
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/991CBF9A86F311F1B8F66003A7EE528E.roa
File: 991CBF9A86F311F1B8F66003A7EE528E.roa (raw, json)
Hash identifier: jc4CCB8ZNjD5l8JwMnuS9o09cS9T+3d3PcbaK2GUzrA=
Subject key identifier: 35:FD:3B:BE:15:50:A3:04:EA:5F:2F:6F:26:E5:9A:04:19:8E:16:3F
Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial: 0267
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/991CBF9A86F311F1B8F66003A7EE528E.roa
Signing time: Fri 24 Jul 2026 00:07:03 +0000
ROA not before: Fri 24 Jul 2026 00:07:03 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 10118
IP address blocks: 117.103.144.0/20 maxlen: 24
124.217.128.0/18 maxlen: 24
180.188.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Validity
Not Before: Jul 24 00:07:03 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a62aca7-1335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:be:e7:80:95:f5:a0:01:2c:25:54:45:0b:
cf:37:ee:6f:3c:59:22:4d:fa:53:51:d3:9f:d9:06:
e1:0c:78:64:18:89:43:16:74:7a:14:e5:20:c1:cd:
aa:b5:b6:91:d9:95:48:4e:00:5e:03:44:89:64:ab:
ae:93:25:80:8c:aa:51:52:73:c5:bc:fb:a9:21:21:
8d:74:dd:e1:a6:9e:15:33:56:d8:cc:59:8c:04:23:
8c:ca:e0:fc:aa:f7:b6:63:69:fc:98:ad:65:e4:64:
6c:52:bb:99:ad:4b:5b:30:03:2b:04:f3:82:7b:78:
59:8e:38:13:9a:1b:1b:f6:ff:0a:fe:93:16:f7:21:
79:50:4a:10:d8:93:95:9b:aa:b2:17:d8:a6:dd:28:
48:73:34:72:28:0e:fa:5d:83:0f:d9:83:bd:ac:7e:
13:10:f8:56:a7:e6:48:0b:dd:cf:40:ec:72:e3:d2:
5e:e9:13:51:a4:43:59:30:e7:ab:5d:6d:b4:b7:3a:
55:54:55:7b:9b:55:d5:ea:4d:a1:fa:4a:cf:57:6a:
d4:b7:b2:56:7a:12:95:fb:db:cc:73:52:b6:90:a4:
9d:3f:2d:3e:f2:13:fc:f9:34:a1:71:ed:11:df:f8:
ba:45:41:5a:6a:31:d2:6f:f6:34:01:cd:4c:07:c1:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FD:3B:BE:15:50:A3:04:EA:5F:2F:6F:26:E5:9A:04:19:8E:16:3F
X509v3 Authority Key Identifier:
keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/991CBF9A86F311F1B8F66003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
117.103.144.0/20
124.217.128.0/18
180.188.128.0/18
Signature Algorithm: sha256WithRSAEncryption
49:2c:b8:2f:25:f5:c6:ed:9c:00:88:e8:ef:77:1e:e8:56:56:
77:22:2c:1c:c4:c7:29:8d:2f:23:5a:ac:d3:d6:e1:9f:42:48:
3c:64:00:eb:74:4b:79:ba:59:27:19:1d:a3:ca:e9:83:7d:94:
36:5a:80:ad:ad:ed:82:52:15:fd:d4:ee:cd:8a:03:03:5b:e0:
4b:28:dd:82:a0:03:54:24:c7:72:f1:c4:bb:ab:12:bb:27:96:
b6:4e:19:e8:9c:76:49:32:fd:af:d3:b8:59:79:7a:e6:e9:1c:
eb:5b:eb:68:6a:48:75:0f:39:8c:25:0a:aa:5a:7a:81:a4:58:
9f:6b:f2:03:b7:fd:74:1e:d0:db:aa:3e:12:6c:71:25:da:ec:
b1:24:62:04:64:c5:0b:68:a1:e6:79:d4:78:52:ed:a8:69:96:
da:5a:bf:85:8f:e6:90:af:50:8f:3a:f0:b8:8a:38:32:d8:1a:
70:14:ef:76:a9:7d:00:d0:f0:ff:07:7c:9a:ba:51:1e:74:e0:
14:17:c4:d0:4b:85:b3:a2:65:fb:2b:b9:fc:34:04:f0:e4:02:
68:fb:f7:77:f1:59:77:93:86:3b:f5:0f:9f:e8:7b:36:d3:ba:
54:0d:fd:13:c3:2a:e4:83:86:c4:e0:56:6d:2a:20:66:bf:90:
de:c1:7c:de
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG
QTRENEYwODkwHhcNMjYwNzI0MDAwNzAzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYyYWNhNy0xMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArC2+54CV9aABLCVURQvPN+5vPFkiTfpTUdOf2QbhDHhkGIlDFnR6FOUgwc2q
tbaR2ZVITgBeA0SJZKuukyWAjKpRUnPFvPupISGNdN3hpp4VM1bYzFmMBCOMyuD8
qve2Y2n8mK1l5GRsUruZrUtbMAMrBPOCe3hZjjgTmhsb9v8K/pMW9yF5UEoQ2JOV
m6qyF9im3ShIczRyKA76XYMP2YO9rH4TEPhWp+ZIC93PQOxy49Je6RNRpENZMOer
XW20tzpVVFV7m1XV6k2h+krPV2rUt7JWehKV+9vMc1K2kKSdPy0+8hP8+TShce0R
3/i6RUFaajHSb/Y0Ac1MB8F3fwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDX9O74V
UKME6l8vbyblmgQZjhY/MB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3
OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4
SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEE5OTYvMzJDNjhBNUUyNzk4MTFFRUJEOERDNTVGQzRGOUFFMDIvOTkxQ0JGOUE4
NkYzMTFGMUI4RjY2MDAzQTdFRTUyOEUucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQEdWeQAwQGfNmAAwQGtLyAMA0GCSqGSIb3DQEBCwUAA4IBAQBJLLgv
JfXG7ZwAiOjvdx7oVlZ3IiwcxMcpjS8jWqzT1uGfQkg8ZADrdEt5ulknGR2jyumD
fZQ2WoCtre2CUhX91O7NigMDW+BLKN2CoANUJMdy8cS7qxK7J5a2ThnonHZJMv2v
07hZeXrm6RzrW+toakh1DzmMJQqqWnqBpFifa/IDt/10HtDbqj4SbHEl2uyxJGIE
ZMULaKHmedR4Uu2oaZbaWr+Fj+aQr1CPOvC4ijgy2BpwFO92qX0A0PD/B3yaulEe
dOAUF8TQS4WzomX7K7n8NATw5AJo+/d38Vl3k4Y79Q+f6Hs207pUDf0Twyrkg4bE
4FZtKiBmv5DewXze
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:23 2026 by rpki-client