
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/524C254A867811F19E61798161A30FBC.roa
File: 524C254A867811F19E61798161A30FBC.roa (raw, json)
Hash identifier: 8tri+c/0F9B8EFUyLCnJ5Pm14VoRBmaK7tfLS/Z5X9s=
Subject key identifier: DC:B3:C9:0C:78:C6:0B:8D:99:32:75:BD:17:84:25:C5:68:95:A7:F3
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3255
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/524C254A867811F19E61798161A30FBC.roa
Signing time: Thu 23 Jul 2026 09:24:36 +0000
ROA not before: Thu 23 Jul 2026 09:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153878
IP address blocks: 165.99.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12885 (0x3255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 23 09:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a61ddd4-c232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:f2:43:01:3a:28:33:89:fd:87:92:7f:d7:
62:49:28:31:1a:ad:0b:8d:93:96:7a:1d:59:8a:f0:
cf:11:0c:49:cd:f4:5b:a6:33:5f:8c:f3:f2:6c:4b:
d9:a5:6f:bc:bc:31:07:46:c9:e9:8d:49:73:32:db:
e2:33:8d:e7:78:81:07:19:19:a6:f9:85:b6:6f:f7:
b4:bc:2a:28:0c:f1:23:10:16:9e:b8:41:48:9a:18:
27:83:82:d1:74:1c:06:0d:5a:ac:77:eb:7e:f5:c1:
5c:f7:e0:98:ac:35:e4:e4:07:d5:b5:a3:77:9b:80:
83:ef:34:3d:8f:50:d2:67:ba:e9:e8:03:36:56:52:
97:5f:fc:c2:ab:53:e5:6c:1f:bd:fc:80:4a:16:ed:
26:31:73:5d:87:7a:af:68:6e:b3:e3:e2:7c:a2:77:
d9:bb:a9:fe:c6:b0:cb:aa:16:90:38:f6:f1:0e:52:
ef:ec:5d:21:73:88:e0:0c:f1:5c:fb:28:17:be:f1:
f9:e6:22:bb:71:a3:5f:1d:c5:6b:86:83:98:61:f0:
fc:a4:38:d6:20:0e:06:23:fc:6d:df:1d:14:62:a9:
81:04:cf:fb:c0:20:87:45:9e:a7:4e:a4:0b:cb:42:
c3:18:03:5e:e4:8f:95:47:25:81:9c:d8:9b:3b:60:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B3:C9:0C:78:C6:0B:8D:99:32:75:BD:17:84:25:C5:68:95:A7:F3
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/524C254A867811F19E61798161A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.22.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:49:5b:2e:6b:8b:cd:aa:f4:e5:4a:2f:bf:05:15:75:5b:d4:
58:27:05:61:20:67:f5:3e:02:3b:9f:d2:f4:ff:b9:d6:de:32:
86:45:da:8f:7e:da:00:74:a1:ba:60:df:8e:32:38:ab:82:47:
5e:02:4f:b2:c1:fc:b9:e7:4f:3b:3f:e0:08:fc:e0:8f:2a:8e:
75:aa:5c:42:8a:5c:43:ab:e6:f9:ff:00:8a:e0:d4:32:0a:49:
83:f7:f4:ef:a0:6b:4c:41:d2:0f:11:aa:13:2a:2a:2a:6b:c2:
f4:dc:57:04:85:e9:9d:6a:98:6a:b2:f6:c4:69:47:50:ab:86:
b7:b8:4e:f8:5f:8c:10:fc:ca:fa:f3:4e:e8:a8:a2:06:ac:b9:
01:57:02:33:5e:e9:b2:43:1f:cd:fe:96:dc:42:fb:fe:65:7b:
32:1e:51:30:a1:d8:53:5d:e5:c4:9b:69:e3:78:5c:97:0a:bb:
9e:35:cc:73:ff:46:23:37:4a:79:cc:2d:40:d0:2b:d7:19:18:
70:de:31:61:63:56:c8:7e:6e:0b:34:8e:31:e4:bb:fb:f7:39:
2c:c3:61:66:b7:0d:1b:38:42:52:29:35:11:3d:e2:96:b8:51:
e5:2d:e0:cf:e9:8b:5b:80:1d:86:86:06:23:71:cf:fa:8e:87:
de:17:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:24:53 2026 by rpki-client