
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/A78653B2561F11F09624D128C4F9AE02.roa
File: A78653B2561F11F09624D128C4F9AE02.roa (raw, json)
Hash identifier: U+SMdhKcC6YZLVwx7CjvcktHCkK7+pBrjdw40Tvbfas=
Subject key identifier: 31:98:D3:33:44:71:E4:17:18:E6:87:A9:91:62:9F:78:96:FF:A0:54
Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial: 85
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/A78653B2561F11F09624D128C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:10:55 +0000
ROA not before: Tue 01 Jul 2025 02:04:00 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152692
IP address blocks: 165.101.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Validity
Not Before: Jul 1 02:04:00 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a58c5f-3d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:07:31:d3:3a:ed:d2:01:fa:b6:40:3a:c2:
81:29:8a:f3:3c:3e:a1:87:7b:34:cc:05:b3:6a:0b:
1c:d7:c8:b8:97:3c:da:ad:53:7b:36:76:02:ed:90:
9b:8a:12:f6:36:6a:9a:26:c4:03:49:0f:35:cc:a6:
88:a1:0f:f8:e6:47:4c:66:f7:9c:8c:86:7f:37:4a:
c4:32:cf:0c:ae:05:3b:9a:45:da:80:70:33:b9:c6:
16:44:c5:cd:59:62:69:22:12:da:00:15:48:0e:38:
9b:2c:ee:32:fc:92:68:d3:45:ea:e1:ac:69:59:52:
c0:5c:60:83:f6:ba:9b:81:aa:ec:b9:a0:b7:67:0c:
08:3e:48:d4:f0:0c:8e:1d:6a:d0:41:d9:0b:5c:f4:
51:2d:52:63:86:7b:9a:44:de:20:aa:e2:eb:52:63:
db:00:21:67:7e:29:d3:5c:12:78:59:73:75:7a:2b:
67:31:11:00:9f:3e:d7:3f:f4:ec:74:2a:72:72:6c:
8b:c2:0c:f5:7b:b1:ae:21:f2:a8:40:d1:4d:b4:35:
37:97:6b:d7:e2:69:6f:85:09:3c:f1:1a:bc:73:5b:
01:20:76:2f:cd:60:e3:cd:d0:aa:76:a3:68:b8:dc:
dd:60:de:99:42:8f:9c:e3:af:32:5a:79:96:35:d9:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:98:D3:33:44:71:E4:17:18:E6:87:A9:91:62:9F:78:96:FF:A0:54
X509v3 Authority Key Identifier:
keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/A78653B2561F11F09624D128C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.83.0/24
Signature Algorithm: sha256WithRSAEncryption
37:68:43:41:75:11:b7:58:c6:f9:8f:e0:28:c9:6e:ec:b1:7f:
af:73:db:cd:f4:f3:3e:ed:a6:b2:d5:4c:68:c1:97:8a:af:26:
ae:05:d2:9f:29:e9:81:a8:92:36:ca:a7:4c:2e:00:96:a0:4c:
14:d0:98:13:55:aa:e1:1e:c8:83:6c:88:b1:70:4f:c3:9a:70:
4d:e6:bb:6f:9d:18:68:b1:1a:38:90:28:13:d2:29:a6:cb:c4:
a3:1a:78:ba:d1:87:53:d7:3d:4c:7f:34:6c:67:50:4d:34:c4:
dd:9a:5a:00:31:52:b8:03:18:6a:13:3e:01:be:f9:c7:29:87:
45:da:bb:a0:e8:2c:7f:e5:93:cc:c1:c0:d3:b8:c7:3b:d7:d7:
4a:84:af:f1:a3:65:19:e0:76:67:29:00:57:31:c8:ed:7b:d7:
2e:38:3f:91:9b:be:c0:d8:cc:c3:5f:83:1b:3a:96:95:c9:c0:
e0:0a:60:29:19:6c:6a:21:43:ba:59:6b:7f:a3:b0:8e:20:af:
19:00:c3:be:be:fe:0f:68:ab:81:87:62:8b:ac:3f:6a:3a:5a:
23:ec:ff:db:a5:b9:a9:4c:73:91:09:c0:66:5a:20:45:0f:90:
ae:a0:88:70:5b:39:8e:d4:79:34:b0:8a:94:b2:18:3c:df:26:
62:79:36:e6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RGREExMTAvBgNVBAUTKDgxQTY1N0VBQUM3NTU0Q0FCN0ExQTI4OEY1QjNGRUVE
RDhBNUNDNEIwHhcNMjUwNzAxMDIwNDAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OGM1Zi0zZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAto4HMdM67dIB+rZAOsKBKYrzPD6hh3s0zAWzagsc18i4lzzarVN7NnYC7ZCb
ihL2NmqaJsQDSQ81zKaIoQ/45kdMZvecjIZ/N0rEMs8MrgU7mkXagHAzucYWRMXN
WWJpIhLaABVIDjibLO4y/JJo00Xq4axpWVLAXGCD9rqbgarsuaC3ZwwIPkjU8AyO
HWrQQdkLXPRRLVJjhnuaRN4gquLrUmPbACFnfinTXBJ4WXN1eitnMREAnz7XP/Ts
dCpycmyLwgz1e7GuIfKoQNFNtDU3l2vX4mlvhQk88Rq8c1sBIHYvzWDjzdCqdqNo
uNzdYN6ZQo+c468yWnmWNdls/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDGY0zNE
ceQXGOaHqZFin3iW/6BUMB8GA1UdIwQYMBaAFIGmV+qsdVTKt6GiiPWz/u3YpcxL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS83NjEzRjMxNjUz
MTMxMUYwODVERUNFNzlDNEY5QUUwMi9nYVpYNnF4MVZNcTNvYUtJOWJQLTdkaWx6
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dhWlg2cXgxVk1xM29hS0k5YlAtN2RpbHpFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0RGREEvNzYxM0YzMTY1MzEzMTFGMDg1REVDRTc5QzRGOUFFMDIvQTc4NjUzQjI1
NjFGMTFGMDk2MjREMTI4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWVTMA0GCSqGSIb3DQEBCwUAA4IBAQA3aENBdRG3WMb5j+AoyW7s
sX+vc9vN9PM+7aay1UxowZeKryauBdKfKemBqJI2yqdMLgCWoEwU0JgTVarhHsiD
bIixcE/DmnBN5rtvnRhosRo4kCgT0immy8SjGni60YdT1z1MfzRsZ1BNNMTdmloA
MVK4AxhqEz4BvvnHKYdF2rug6Cx/5ZPMwcDTuMc719dKhK/xo2UZ4HZnKQBXMcjt
e9cuOD+Rm77A2MzDX4MbOpaVycDgCmApGWxqIUO6WWt/o7COIK8ZAMO+vv4PaKuB
h2KLrD9qOloj7P/bpbmpTHORCcBmWiBFD5CuoIhwWzmO1Hk0sIqUshg83yZieTbm
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:15 2026 by rpki-client