
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/6D18C6E88FF311F0B3309340C4F9AE02.roa
File: 6D18C6E88FF311F0B3309340C4F9AE02.roa (raw, json)
Hash identifier: B/siaUA6CI2wK/uyB8by+8BX4ZeMJoKY29AWKojuWa8=
Subject key identifier: 35:48:46:80:64:4A:A2:53:13:C7:CE:95:7F:B3:39:93:84:C2:39:FB
Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Certificate serial: 7F
Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/6D18C6E88FF311F0B3309340C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:29:30 +0000
ROA not before: Fri 12 Sep 2025 16:13:32 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154010
IP address blocks: 165.101.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Validity
Not Before: Sep 12 16:13:32 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a59eca-e2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:90:fb:cc:ff:ae:9f:62:bf:88:3c:c3:e4:
87:27:b3:cf:d1:23:49:06:0d:5d:58:12:8f:e3:6c:
d4:e5:f3:7a:df:60:4d:82:6d:fd:9f:10:3a:70:ba:
d2:8b:18:f7:b4:e9:6e:17:65:54:b3:6c:9e:2b:1d:
87:7f:a8:01:06:18:72:c5:c1:f8:2a:d5:9f:e9:19:
54:86:df:d2:c8:7c:a4:4f:a7:f4:dc:8f:16:67:e5:
38:b9:d5:3a:55:e4:8b:33:f3:18:2b:aa:0b:75:a6:
1a:17:e1:3e:90:88:22:6f:b6:3b:b7:97:ff:c9:d4:
a6:f6:86:b2:23:49:51:f4:45:f1:eb:9a:44:16:b4:
e8:98:01:7d:be:06:6b:0e:45:37:08:29:1d:6b:7f:
0c:b0:66:51:b7:7d:3d:c5:52:31:dc:32:44:18:8d:
be:ae:f3:75:6d:fd:46:be:69:69:7a:fe:b4:34:dc:
3c:56:37:03:26:48:73:3a:ad:56:03:25:ec:1b:d2:
86:eb:1f:fa:08:d4:e4:87:f5:60:7d:1d:d8:3f:03:
72:db:cf:c7:c6:f7:11:b7:51:d1:cc:78:c1:9d:cd:
90:3e:26:d0:46:9f:bf:5a:7e:7d:57:0a:83:25:87:
90:8e:a5:ac:0e:9d:5a:3d:46:e6:e2:c0:b5:55:24:
a4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:48:46:80:64:4A:A2:53:13:C7:CE:95:7F:B3:39:93:84:C2:39:FB
X509v3 Authority Key Identifier:
keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/6D18C6E88FF311F0B3309340C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.122.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:3d:00:77:02:67:5f:aa:ad:84:7a:22:21:fc:df:8e:f6:7a:
8f:06:15:fd:70:13:37:10:43:85:df:07:da:b8:b4:28:ff:59:
9d:e5:bc:e3:b2:7b:6d:37:ee:ff:fe:9c:2f:9a:20:23:97:ec:
23:d9:91:59:a7:9a:81:a6:e5:73:2d:bb:1d:ea:43:c5:2b:6d:
21:69:04:57:2a:62:83:3d:84:44:2f:46:47:d4:4b:91:90:f9:
b8:d6:5b:91:6f:35:e4:a4:a8:e5:be:35:74:9a:a3:d7:df:83:
b2:82:3c:72:ec:a7:ca:d0:a2:47:be:ed:e8:e2:31:fc:89:15:
8b:ac:a5:88:9b:a6:83:5f:a1:35:3f:90:3a:2a:ab:38:9a:66:
57:45:c4:1b:bd:81:30:c0:d0:cb:1d:dd:cc:b8:e6:1a:c5:20:
c3:e4:0e:ce:eb:13:67:c0:0e:f8:81:df:3f:71:1f:66:fa:64:
a5:83:ec:ae:22:09:83:9c:9a:49:29:44:da:4b:5a:f5:ac:2a:
1b:df:6f:82:a4:ed:83:05:d7:37:fa:98:2f:b6:30:fe:45:d1:
c4:54:c3:50:8c:b7:d7:9f:8b:6d:fa:01:93:4f:80:8e:da:82:
d3:02:05:a4:e4:e1:33:8d:44:3c:f6:96:d9:70:a7:e5:e8:a9:
b7:3c:0e:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:25 2026 by rpki-client