
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/4CB714B644AA11F0B7FB6E72C4F9AE02.roa
File: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (raw, json)
Hash identifier: CDDizrxHdCVQBvWNHH5kJ+Klq5BvJObvDJfzp1lpWpE=
Subject key identifier: F8:1C:0F:9A:86:51:82:97:F9:5E:93:B3:9C:CF:1F:81:26:3F:C9:0F
Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Certificate serial: D2
Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/4CB714B644AA11F0B7FB6E72C4F9AE02.roa
Signing time: Tue 07 Jul 2026 08:34:24 +0000
ROA not before: Tue 07 Jul 2026 08:34:24 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139008
IP address blocks: 165.99.216.0/24 maxlen: 24
165.99.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Validity
Not Before: Jul 7 08:34:24 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4cba10-ccb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bf:8f:c3:d9:90:2f:32:fb:28:4d:bb:43:de:
d3:0a:9c:a1:0e:0d:4a:25:f0:fd:ba:e0:d0:00:cc:
3a:91:d5:97:89:1c:96:50:31:39:08:2c:ef:6c:d7:
93:c9:d6:03:1f:25:cc:8b:6f:ab:1d:a1:dd:8e:4f:
c7:fe:b5:0d:c4:ce:08:81:89:49:11:23:07:4e:9d:
90:a8:f9:4e:ab:f0:bb:3c:92:ae:09:74:8e:f6:e5:
b8:7b:06:d8:98:c7:e6:39:18:2a:31:da:c9:8b:d7:
37:49:6f:63:8b:0d:fe:b8:f7:dc:ea:7d:23:67:ae:
b4:ff:1d:e2:d2:51:74:9c:08:14:a3:77:5b:5f:7f:
e2:24:f7:97:67:b8:ba:c6:8a:f4:11:b1:4d:c2:b7:
21:20:01:5a:cf:9b:1f:44:ea:c5:30:a6:79:82:66:
a4:18:f9:9a:92:30:d0:c1:fa:b2:dc:f2:b6:40:b5:
fb:ab:db:76:55:c1:98:4b:3b:b1:9c:0e:b6:86:cb:
75:f4:55:ba:cc:0d:3f:c7:ca:e8:ae:a0:da:f0:cd:
f4:8c:22:41:0b:39:2f:04:db:b2:b0:96:de:dc:69:
52:9d:53:f6:ac:76:7b:cb:e7:ef:01:a3:01:af:46:
44:4e:95:f7:5c:da:f3:98:ef:2b:56:9e:b3:da:eb:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1C:0F:9A:86:51:82:97:F9:5E:93:B3:9C:CF:1F:81:26:3F:C9:0F
X509v3 Authority Key Identifier:
keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/4CB714B644AA11F0B7FB6E72C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.216.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:35:dc:df:43:64:13:c9:68:f6:64:70:38:a9:c7:5a:ed:e4:
4f:ff:aa:f0:6f:83:4b:46:3d:d8:6c:50:b5:bb:95:5a:7c:37:
6f:f3:02:89:e9:78:6e:79:c6:24:9b:af:11:35:16:2c:af:95:
c6:b5:04:f6:75:b0:ea:41:57:fc:8a:d7:3c:4d:18:a2:f8:ad:
ff:80:4e:3f:62:1e:24:48:80:4d:0a:2d:07:43:7e:bd:3e:53:
66:50:29:26:70:a0:7a:15:6a:97:e1:cc:34:cf:c8:1a:69:9e:
55:14:1f:84:3c:86:9b:8c:4a:be:a8:18:60:03:d1:ce:54:cf:
f5:7b:87:ad:a9:a0:4e:2b:b3:b3:86:93:83:10:a6:63:85:8f:
07:8c:7f:28:b2:31:00:d1:ef:1b:d7:de:c9:77:ee:9d:0b:74:
59:da:46:9f:a4:97:39:2a:a5:58:1d:c9:8e:d8:1f:ed:24:c8:
3d:07:45:3d:b1:f0:72:b9:98:ef:8f:42:f2:8b:ba:9a:ba:3f:
85:42:50:de:20:b2:fb:2f:9a:55:d5:e2:66:d2:09:30:a6:41:
20:9b:ea:9c:c2:fa:34:2d:47:5a:24:cf:77:66:20:c8:18:a0:
3c:6d:65:c7:c1:25:07:29:5f:31:24:bc:f2:ee:b5:1c:02:2d:
78:aa:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:09 2026 by rpki-client