
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2B344D6CF6111F0BF1B9179C4F9AE02.roa
File: C2B344D6CF6111F0BF1B9179C4F9AE02.roa (raw, json)
Hash identifier: qtylrKnnvhJ+PvZq5K20els+WMtBycuKiqtOP5U6AWU=
Subject key identifier: 34:8C:71:70:54:E7:B5:4E:30:B4:E3:9F:04:D4:E7:9B:91:1E:33:C4
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CDF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2B344D6CF6111F0BF1B9179C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:50:22 +0000
ROA not before: Tue 02 Dec 2025 09:36:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149532
IP address blocks: 165.99.10.0/24 maxlen: 24
165.99.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11487 (0x2cdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Dec 2 09:36:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2ae-b8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:99:dc:86:4b:80:48:a4:ad:f9:a8:ac:e8:
53:80:d6:0d:8e:06:c9:14:7e:be:a9:82:b4:97:c7:
9b:b6:1e:56:c8:ee:41:9d:dc:02:29:ba:f2:52:87:
8c:23:00:ca:bb:34:2c:ee:3c:e8:07:a0:2a:e7:91:
0d:7c:fd:45:91:51:e1:97:de:42:93:c9:49:3f:f9:
46:43:cd:89:04:c2:6c:6f:e9:eb:0b:11:0c:9c:83:
4c:22:12:06:63:db:71:dd:61:65:6c:2c:46:00:54:
79:13:6c:20:e9:a7:b8:7a:6a:52:38:32:a5:bb:87:
d4:2c:6b:11:28:2e:79:cb:ad:7e:17:40:67:4b:af:
5a:1e:8a:7d:4d:eb:bb:cf:0a:08:ed:5f:8b:a5:7e:
9f:80:78:60:50:d6:32:0c:ae:40:83:53:08:82:5f:
07:f8:ae:6a:d8:50:6d:d0:90:d5:94:d3:31:e2:07:
62:17:f5:48:e5:66:0e:75:fd:dc:2b:45:57:4a:4a:
86:b2:8b:4d:17:73:f3:ea:95:7a:83:5e:c9:0a:dd:
a9:d4:a7:58:75:18:36:0d:62:d4:13:c8:01:58:82:
73:af:63:82:4a:19:ce:02:85:7f:25:18:dc:d6:88:
b1:7b:27:1a:43:51:45:76:79:13:11:b1:95:4e:69:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8C:71:70:54:E7:B5:4E:30:B4:E3:9F:04:D4:E7:9B:91:1E:33:C4
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2B344D6CF6111F0BF1B9179C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.10.0/23
Signature Algorithm: sha256WithRSAEncryption
48:3d:52:2c:72:15:08:63:b0:d2:63:03:dc:df:4a:36:4e:1e:
e1:de:c8:f2:a7:30:70:3c:27:bc:5f:b3:08:5e:22:65:d6:37:
9a:07:b9:a9:9c:e9:d8:24:5c:04:b9:d8:19:8a:31:0c:e3:ef:
e8:df:64:19:5c:29:09:7c:c3:cd:66:fc:0a:7c:32:06:9a:4a:
9b:ef:82:4b:cc:18:6f:ee:01:31:8f:d9:8c:88:7e:fe:96:ba:
63:5b:f4:31:62:48:e4:5f:31:cb:22:60:33:da:7a:9e:93:6b:
b2:7a:46:3a:8d:db:ec:a5:98:52:97:29:3a:6f:21:20:29:93:
db:bb:8d:36:be:3c:7e:91:41:a6:2b:cc:6d:36:95:ca:d2:da:
7d:4e:00:b0:05:69:c5:1e:47:a3:30:5e:7d:a8:4d:f8:71:92:
4b:51:2c:bd:34:4a:81:b6:64:78:df:c7:bf:d9:d3:7a:53:64:
3e:fd:6a:a2:bd:86:a0:03:5b:3c:f2:59:a0:50:15:a0:98:5e:
e2:cf:63:1d:ea:7f:b4:70:fb:b6:93:6d:bc:1b:b5:ca:95:43:
c7:cd:18:b1:c3:ff:69:85:3f:0b:a0:16:9a:59:f5:6b:57:90:
86:24:9f:c0:96:09:93:4f:4e:f7:05:b7:2b:a9:8d:0e:00:e5:
01:23:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:20 2026 by rpki-client