
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/2518C04062E011F08D04F42EC4F9AE02.roa
File: 2518C04062E011F08D04F42EC4F9AE02.roa (raw, json)
Hash identifier: kENDVh6RH1qeZlCkf0uhEn8QDOreUtcC3M+ErBdzcRs=
Subject key identifier: DD:13:E4:A9:70:29:AF:2A:30:84:C2:0B:F8:05:D5:72:62:62:6B:2F
Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Certificate serial: D5
Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/2518C04062E011F08D04F42EC4F9AE02.roa
Signing time: Sat 29 Aug 2026 06:57:13 +0000
ROA not before: Sat 29 Aug 2026 06:57:13 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 141433
IP address blocks: 165.101.214.0/23 maxlen: 23
165.101.214.0/24 maxlen: 24
165.101.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Validity
Not Before: Aug 29 06:57:13 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9282c9-fb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:6b:bb:a9:28:48:2d:30:65:b6:52:3b:ca:
eb:b3:87:1c:71:27:72:41:12:62:ab:ac:51:ad:a6:
b1:ad:08:98:8a:5b:bb:92:6b:49:2e:05:55:ed:c8:
15:36:35:b9:f5:7c:66:0a:89:2c:d9:25:56:4e:08:
f9:a2:a2:b0:33:7b:7b:72:2f:1d:ec:99:05:9f:b7:
72:ff:8a:e6:3b:d9:e0:7c:64:aa:71:e3:83:ba:eb:
0e:3e:8a:ac:3e:c7:60:56:d9:b8:7a:eb:98:31:4d:
cb:9b:4f:4c:71:3d:7a:3c:8a:f9:6b:ed:33:d3:35:
ab:26:b2:2b:04:46:8a:a5:de:ca:91:99:60:3a:92:
df:16:b4:1f:90:bf:d3:f5:d1:d9:03:82:f8:bb:8f:
d7:98:32:db:00:64:3d:7c:3f:f2:71:75:08:0b:f3:
42:af:cf:a8:fe:2a:9e:37:17:94:02:bd:6b:c3:7c:
37:b9:5c:45:e8:d9:d9:48:b6:f5:3b:b5:f7:d7:c0:
a1:84:92:ee:19:1c:03:da:1a:b1:0d:4b:b9:79:54:
50:02:19:9a:90:1d:65:86:93:e7:39:af:34:6c:95:
1d:8d:4f:2a:fc:82:d9:ea:2c:b6:c0:b9:c7:f2:66:
7b:68:21:c3:65:f5:00:1c:41:15:04:7c:03:79:94:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:13:E4:A9:70:29:AF:2A:30:84:C2:0B:F8:05:D5:72:62:62:6B:2F
X509v3 Authority Key Identifier:
keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/2518C04062E011F08D04F42EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.214.0/23
Signature Algorithm: sha256WithRSAEncryption
86:35:e7:66:15:fb:be:26:2c:e1:be:83:0d:b0:e1:7b:71:c8:
53:90:26:43:77:2f:bb:50:9d:8f:04:fa:9f:c0:1e:8c:b0:1d:
3d:ee:2b:77:7d:72:c1:28:ef:d6:68:d1:51:19:7d:e2:2a:52:
f7:a3:35:aa:31:61:6a:e8:43:fe:20:08:bb:42:8c:07:24:ac:
84:1c:bf:3b:0e:cb:ef:de:0c:af:fc:10:31:06:32:6b:a8:31:
0c:7d:09:db:5b:e2:9f:88:23:c6:bb:bb:b0:a2:f8:44:6f:68:
55:a2:7e:6f:d8:33:dd:d3:2a:c2:eb:ec:18:ec:c0:5f:15:d5:
fd:f6:55:01:e1:c0:73:c5:49:3f:e4:6b:23:c1:35:2a:c7:0c:
12:9b:91:98:16:11:88:52:b1:63:75:a6:09:54:1d:f0:55:d7:
b2:12:b7:62:64:72:13:5b:51:06:84:dd:6e:87:0a:78:84:04:
a3:dc:25:3c:6e:5f:5f:fd:eb:11:d1:28:10:bf:aa:a8:ce:2a:
b4:08:6f:ac:8c:46:13:5d:43:43:a3:cf:9b:49:fa:fa:cf:a8:
dc:a8:10:c6:4b:db:b1:ad:b9:31:f2:2b:0b:fc:0e:37:30:5d:
1a:f9:f2:6f:1a:66:7e:49:73:ab:36:fa:cb:22:72:ec:a7:e8:
be:ee:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:44:05 2026 by rpki-client