
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DF9BD8D66C6711F0870D2268C4F9AE02.roa
File: DF9BD8D66C6711F0870D2268C4F9AE02.roa (raw, json)
Hash identifier: TEsjUy0pOaQ6SP67rqvMN8jap1wcGHEEhZRw/eo9B2Y=
Subject key identifier: 67:53:0A:4E:97:44:98:8B:E1:A4:22:78:73:11:F5:63:23:E7:E7:3A
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2CA6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DF9BD8D66C6711F0870D2268C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:49:03 +0000
ROA not before: Tue 29 Jul 2025 10:36:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140206
IP address blocks: 165.99.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11430 (0x2ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 29 10:36:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c25f-683e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:cd:74:46:73:0c:02:46:2a:68:4d:de:f5:
e1:11:ed:eb:d7:45:77:5f:ca:9a:75:49:4c:35:1a:
0b:66:6d:6a:e2:86:82:e6:36:42:84:53:82:4a:c2:
1e:a8:f7:5f:50:fb:5e:eb:86:7a:9a:2f:a5:50:6b:
6a:0d:eb:22:43:38:95:91:db:c5:67:91:09:f8:6f:
a8:ae:14:75:bb:df:5d:a2:c7:20:45:fb:c0:3f:4a:
51:86:38:4f:ab:52:67:b4:cf:c3:a2:6b:c9:94:5b:
ef:d9:98:6d:e2:fd:3f:21:ea:50:b0:47:4e:ec:3a:
4e:8f:ba:0f:2d:b6:cc:cb:df:17:0f:93:fe:80:de:
f8:77:53:cd:93:3a:fc:a3:e9:94:f1:fd:b0:b6:1d:
04:6d:f2:79:90:db:11:af:bc:f6:70:dc:1a:d7:7f:
8a:8d:3a:98:43:32:22:7b:39:ff:37:7d:fe:0b:ef:
bf:b4:b2:b1:68:07:93:c3:a7:e3:6c:3d:a9:7b:fa:
bd:87:2f:d7:c4:7d:24:c8:bd:8c:39:3a:3d:13:13:
3f:6d:53:92:0c:c9:fb:ef:76:e3:42:f7:89:a3:23:
90:82:cd:da:b8:61:f3:eb:64:d2:04:e0:51:b7:89:
4f:cb:b3:e8:b6:8d:26:cc:7a:a1:7c:2a:da:b5:2a:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:53:0A:4E:97:44:98:8B:E1:A4:22:78:73:11:F5:63:23:E7:E7:3A
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DF9BD8D66C6711F0870D2268C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.190.0/24
Signature Algorithm: sha256WithRSAEncryption
30:25:6c:57:72:8d:e9:f1:d3:ac:b1:e5:e4:9c:88:c2:6e:87:
ec:2a:87:93:29:f2:7b:cd:93:16:04:d8:0a:57:d0:98:bf:ba:
0f:bd:66:f4:44:11:b2:b1:3e:9d:8b:07:3a:4b:50:ed:8e:f1:
7a:e2:0f:61:3f:23:30:5c:fb:59:76:4d:24:07:9e:bd:79:52:
96:a0:14:c6:88:e6:4e:a2:73:89:f0:69:9a:cf:cc:6c:e6:8f:
9e:e4:dc:18:3e:43:b2:e9:b3:a4:13:f0:59:4f:c7:32:75:12:
d4:b0:e2:1b:73:ee:fc:8e:87:cf:6e:93:e1:d7:12:31:f3:38:
6b:01:3a:f9:41:66:04:5b:37:c1:81:5d:e7:be:d0:7d:c2:dc:
8b:91:d1:5e:4c:3a:80:fc:b3:79:4d:e1:27:3a:1f:f9:44:61:
c1:03:58:eb:26:11:bc:4e:c4:c4:67:6a:a2:3c:b6:02:e9:bf:
ab:d2:42:0b:b9:96:19:f7:85:6b:7f:25:7d:3f:95:a6:34:91:
37:05:1c:8d:3b:45:4e:03:fc:f7:44:b1:af:03:19:8f:40:6a:
e9:23:0b:03:13:78:2d:ec:9e:d4:d4:f2:20:55:ea:fd:28:fd:
b3:16:94:2a:c1:aa:01:a8:65:c3:0f:c7:0a:2c:f0:05:cf:09:
fc:4d:05:28
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNzI5MTAzNjI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzI1Zi02ODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5aXNdEZzDAJGKmhN3vXhEe3r10V3X8qadUlMNRoLZm1q4oaC5jZChFOCSsIe
qPdfUPte64Z6mi+lUGtqDesiQziVkdvFZ5EJ+G+orhR1u99doscgRfvAP0pRhjhP
q1JntM/DomvJlFvv2Zht4v0/IepQsEdO7DpOj7oPLbbMy98XD5P+gN74d1PNkzr8
o+mU8f2wth0EbfJ5kNsRr7z2cNwa13+KjTqYQzIiezn/N33+C++/tLKxaAeTw6fj
bD2pe/q9hy/XxH0kyL2MOTo9ExM/bVOSDMn773bjQveJoyOQgs3auGHz62TSBOBR
t4lPy7Poto0mzHqhfCratSouIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGdTCk6X
RJiL4aQieHMR9WMj5+c6MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREY5QkQ4RDY2
QzY3MTFGMDg3MEQyMjY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWO+MA0GCSqGSIb3DQEBCwUAA4IBAQAwJWxXco3p8dOsseXknIjC
bofsKoeTKfJ7zZMWBNgKV9CYv7oPvWb0RBGysT6diwc6S1DtjvF64g9hPyMwXPtZ
dk0kB569eVKWoBTGiOZOonOJ8Gmaz8xs5o+e5NwYPkOy6bOkE/BZT8cydRLUsOIb
c+78jofPbpPh1xIx8zhrATr5QWYEWzfBgV3nvtB9wtyLkdFeTDqA/LN5TeEnOh/5
RGHBA1jrJhG8TsTEZ2qiPLYC6b+r0kILuZYZ94VrfyV9P5WmNJE3BRyNO0VOA/z3
RLGvAxmPQGrpIwsDE3gt7J7U1PIgVer9KP2zFpQqwaoBqGXDD8cKLPAFzwn8TQUo
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:35 2026 by rpki-client