
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/4567CDC2A0EE11F081D8CB27C4F9AE02.roa
File: 4567CDC2A0EE11F081D8CB27C4F9AE02.roa (raw, json)
Hash identifier: fgOJLmWpTT4vFiKlnIe+eunaOJuNeDk+z0BvDaJitcY=
Subject key identifier: 33:C3:34:F2:E0:5E:F8:2F:AA:FA:FF:5E:30:BD:60:9B:E9:3C:43:BC
Certificate issuer: /CN=A913695E/serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Certificate serial: F0
Authority key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/4567CDC2A0EE11F081D8CB27C4F9AE02.roa
Signing time: Fri 31 Jul 2026 08:56:49 +0000
ROA not before: Fri 31 Jul 2026 08:56:49 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 153989
IP address blocks: 165.101.54.0/23 maxlen: 23
165.101.54.0/24 maxlen: 24
165.101.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl
rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Validity
Not Before: Jul 31 08:56:49 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6c6351-8643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:24:31:90:6b:a9:cb:c4:9b:50:79:f3:37:
39:a7:46:9b:4b:36:5c:80:5a:79:50:0b:ef:43:58:
57:34:94:5c:d6:23:6c:70:3d:ec:1f:46:30:84:10:
34:ea:ea:04:b8:d4:43:40:10:ad:2f:a0:7e:28:a4:
93:a2:50:e5:d4:08:8b:af:8d:c1:5f:f8:75:1c:27:
fd:e5:d9:17:a1:7d:96:64:81:50:88:56:df:00:46:
e2:d9:65:fd:f3:02:e9:3c:ae:0a:72:4c:eb:7c:22:
d9:6f:ca:95:39:7c:0a:b2:23:96:8a:a5:51:a0:5a:
b6:a9:b3:a8:6d:4a:b5:0d:a5:4e:55:bf:15:44:9c:
9b:2d:04:c3:b9:fd:95:7f:1b:95:8f:61:1b:9b:93:
0f:19:5d:b4:47:2d:06:74:cf:2e:d0:a6:09:44:f1:
ec:4c:7d:88:77:2a:aa:13:ff:6c:3c:97:57:01:c6:
9f:fc:fa:50:1f:f4:bf:60:9f:58:10:21:8c:95:6c:
6f:49:09:58:04:a7:78:e1:03:db:50:65:0d:36:45:
13:b9:ea:9d:1b:06:ca:3f:b6:5c:0c:9c:52:d4:8e:
f8:b5:3b:af:9c:29:a9:f8:a7:99:c7:ce:b8:6f:92:
a2:63:10:85:6d:6b:fc:4c:d3:33:01:3a:f7:dd:b5:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:34:F2:E0:5E:F8:2F:AA:FA:FF:5E:30:BD:60:9B:E9:3C:43:BC
X509v3 Authority Key Identifier:
keyid:21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/4567CDC2A0EE11F081D8CB27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.54.0/23
Signature Algorithm: sha256WithRSAEncryption
87:74:5c:68:0e:9b:39:2a:d4:60:f6:ea:81:17:55:a1:9b:47:
42:0a:3d:be:c2:33:ec:70:63:45:ad:e0:2a:d3:e1:b2:b3:93:
79:5c:51:ba:4f:89:4b:96:2a:11:0d:ce:6a:99:f5:ba:39:01:
f1:c3:87:aa:1d:ff:63:ce:a7:df:02:56:99:93:2b:46:f8:1c:
a5:3d:cf:48:f5:83:c1:51:c4:bd:e8:ee:84:e1:d7:f2:d8:da:
03:72:15:5a:dc:5f:b3:4e:72:aa:e8:d9:b8:2a:15:b4:43:22:
f4:ed:23:96:e2:d4:f8:2e:70:b4:d3:0f:2d:5a:ea:6d:e9:c7:
59:33:58:98:9f:f6:42:a8:2a:23:65:ff:e8:9b:c2:a9:92:a7:
f8:43:e0:94:b6:8f:cc:6b:e0:7b:64:32:01:e5:c1:60:3a:a2:
52:af:c2:35:43:ae:4b:3a:5d:e1:27:29:a9:81:4f:9b:26:98:
57:dd:10:39:d1:09:ad:9a:0d:a7:45:39:93:3a:86:f7:6a:d3:
99:eb:17:ba:63:88:b5:fd:22:fa:65:89:8c:46:a7:58:2f:a8:
28:79:23:c1:b6:ae:44:9a:28:ff:8a:14:05:65:44:58:d0:b2:
45:96:a7:77:30:3c:52:04:80:ef:01:f6:db:40:1e:87:b6:62:
f1:fb:e3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:13:36 2026 by rpki-client