
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/601EFC1E360211F0980BD26DC4F9AE02.roa
File: 601EFC1E360211F0980BD26DC4F9AE02.roa (raw, json)
Hash identifier: 5ORYOexhB/rzAsxSVW+FCc0EGhaBd4Owjk76qG8W7Wg=
Subject key identifier: 94:25:EA:9B:90:42:B1:EE:D5:FE:8F:7B:45:5B:7C:E0:A2:7B:D2:9A
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C74
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/601EFC1E360211F0980BD26DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:47:53 +0000
ROA not before: Wed 21 May 2025 05:13:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153897
IP address blocks: 165.99.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11380 (0x2c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 21 05:13:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c219-9724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:84:6d:0e:49:3d:ed:cc:5d:f0:8c:d6:40:
74:9b:5d:b9:f4:b7:68:5d:86:be:8f:a9:00:77:aa:
64:22:04:48:18:17:54:5c:aa:8e:64:ef:27:d6:8d:
9f:71:fd:fe:6d:35:15:b7:fa:6d:34:f4:01:d6:77:
f3:da:fd:0b:c5:67:4f:f6:87:0e:34:15:58:e4:e9:
7e:8b:58:4a:7a:6d:e1:73:7e:10:0a:d7:2f:d9:49:
fd:93:29:3b:f1:8f:79:42:69:7f:0f:a1:3b:43:cc:
18:fc:0d:ad:c1:a4:c6:84:78:1c:e0:bc:e5:22:cb:
e0:02:d2:da:17:e3:28:64:28:f4:55:f4:c5:3c:9f:
b5:90:24:60:c2:a7:8a:79:84:9e:c8:a1:e2:80:e5:
4c:13:6c:e4:5d:37:6d:67:9b:36:81:02:2e:47:be:
6d:0e:35:f1:05:95:68:6b:e7:1c:c6:bc:ea:23:d0:
ca:c7:35:4b:90:37:0e:1b:d7:2d:2d:15:a5:04:e8:
a5:51:bd:18:dd:c7:44:ad:a0:32:1b:2f:46:4d:e5:
62:14:c0:b4:ac:7b:e7:ed:d8:d2:8f:83:d6:37:8b:
e4:53:be:b1:4a:15:d2:08:65:d9:cc:a3:8e:2f:8e:
28:57:76:fb:06:2f:b0:32:eb:7c:48:2b:ce:21:e3:
73:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:25:EA:9B:90:42:B1:EE:D5:FE:8F:7B:45:5B:7C:E0:A2:7B:D2:9A
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/601EFC1E360211F0980BD26DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.72.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:ad:d6:df:eb:19:59:c3:b3:cf:ba:e9:c8:36:82:13:3c:02:
dc:c3:89:2f:a6:60:22:59:76:44:bf:c3:cc:a5:12:b6:87:41:
4e:22:44:08:fb:c0:d6:1a:6a:4a:36:9d:dc:db:22:0b:b7:f0:
cf:fa:72:28:ad:64:2d:ac:18:62:96:5d:1b:0b:38:4d:c6:46:
45:7d:59:b3:b3:55:df:e9:ca:d6:10:fb:f7:aa:74:6f:6f:e2:
89:a7:10:29:b7:52:31:ef:3a:95:9a:20:44:30:61:a8:ee:af:
97:01:83:fd:80:d1:e5:9d:d6:cd:44:c8:ea:5f:ab:23:e8:79:
9c:ad:05:3e:cd:65:3d:5b:76:84:9a:93:6b:c8:64:60:04:b6:
a7:20:e3:71:13:1e:ea:0e:aa:0c:02:c8:fe:24:58:a5:bd:eb:
28:5e:13:2b:c5:00:a3:7e:0d:51:7c:c3:33:a2:e3:60:5f:48:
cc:ec:c9:5c:37:88:b3:72:7a:2b:3c:5c:a2:d1:ad:e3:f6:ac:
90:44:4e:95:1e:48:2b:43:43:a2:60:e7:f3:ad:12:94:20:a6:
7a:d5:4c:b9:fe:27:4f:b6:9c:37:bd:f7:4d:c7:ab:2c:a2:fa:
41:72:9c:16:b6:0e:44:a7:4a:6a:78:2a:ee:7c:00:f0:2f:77:
ac:ff:36:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:23 2026 by rpki-client