
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7E94620E469911F088C2CD47C4F9AE02.roa
File: 7E94620E469911F088C2CD47C4F9AE02.roa (raw, json)
Hash identifier: VVZdNBkOvPnY1lrRtxiKipzWYrGIGdAs/cKLDJ1Md9s=
Subject key identifier: 5F:04:98:7C:0F:E4:C9:3B:C4:D3:E3:5E:CB:EB:2E:F0:5E:B4:74:EA
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C84
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7E94620E469911F088C2CD47C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:48:17 +0000
ROA not before: Wed 11 Jun 2025 07:55:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153955
IP address blocks: 165.99.226.0/24 maxlen: 24
165.99.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11396 (0x2c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jun 11 07:55:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c231-4762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:29:e1:54:9e:17:19:40:e4:39:1e:ee:8c:
90:f3:94:31:63:e7:f4:e9:77:14:46:9f:95:03:21:
e7:07:d0:7d:86:e3:6e:8b:dd:05:c1:c5:cc:d1:9d:
28:cf:af:79:0d:7e:3a:d1:5f:d8:6d:9d:c3:ad:1c:
81:e6:f2:df:84:ba:20:2b:06:80:7b:30:c0:8e:ac:
e4:bc:5d:74:ec:2f:28:4b:31:6d:17:29:20:0c:36:
c4:68:4b:2e:ef:22:29:9f:7b:2b:2d:60:74:41:34:
09:e1:6f:33:34:cd:4e:2d:49:63:62:ee:37:66:bc:
25:55:7a:fe:c9:9a:68:d1:01:25:29:4c:b8:fb:58:
cf:c5:85:95:1b:e2:37:80:78:7e:c9:26:8a:d4:66:
26:f7:2f:02:bb:6b:a8:95:ac:47:aa:13:f4:cc:4a:
a2:a2:2d:6a:60:93:5e:94:37:ac:5e:3a:f4:12:0a:
b4:d0:33:a5:17:1a:12:ab:2c:76:33:0b:f0:f8:aa:
58:3e:e0:8a:49:6e:ea:13:96:48:52:fb:ee:e2:25:
db:35:1f:b0:51:fc:03:44:64:52:5b:b5:eb:ea:0c:
55:e1:8c:1f:84:e2:cd:ce:18:36:50:bc:7c:d4:df:
f0:a9:60:f5:5c:d7:63:e1:84:3c:02:98:d5:94:ee:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:04:98:7C:0F:E4:C9:3B:C4:D3:E3:5E:CB:EB:2E:F0:5E:B4:74:EA
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7E94620E469911F088C2CD47C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.226.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:49:d6:d4:7c:e9:85:cc:20:13:71:7e:c6:a4:ea:44:37:6c:
44:df:95:f2:7d:af:63:53:50:8d:e9:50:a6:36:80:60:40:fb:
db:f4:01:6a:44:57:d2:a1:12:ac:13:dc:6b:d2:04:59:48:c3:
e6:d8:0b:ac:d5:02:56:b6:bf:9a:c0:a5:66:64:82:97:78:d0:
5d:64:8f:c5:34:64:ad:7e:6d:8e:ce:24:74:ab:c3:24:17:ae:
22:38:2a:69:ef:04:8f:b6:5d:f2:d8:cb:7c:d9:e2:30:f9:58:
d9:79:86:38:b2:c5:95:02:67:3f:6c:13:a2:d1:ee:ab:2b:d8:
02:a3:db:24:cf:34:e1:f5:41:bd:15:45:78:09:59:a2:a2:33:
37:6e:33:0f:b7:9c:5b:d6:10:fe:fc:71:c7:39:55:68:f7:21:
e4:ef:15:47:4d:f3:95:68:57:1a:0c:05:ab:9e:c3:94:6d:b8:
9b:01:02:76:19:45:d9:8d:f3:fc:65:51:24:a7:dd:1c:4e:18:
d3:09:af:5a:f3:f0:6b:f5:6c:c4:39:5e:e1:f4:45:69:cd:71:
aa:38:16:d2:d2:97:0b:2e:ce:6d:f6:21:dd:58:b5:a9:26:54:
8d:e1:59:52:16:87:4d:89:ee:45:c8:ff:f2:69:96:95:f4:59:
56:b1:e3:ef
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNjExMDc1NTUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzIzMS00NzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Qgp4VSeFxlA5Dke7oyQ85QxY+f06XcURp+VAyHnB9B9huNui90FwcXM0Z0o
z695DX460V/YbZ3DrRyB5vLfhLogKwaAezDAjqzkvF107C8oSzFtFykgDDbEaEsu
7yIpn3srLWB0QTQJ4W8zNM1OLUljYu43ZrwlVXr+yZpo0QElKUy4+1jPxYWVG+I3
gHh+ySaK1GYm9y8Cu2uolaxHqhP0zEqioi1qYJNelDesXjr0Egq00DOlFxoSqyx2
Mwvw+KpYPuCKSW7qE5ZIUvvu4iXbNR+wUfwDRGRSW7Xr6gxV4YwfhOLNzhg2ULx8
1N/wqWD1XNdj4YQ8ApjVlO7twQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF8EmHwP
5Mk7xNPjXsvrLvBetHTqMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0U5NDYyMEU0
Njk5MTFGMDg4QzJDRDQ3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWPiMA0GCSqGSIb3DQEBCwUAA4IBAQBPSdbUfOmFzCATcX7GpOpE
N2xE35Xyfa9jU1CN6VCmNoBgQPvb9AFqRFfSoRKsE9xr0gRZSMPm2Aus1QJWtr+a
wKVmZIKXeNBdZI/FNGStfm2OziR0q8MkF64iOCpp7wSPtl3y2Mt82eIw+VjZeYY4
ssWVAmc/bBOi0e6rK9gCo9skzzTh9UG9FUV4CVmiojM3bjMPt5xb1hD+/HHHOVVo
9yHk7xVHTfOVaFcaDAWrnsOUbbibAQJ2GUXZjfP8ZVEkp90cThjTCa9a8/Br9WzE
OV7h9EVpzXGqOBbS0pcLLs5t9iHdWLWpJlSN4VlSFodNie5FyP/yaZaV9FlWsePv
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:05 2026 by rpki-client