
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8A2707C631AC11F1AAE19935B9833773.roa
File: 8A2707C631AC11F1AAE19935B9833773.roa (raw, json)
Hash identifier: vY68wKpJGUKWk5KjA7vDhcXmzWhT4BsQpTdlFl+01xE=
Subject key identifier: 2D:6E:2E:F6:B7:3F:E1:DF:06:B6:2D:0C:9D:82:08:62:65:86:03:2C
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2D7A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8A2707C631AC11F1AAE19935B9833773.roa
Signing time: Mon 06 Apr 2026 11:34:15 +0000
ROA not before: Mon 06 Apr 2026 11:34:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154000
IP address blocks: 165.101.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11642 (0x2d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Apr 6 11:34:15 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69d39a37-db32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:69:3d:ce:ce:93:9d:4b:c8:f1:02:c3:ea:
18:a9:f8:7e:dc:c5:db:9d:a5:c0:60:03:56:80:5c:
8d:34:ea:b9:5e:ce:34:d8:40:66:5d:79:88:06:8e:
34:45:43:0a:51:1a:0b:45:04:24:39:b9:18:46:92:
05:bd:a3:3e:7e:db:ac:18:9f:bd:0f:84:de:03:6f:
60:53:74:38:f6:c5:63:86:b0:fe:8a:14:cb:0e:40:
74:01:bc:76:31:06:23:05:63:bb:24:20:23:3f:f2:
fd:f6:4b:3f:5f:34:33:84:20:6c:de:9b:b7:92:fe:
bf:55:b9:22:cc:bc:62:d5:72:1a:42:82:7f:ff:12:
a8:15:50:98:ff:4f:3a:f9:7e:a6:4b:ef:c0:94:02:
35:57:5f:ac:99:ac:71:bd:84:d0:d4:db:ba:96:32:
63:e8:b3:ac:e8:f0:3e:1c:17:36:da:31:98:c2:48:
d5:fe:bb:48:23:ca:e7:e6:b2:03:f7:09:6f:94:dc:
56:22:7c:77:1c:b4:e3:07:cd:5f:b7:93:dc:71:70:
60:cf:4d:97:34:89:e1:30:64:ea:e6:7d:19:84:4d:
d0:e5:e1:bc:2c:2f:e8:15:d7:0d:f7:4f:23:0f:dd:
40:b8:30:ce:51:73:27:52:1a:2c:6e:d0:76:d0:3f:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:2E:F6:B7:3F:E1:DF:06:B6:2D:0C:9D:82:08:62:65:86:03:2C
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8A2707C631AC11F1AAE19935B9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.59.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1f:9a:bc:fc:e3:fc:ed:ac:c0:1a:26:68:5d:fe:b0:f9:f8:
f1:4a:2c:21:b1:17:55:68:9c:55:3a:2b:1b:fa:c0:d7:54:03:
ef:ba:1b:34:88:1d:c8:57:df:87:a4:20:13:59:8a:e2:8c:9b:
13:26:cc:49:60:ee:6b:f2:d8:25:20:27:f8:f2:66:32:0d:33:
5b:36:8a:23:97:f3:52:b2:cf:b3:84:4b:55:5d:95:5d:40:51:
b5:ce:7c:78:75:d9:46:84:22:fe:33:23:f2:91:8f:47:46:b6:
37:fc:85:92:7d:d5:5b:eb:40:c1:63:be:03:11:f5:22:08:95:
44:f8:49:9f:6d:7b:fd:39:34:db:1b:a0:83:d4:27:24:72:10:
b7:ad:ad:c9:14:16:16:38:0f:66:3d:9d:33:d7:04:b9:cf:6e:
72:20:84:b5:05:49:ef:9c:0c:79:92:e3:51:0c:00:37:c2:83:
6f:11:f6:95:78:b0:db:bb:df:08:a9:68:45:c5:51:fd:a4:4e:
80:d8:0d:67:70:c3:66:79:90:77:01:80:b6:4a:16:f2:22:46:
e3:db:6f:1f:99:33:de:0b:85:e7:c0:15:0f:81:05:56:a1:2a:
3d:23:97:59:cc:33:ca:28:30:9c:d9:1f:99:33:23:e1:54:63:
7e:4c:3e:ff
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNDA2MTEzNDE1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQzOWEzNy1kYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnWJpPc7Ok51LyPECw+oYqfh+3MXbnaXAYANWgFyNNOq5Xs402EBmXXmIBo40
RUMKURoLRQQkObkYRpIFvaM+ftusGJ+9D4TeA29gU3Q49sVjhrD+ihTLDkB0Abx2
MQYjBWO7JCAjP/L99ks/XzQzhCBs3pu3kv6/VbkizLxi1XIaQoJ//xKoFVCY/086
+X6mS+/AlAI1V1+smaxxvYTQ1Nu6ljJj6LOs6PA+HBc22jGYwkjV/rtII8rn5rID
9wlvlNxWInx3HLTjB81ft5PccXBgz02XNInhMGTq5n0ZhE3Q5eG8LC/oFdcN908j
D91AuDDOUXMnUhosbtB20D8hcwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC1uLva3
P+HfBrYtDJ2CCGJlhgMsMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEEyNzA3QzYz
MUFDMTFGMUFBRTE5OTM1Qjk4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWU7MA0GCSqGSIb3DQEBCwUAA4IBAQADH5q8/OP87azAGiZoXf6w
+fjxSiwhsRdVaJxVOisb+sDXVAPvuhs0iB3IV9+HpCATWYrijJsTJsxJYO5r8tgl
ICf48mYyDTNbNoojl/NSss+zhEtVXZVdQFG1znx4ddlGhCL+MyPykY9HRrY3/IWS
fdVb60DBY74DEfUiCJVE+EmfbXv9OTTbG6CD1CckchC3ra3JFBYWOA9mPZ0z1wS5
z25yIIS1BUnvnAx5kuNRDAA3woNvEfaVeLDbu98IqWhFxVH9pE6A2A1ncMNmeZB3
AYC2ShbyIkbj228fmTPeC4XnwBUPgQVWoSo9I5dZzDPKKDCc2R+ZMyPhVGN+TD7/
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:11 2026 by rpki-client