
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa
File: C053613E38B311F08DB63209C4F9AE02.roa (raw, json)
Hash identifier: wM0FrDPXj1BZ9PXK7GbiyUW0I1P+yBtcBZcBvUtgK+0=
Subject key identifier: 46:01:0A:63:2F:2B:1A:3E:11:1D:82:2B:E4:07:27:BD:15:CC:50:B5
Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial: D1
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa
Signing time: Wed 01 Jul 2026 08:35:18 +0000
ROA not before: Wed 01 Jul 2026 08:35:18 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 132475
IP address blocks: 165.99.90.0/23 maxlen: 23
165.99.90.0/24 maxlen: 24
165.99.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Validity
Not Before: Jul 1 08:35:18 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a44d146-8d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:6c:84:02:a6:92:8d:47:d6:34:82:1f:cf:
a4:d4:83:ce:d2:96:4d:a1:5c:a2:1e:ab:07:dd:5b:
c9:1d:5a:b4:84:0c:16:10:eb:30:21:72:54:46:8a:
9f:4c:ff:cb:3f:d7:68:63:b6:d4:d2:b8:64:d5:31:
a0:7d:43:8b:cc:d4:17:05:1c:15:75:25:43:33:d8:
7b:3c:1c:bb:de:d5:e0:18:92:68:65:b7:72:c0:d7:
f1:9f:8b:d3:55:0c:34:e2:a4:ec:ef:be:88:24:83:
d2:16:52:86:d8:a2:e3:d8:c7:eb:fd:1e:6c:c2:1d:
08:e9:43:a0:4d:43:c3:6b:e8:93:58:65:d7:2a:04:
03:f6:e6:77:91:10:f7:33:ed:30:3a:5d:63:b3:1f:
ed:86:5f:3d:9b:75:03:b2:b3:57:7b:4d:8c:78:f3:
da:cb:a6:cd:22:0a:c4:c8:8f:ee:75:f1:fc:60:a1:
a8:ea:11:a1:04:d1:d0:eb:39:bd:74:9a:85:6e:dc:
cb:47:43:58:7d:07:f1:07:34:b3:a4:87:eb:c0:c9:
71:ac:12:3c:29:f5:f8:b9:f3:88:44:bc:2d:47:68:
b1:a9:c8:f5:ef:fb:e3:17:0e:1c:97:e3:dd:91:f9:
4e:0f:db:67:e9:6c:31:5a:07:aa:c5:e5:6b:cb:ff:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:01:0A:63:2F:2B:1A:3E:11:1D:82:2B:E4:07:27:BD:15:CC:50:B5
X509v3 Authority Key Identifier:
keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.90.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:ad:a5:76:0b:af:c1:fb:5f:a6:da:7e:82:e2:37:51:11:59:
72:96:6f:de:96:1b:a0:15:6a:fb:39:90:74:1b:12:8d:5d:9f:
a6:2d:9e:99:56:0d:10:32:c8:48:ff:44:55:0f:3b:2b:e8:49:
8b:69:df:81:df:00:b7:6b:42:53:60:84:19:0d:ad:78:3b:0d:
4e:75:5c:23:59:02:b9:eb:1d:b7:4b:96:d8:a2:61:c7:05:17:
03:4c:66:db:b7:3a:d4:5f:fe:52:10:3a:86:37:cc:b7:a2:c9:
48:fb:cb:68:ee:05:02:19:b5:61:a5:03:39:d1:60:62:37:8f:
21:b4:bc:db:56:d9:89:90:7e:c9:78:0a:b7:73:4f:8d:b9:84:
2a:2b:c8:c2:35:ed:6e:20:24:88:46:67:22:7b:c9:94:e6:2b:
a3:bd:95:13:68:a2:60:a2:b1:3c:5c:a3:11:5a:64:09:ec:b7:
bf:18:aa:a9:1d:7e:fa:ec:7c:f8:65:4c:54:2f:46:14:97:7f:
3b:48:be:b6:a5:c8:89:36:37:42:2e:ee:b5:65:4f:0d:ef:1b:
c8:26:90:a0:11:a2:42:1b:82:2c:58:a5:b0:67:1d:4a:f0:0c:
4c:84:68:af:02:dc:8e:7c:f8:26:8f:3c:1f:24:87:11:37:79:
49:39:9b:5d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVGODcxMTAvBgNVBAUTKDVFQzVGQjMzNEVFNTJCOTAwOUNCOTIzQzY5M0JEMjBG
MDQ3OEExNDQwHhcNMjYwNzAxMDgzNTE4WhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0ZDE0Ni04ZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr3NshAKmko1H1jSCH8+k1IPO0pZNoVyiHqsH3VvJHVq0hAwWEOswIXJURoqf
TP/LP9doY7bU0rhk1TGgfUOLzNQXBRwVdSVDM9h7PBy73tXgGJJoZbdywNfxn4vT
VQw04qTs776IJIPSFlKG2KLj2Mfr/R5swh0I6UOgTUPDa+iTWGXXKgQD9uZ3kRD3
M+0wOl1jsx/thl89m3UDsrNXe02MePPay6bNIgrEyI/udfH8YKGo6hGhBNHQ6zm9
dJqFbtzLR0NYfQfxBzSzpIfrwMlxrBI8KfX4ufOIRLwtR2ixqcj17/vjFw4cl+Pd
kflOD9tn6WwxWgeqxeVry//ZBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEYBCmMv
Kxo+ER2CK+QHJ70VzFC1MB8GA1UdIwQYMBaAFF7F+zNO5SuQCcuSPGk70g8EeKFE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY4Ny8zNDAwODAyMjM4
QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9Yc1g3TTA3bEs1QUp5NUk4YVR2U0R3UjRv
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hzWDdNMDdsSzVBSnk1SThhVHZTRHdSNG9VUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVGODcvMzQwMDgwMjIzOEIzMTFGMDkxNDE4MDg2QzRGOUFFMDIvQzA1MzYxM0Uz
OEIzMTFGMDhEQjYzMjA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWNaMA0GCSqGSIb3DQEBCwUAA4IBAQAPraV2C6/B+1+m2n6C4jdR
EVlylm/elhugFWr7OZB0GxKNXZ+mLZ6ZVg0QMshI/0RVDzsr6EmLad+B3wC3a0JT
YIQZDa14Ow1OdVwjWQK56x23S5bYomHHBRcDTGbbtzrUX/5SEDqGN8y3oslI+8to
7gUCGbVhpQM50WBiN48htLzbVtmJkH7JeAq3c0+NuYQqK8jCNe1uICSIRmcie8mU
5iujvZUTaKJgorE8XKMRWmQJ7Le/GKqpHX767Hz4ZUxUL0YUl387SL62pciJNjdC
Lu61ZU8N7xvIJpCgEaJCG4IsWKWwZx1K8AxMhGivAtyOfPgmjzwfJIcRN3lJOZtd
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:36 2026 by rpki-client