
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa
File: C053613E38B311F08DB63209C4F9AE02.roa (raw, json)
Hash identifier: uKfaLXcOCNJdE2XGkLLuO2/nisMUjVXsuFOacDhWkTw=
Subject key identifier: F5:23:6F:09:06:6C:C5:E8:B4:F6:27:27:D2:FC:2C:3A:F0:04:FA:EA
Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial: 02
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa
Signing time: Sat 24 May 2025 15:28:33 +0000
ROA not before: Sat 24 May 2025 15:28:33 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 132475
IP address blocks: 165.99.90.0/23 maxlen: 23
165.99.90.0/24 maxlen: 24
165.99.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Validity
Not Before: May 24 15:28:33 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6831e5a0-6a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a8:18:0a:e1:af:83:11:a9:53:60:15:19:37:
64:e1:9a:28:ba:c0:01:0b:a3:14:4a:59:6d:e1:1c:
d8:87:ea:ec:42:7d:99:a5:18:26:aa:f9:d5:fb:a1:
06:e4:a3:06:a9:7c:33:46:36:5d:b3:b3:07:15:cb:
3d:a5:84:de:cd:49:9b:31:38:37:1b:a4:6c:7c:d3:
cd:4d:62:0a:9e:42:15:10:b9:55:2d:66:4c:e3:20:
11:64:61:5f:cf:56:33:5c:8d:fe:37:c4:fd:cb:4b:
d6:b2:05:1a:e4:d5:db:33:13:f9:bb:5a:ef:fa:b7:
9d:80:b7:4a:7e:94:7f:29:fe:c6:0b:a6:64:59:ea:
04:a1:1f:32:e6:bd:3d:16:ba:33:0b:1c:56:7e:7f:
8d:10:d3:6e:00:86:d7:07:96:67:53:af:de:34:c4:
5a:42:fc:49:92:a2:4e:b7:68:93:7d:8a:74:1c:24:
8a:e0:51:87:55:85:8e:70:ff:dc:b7:05:a7:81:8b:
23:36:0e:35:76:8f:76:88:f2:7f:90:eb:9c:a9:39:
9d:03:d3:ed:c8:fb:4a:02:63:c1:21:0c:4c:a3:4a:
a3:f4:f1:90:15:0c:59:15:75:3d:9f:d8:b4:a3:d5:
b1:9f:3a:5e:5a:eb:34:5c:5e:0e:22:80:e0:d6:3a:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:23:6F:09:06:6C:C5:E8:B4:F6:27:27:D2:FC:2C:3A:F0:04:FA:EA
X509v3 Authority Key Identifier:
keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.90.0/23
Signature Algorithm: sha256WithRSAEncryption
71:d9:a4:b6:73:72:c8:6f:c3:f9:29:ec:2c:54:ce:75:d8:f4:
c5:40:d5:b0:6d:6b:a0:33:91:14:58:6f:9b:ef:97:dc:81:8c:
03:1d:21:89:44:70:ad:12:6f:95:d9:3d:1c:81:d6:90:35:da:
f5:1f:2f:e6:06:f3:42:8e:cf:7d:51:e2:9a:2d:6d:1f:04:5b:
bb:37:00:06:bd:f3:d2:4c:7e:fe:23:cb:b5:3f:a1:e8:b1:db:
f2:51:57:89:30:6e:a1:63:e3:49:7e:71:79:68:21:5a:b9:c2:
98:b6:e9:f7:6f:ee:5e:39:a9:84:dc:6b:d8:84:f9:ed:89:2d:
35:ea:12:62:a1:0a:08:63:76:a9:b7:53:ce:e9:50:90:48:97:
07:80:95:d3:e4:78:5b:52:a2:96:95:cb:a3:92:36:9d:c8:ef:
7f:88:dc:b6:05:a4:61:50:e7:58:8f:ce:6e:32:46:3a:4a:f2:
2c:3c:7b:85:44:7a:a8:a3:56:52:6e:56:fb:7f:e2:ea:52:3f:
fe:b0:6e:1c:f5:68:cf:af:0a:ce:49:dd:48:22:d9:95:df:17:
eb:09:59:2a:b2:c6:ae:83:e1:e6:2a:8c:cd:aa:cc:d2:f6:cf:
46:d7:39:87:d7:e2:4c:99:c9:2e:8d:8b:3d:8c:8d:3b:4e:0f:
7d:6d:79:53
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RUY4NzExMC8GA1UEBRMoNUVDNUZCMzM0RUU1MkI5MDA5Q0I5MjNDNjkzQkQyMEYw
NDc4QTE0NDAeFw0yNTA1MjQxNTI4MzNaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MzFlNWEwLTZhM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMqBgK4a+DEalTYBUZN2Thmii6wAELoxRKWW3hHNiH6uxCfZmlGCaq+dX7oQbk
owapfDNGNl2zswcVyz2lhN7NSZsxODcbpGx8081NYgqeQhUQuVUtZkzjIBFkYV/P
VjNcjf43xP3LS9ayBRrk1dszE/m7Wu/6t52At0p+lH8p/sYLpmRZ6gShHzLmvT0W
ujMLHFZ+f40Q024AhtcHlmdTr940xFpC/EmSok63aJN9inQcJIrgUYdVhY5w/9y3
BaeBiyM2DjV2j3aI8n+Q65ypOZ0D0+3I+0oCY8EhDEyjSqP08ZAVDFkVdT2f2LSj
1bGfOl5a6zRcXg4igODWOsHtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9SNvCQZs
xei09icn0vwsOvAE+uowHwYDVR0jBBgwFoAUXsX7M07lK5AJy5I8aTvSDwR4oUQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzM0MDA4MDIyMzhC
MzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVBSnk1SThhVHZTRHdSNG9V
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWHNYN00wN2xLNUFKeTVJOGFUdlNEd1I0b1VRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUY4Ny8zNDAwODAyMjM4QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMDUzNjEzRTM4
QjMxMUYwOERCNjMyMDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaVjWjANBgkqhkiG9w0BAQsFAAOCAQEAcdmktnNyyG/D+Sns
LFTOddj0xUDVsG1roDORFFhvm++X3IGMAx0hiURwrRJvldk9HIHWkDXa9R8v5gbz
Qo7PfVHimi1tHwRbuzcABr3z0kx+/iPLtT+h6LHb8lFXiTBuoWPjSX5xeWghWrnC
mLbp92/uXjmphNxr2IT57YktNeoSYqEKCGN2qbdTzulQkEiXB4CV0+R4W1KilpXL
o5I2ncjvf4jctgWkYVDnWI/ObjJGOkryLDx7hUR6qKNWUm5W+3/i6lI//rBuHPVo
z68KzkndSCLZld8X6wlZKrLGroPh5iqMzarM0vbPRtc5h9fiTJnJLo2LPYyNO04P
fW15Uw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:49:29 2025 by rpki-client