
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa
File: 9DB1FB565EA511EFBA70FD68C4F9AE02.roa (raw, json)
Hash identifier: DNOSrcMTyJrZVQks8chw5PKhnwBLFQRmcohB9DHMb/s=
Subject key identifier: C4:B6:62:CC:9C:8C:7E:B4:37:B1:15:DC:6A:D5:CB:C1:07:42:F3:25
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 0252
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:31:23 +0000
ROA not before: Mon 23 Jun 2025 03:22:05 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 152915
IP address blocks: 83.118.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Jun 23 03:22:05 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a485fa-76f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:29:06:a0:18:22:61:7d:ae:81:24:4b:be:
2b:3e:dc:2d:8a:64:ce:14:c0:5c:68:53:a6:03:ed:
8f:f8:3f:fc:02:f4:63:80:5e:e7:1a:9a:64:1f:26:
1c:18:f0:37:1d:74:4d:7e:e4:24:ff:69:34:ac:cc:
52:5c:87:e8:3a:95:76:5c:3d:69:cc:57:bc:36:c4:
d1:bc:50:97:17:a7:68:d1:ed:20:1b:02:75:d1:2f:
16:56:e1:57:79:cf:3f:7b:9d:25:ec:28:39:26:6a:
ac:73:f1:3c:eb:8c:55:f9:8f:d8:2b:11:22:09:fb:
c0:ef:8d:52:bd:02:57:80:0d:93:95:fa:d5:25:49:
0c:3a:de:ab:bd:73:69:dd:b7:4c:b4:d6:60:42:77:
9d:25:6a:52:2c:08:04:83:3c:bd:b1:4f:3d:23:75:
65:fb:f1:d7:c6:49:e9:99:c7:58:45:1a:06:81:28:
8b:0e:e9:dc:77:56:02:01:3f:f9:aa:ec:45:9e:94:
48:a4:58:f5:81:8a:09:8b:15:93:e6:da:fe:4b:43:
7c:d2:a3:09:cc:2d:5b:bf:81:f0:79:14:b2:d6:8a:
db:8e:86:ea:67:43:35:ec:c3:2f:4f:6d:84:ad:81:
d8:b7:b7:c0:ad:6b:1d:9d:30:44:ac:d1:e6:e9:4d:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B6:62:CC:9C:8C:7E:B4:37:B1:15:DC:6A:D5:CB:C1:07:42:F3:25
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
83.118.99.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cc:e7:c9:c0:bf:35:1c:7c:e8:be:d6:30:39:e3:ab:37:f1:
53:5e:b3:c3:8a:45:b5:67:89:e9:17:19:61:bb:c0:48:33:18:
7d:1f:45:3b:d8:70:d4:83:3d:01:97:a3:03:e0:ff:f9:de:0a:
46:5c:6e:11:70:5a:7a:66:3b:6a:47:12:55:03:f3:82:e1:9b:
3a:c4:42:1d:f5:94:c2:2c:03:11:08:7a:2b:7c:98:86:23:27:
cd:c2:86:39:f5:da:90:79:37:27:16:b3:61:ac:8e:0f:5f:c6:
4f:6c:4a:f1:4c:b0:5e:06:58:ee:61:5e:ef:ab:f8:6a:bf:b4:
02:77:2d:30:08:b9:3e:8f:ab:c6:5c:11:09:2c:84:67:5d:b6:
51:0c:73:a3:9b:db:ba:93:52:c5:ef:05:2d:d2:b7:50:27:55:
0e:6e:ad:19:ef:62:25:dc:6f:89:a2:1f:88:6a:1c:ec:2d:d7:
cc:a9:bc:4b:5e:8e:ec:9b:df:c9:03:6c:ad:7a:b5:f7:1f:a1:
66:f0:d5:0c:02:7c:d9:d0:41:04:54:00:43:d5:e1:f1:52:25:
c5:20:08:dd:4c:a9:08:72:05:e8:dc:92:23:21:3b:0c:87:4a:
cd:82:5a:f1:7d:93:4b:79:dd:09:02:76:da:41:5b:a7:d0:10:
65:ac:bb:eb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKDcxRjQwMjE4QzFBRjQ3QzVFOTkzQTIxQTJCMjkyODRF
NEMzMkM5MzQwHhcNMjUwNjIzMDMyMjA1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODVmYS03NmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzQ0pBqAYImF9roEkS74rPtwtimTOFMBcaFOmA+2P+D/8AvRjgF7nGppkHyYc
GPA3HXRNfuQk/2k0rMxSXIfoOpV2XD1pzFe8NsTRvFCXF6do0e0gGwJ10S8WVuFX
ec8/e50l7Cg5Jmqsc/E864xV+Y/YKxEiCfvA741SvQJXgA2TlfrVJUkMOt6rvXNp
3bdMtNZgQnedJWpSLAgEgzy9sU89I3Vl+/HXxknpmcdYRRoGgSiLDuncd1YCAT/5
quxFnpRIpFj1gYoJixWT5tr+S0N80qMJzC1bv4HweRSy1orbjobqZ0M17MMvT22E
rYHYt7fArWsdnTBErNHm6U0w2QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMS2Ysyc
jH60N7EV3GrVy8EHQvMlMB8GA1UdIwQYMBaAFHH0AhjBr0fF6ZOiGispKE5MMsk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy82REUzQ0U3QzM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4WHBrNklhS3lrb1Rrd3l5
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2NmUUNHTUd2UjhYcGs2SWFLeWtvVGt3eXlUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvNkRFM0NFN0MzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvOURCMUZCNTY1
RUE1MTFFRkJBNzBGRDY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAU3ZjMA0GCSqGSIb3DQEBCwUAA4IBAQBhzOfJwL81HHzovtYwOeOr
N/FTXrPDikW1Z4npFxlhu8BIMxh9H0U72HDUgz0Bl6MD4P/53gpGXG4RcFp6Zjtq
RxJVA/OC4Zs6xEId9ZTCLAMRCHorfJiGIyfNwoY59dqQeTcnFrNhrI4PX8ZPbErx
TLBeBljuYV7vq/hqv7QCdy0wCLk+j6vGXBEJLIRnXbZRDHOjm9u6k1LF7wUt0rdQ
J1UObq0Z72Il3G+Joh+IahzsLdfMqbxLXo7sm9/JA2yterX3H6Fm8NUMAnzZ0EEE
VABD1eHxUiXFIAjdTKkIcgXo3JIjITsMh0rNglrxfZNLed0JAnbaQVun0BBlrLvr
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:22 2026 by rpki-client