
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/0B51CEDE5FA911F0BE187C31C4F9AE02.roa
File: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (raw, json)
Hash identifier: WRz1Amhg1eLxzvJe34a5Oo/mdHZDgY00iZZMnOor6VE=
Subject key identifier: 55:DC:0B:71:46:FD:B6:5F:DC:9A:2D:DB:C9:70:FB:8F:49:FE:D7:00
Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial: D7
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/0B51CEDE5FA911F0BE187C31C4F9AE02.roa
Signing time: Sat 29 Aug 2026 06:56:54 +0000
ROA not before: Sat 29 Aug 2026 06:56:54 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 151351
IP address blocks: 165.101.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Validity
Not Before: Aug 29 06:56:54 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9282b6-2aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:07:3f:2d:0f:67:c3:51:23:96:44:22:a6:
81:6d:90:da:f5:f6:12:d5:cd:82:13:bc:29:56:4a:
02:12:e9:1a:9c:fc:7d:fa:fc:00:80:df:9b:bd:ec:
8b:b9:4a:3b:4e:4d:da:ae:b1:13:a0:27:4e:48:68:
e0:54:af:3e:3f:8f:91:8e:b2:c3:a5:66:11:d2:e7:
4f:e1:96:a2:f2:d3:30:e8:9b:7f:7a:fe:9e:66:45:
42:be:a7:f4:89:41:f5:71:25:20:d3:17:92:23:58:
b4:28:46:37:52:d6:4a:ae:e7:a6:cc:6c:37:27:68:
da:cf:bc:39:64:29:e2:50:89:e5:45:f2:05:25:42:
16:7a:72:31:5e:d5:2c:6f:3d:87:9c:a7:47:aa:7a:
c4:e7:23:91:cb:88:96:8a:a9:59:cc:f3:5b:1c:fd:
37:b1:35:21:e8:80:51:0c:f4:88:0e:bc:23:6a:4a:
b0:ef:39:85:57:77:b2:c5:ca:b9:06:ac:f0:a0:a6:
be:a6:75:cc:f8:fa:48:7b:a7:9d:6f:eb:32:8a:10:
f5:55:9d:9c:4a:7b:30:c2:6f:d7:d7:19:a0:e5:9c:
d0:62:fa:6f:84:01:7a:52:47:d6:b0:c4:17:bd:96:
37:81:c9:21:09:8d:a5:ea:80:c5:a1:2f:67:70:f5:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DC:0B:71:46:FD:B6:5F:DC:9A:2D:DB:C9:70:FB:8F:49:FE:D7:00
X509v3 Authority Key Identifier:
keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/0B51CEDE5FA911F0BE187C31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.180.0/23
Signature Algorithm: sha256WithRSAEncryption
58:d8:ea:8c:bf:d0:bf:b6:cc:03:46:6c:39:49:45:bf:59:6a:
34:ca:2e:70:f6:ab:61:ba:a7:7e:b3:22:0c:a8:2c:c8:09:f8:
91:ac:a1:83:39:39:ee:0a:e2:c2:3c:35:4d:48:65:d9:85:45:
16:54:87:1e:c4:d0:ba:90:d2:3d:1d:fe:8f:91:85:19:89:bc:
bb:eb:00:f8:1f:fb:40:ed:1c:ca:8e:26:dc:5c:31:02:87:a4:
4c:3b:30:f0:59:21:ec:ca:9d:68:2e:65:5c:97:75:95:62:64:
c4:fc:9c:21:29:33:88:0d:c3:08:c1:2c:90:bc:0e:fe:bc:3a:
51:99:e9:67:54:12:d8:ac:ac:b0:87:85:fa:eb:e9:3a:b0:a6:
cf:98:74:3f:b5:bb:ea:5c:0b:32:55:99:26:c2:b2:2f:a4:98:
16:a6:eb:ad:f5:e4:41:b5:11:19:36:4c:23:01:d4:4c:01:ed:
68:a8:d0:0a:ca:ce:6e:08:c8:64:78:f7:ac:09:6e:77:4d:b7:
24:1d:e5:4c:35:ca:da:28:59:8e:9a:53:f4:b7:77:e4:46:9a:
42:63:e1:c9:d8:b3:ed:23:81:95:05:39:36:25:20:d5:59:4b:
3e:46:95:83:8e:1b:28:bd:7d:29:b7:d8:ff:9f:1d:f0:7f:85:
56:84:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:22:09 2026 by rpki-client