
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/5176F30C330911F0B6109345C4F9AE02.roa
File: 5176F30C330911F0B6109345C4F9AE02.roa (raw, json)
Hash identifier: rckBxD2KbOBtygxC/B22fEZmZKSRuNXV143WuugaVH8=
Subject key identifier: 02:F8:A8:6E:79:3E:D7:39:A3:7E:22:1B:17:81:A6:8D:6F:B4:19:0C
Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial: D5
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/5176F30C330911F0B6109345C4F9AE02.roa
Signing time: Thu 25 Jun 2026 07:42:17 +0000
ROA not before: Thu 25 Jun 2026 07:42:17 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 153894
IP address blocks: 165.99.76.0/24 maxlen: 24
165.99.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Validity
Not Before: Jun 25 07:42:17 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3cdbd8-08af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:ce:ae:bd:3c:a1:63:5a:bf:c8:dc:dd:12:
99:8a:e5:79:d2:c6:5b:7d:4c:77:74:74:84:cf:7d:
62:9f:a4:2f:46:56:05:c7:33:66:5a:de:25:35:a9:
f2:b6:c2:1f:1f:9d:7e:7e:24:cb:4b:14:67:29:fb:
ab:e9:19:a2:fd:f8:0a:28:f2:bf:7d:20:29:df:f1:
25:23:e8:1f:58:c1:b4:c6:c4:83:dd:d7:b6:da:a1:
67:53:9e:2e:4f:14:8f:3c:f5:da:14:2d:d0:f9:9a:
e0:58:6c:69:c3:2d:53:ff:39:0c:84:b5:e3:f6:c9:
80:31:2e:7c:b2:9f:c5:0c:9d:73:c2:2c:1a:06:04:
5d:44:62:fd:20:e9:f4:10:7c:ad:d1:db:63:36:63:
0f:97:d3:72:62:c9:58:a2:39:99:14:b3:70:d6:35:
f6:a4:aa:b8:84:4e:1f:08:8b:9b:2b:d2:15:ed:fc:
7c:13:f7:4f:97:59:0b:4d:8b:85:15:94:4f:02:21:
92:29:dc:3c:6b:c9:a7:f1:ae:c9:30:20:65:47:2a:
0b:8d:f1:66:88:c3:99:32:36:09:48:8c:37:90:8f:
6e:be:4d:e0:27:c6:11:33:3e:12:fa:8f:4e:1d:38:
16:9d:d1:2c:ca:90:a9:52:7a:45:88:21:98:7e:c4:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F8:A8:6E:79:3E:D7:39:A3:7E:22:1B:17:81:A6:8D:6F:B4:19:0C
X509v3 Authority Key Identifier:
keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/5176F30C330911F0B6109345C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.76.0/23
Signature Algorithm: sha256WithRSAEncryption
49:fe:05:b1:68:6f:13:7d:d2:b7:76:88:ad:29:f1:09:c8:f8:
21:e1:b7:2b:6a:9e:7e:e5:eb:6d:ca:13:27:d3:2c:ba:cd:95:
f8:0f:a9:f9:e4:d2:cb:0c:98:28:1e:08:2b:a1:d8:08:18:da:
89:31:60:4c:10:f9:fe:aa:ff:9e:19:6f:f8:ad:db:4e:dd:27:
b3:86:39:98:1c:12:dc:1a:5d:40:7c:73:55:2f:5f:80:15:2f:
82:51:ba:c0:5f:29:04:da:8c:9b:1a:a1:d9:f0:21:76:e0:a2:
42:ac:13:08:d5:44:2e:29:c9:dc:29:f8:7f:65:78:2e:df:40:
14:d5:d6:06:5a:c8:49:4f:4e:e5:52:2f:3b:37:ca:1e:fd:9e:
08:94:be:cf:31:f5:12:63:cf:a8:2c:3c:fa:82:9f:b7:3f:37:
42:72:d1:d5:6c:87:ea:d9:cd:4c:75:9c:62:a3:c9:8f:02:e6:
d8:1f:4c:12:27:a5:11:ae:70:aa:d3:43:e9:f3:28:4b:4b:e7:
b0:15:70:93:a1:50:52:f5:46:cb:95:41:24:13:44:d8:df:39:
51:e8:e6:75:68:99:10:9b:39:28:af:58:1d:46:18:3f:88:78:
ba:95:da:16:e5:53:6c:ff:be:6c:88:fe:d7:af:05:96:b7:17:
09:d2:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:00 2026 by rpki-client