:43:95:a7:8a:2a:3a:36:2b:
37:08:29:54:9f:81:7b:0c:14:95:b5:81:f5:2c:c9:
49:64:4a:3d:a1:f4:ad:df:5d:43:f6:27:8f:9f:5c:
b9:ce:08:1d:d5:04:f0:79:d4:2b:86:16:3f:3f:01:
d9:f2:1e:0b:63:91:9f:24:ab:98:96:d2:f5:53:3d:
5a:31:b6:dc:55:37:bf:32:09:d9:63:3a:04:d4:72:
40:a3:67:f2:83:b8:7f:f4:f2:44:dc:e9:89:e1:f7:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1A:4F:6F:F5:67:EA:16:F9:9E:52:86:93:4B:14:8A:31:FD:BB:CF
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/59E4C99A6DD511F0BF66171DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.244.0/23
Signature Algorithm: sha256WithRSAEncryption
08:f8:19:25:02:ae:e6:07:6b:c2:ba:34:5c:63:6b:b4:8c:e7:
0b:a7:de:bb:1b:4d:f1:58:e2:06:87:96:d9:65:51:3f:14:66:
4b:11:3d:e1:61:fb:3a:aa:66:4d:c9:a0:07:94:73:24:1d:75:
fa:a0:84:69:a7:38:39:63:b4:a1:2b:cf:ae:9a:2e:93:22:e1:
b7:3d:50:42:c0:6f:d3:d3:b9:47:72:a1:80:2f:1b:58:09:93:
cf:41:3d:e2:63:97:9a:33:49:5d:01:1d:52:5c:d2:90:7e:4c:
2a:99:68:68:15:ff:0e:c8:99:3b:75:39:ff:0f:6f:6e:00:42:
ab:04:00:57:a8:08:32:94:5f:32:2f:da:fc:37:8a:79:8d:99:
23:c3:ab:07:4b:40:df:7c:7d:c3:e9:cc:d5:88:d1:8f:ab:39:
55:be:07:ab:b3:82:48:62:a6:4a:4f:74:9b:6f:8d:66:ad:2b:
35:d2:42:99:b2:42:00:89:aa:4a:39:bb:b7:01:a0:ea:9e:87:
74:fa:c3:4f:54:f7:3b:ee:a5:00:b5:ba:d3:10:59:1d:1f:98:
6b:8e:2c:8a:f4:67:60:50:68:a1:1d:a7:97:4b:51:33:de:6f:
46:01:b3:5c:81:83:b0:55:27:68:fe:ca:2e:52:40:20:22:66:
a1:f9:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:26 2025 by rpki-client