
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/67B0ACBC8E5011EE95DFC141C4F9AE02.roa
File: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (raw, json)
Hash identifier: u0AUuQ+24IMRETOkT+RbnVWhzKRT6X2WDxYpPB1no5o=
Subject key identifier: E4:A6:01:36:92:5F:AC:A8:FF:E8:98:28:C8:54:8C:D2:1B:95:1C:9E
Certificate issuer: /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
Certificate serial: 0223
Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/67B0ACBC8E5011EE95DFC141C4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:22:19 +0000
ROA not before: Sun 30 Aug 2026 16:22:19 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 17705
IP address blocks: 192.138.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl
rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
Validity
Not Before: Aug 30 16:22:19 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9458bb-d06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:b0:42:6e:7c:22:f9:a1:85:11:08:26:27:
3c:2e:bd:7a:eb:0c:2f:31:e6:e8:18:8e:cf:8c:ff:
21:18:18:78:a3:47:7b:ac:b2:5f:60:c1:37:5c:62:
8a:b6:d5:d2:44:02:ec:b6:e3:94:38:d8:93:c7:78:
59:9d:e9:f5:c6:23:c1:1a:11:ac:f0:55:d3:4e:dc:
68:02:1a:7a:2a:66:68:e4:29:1c:bf:b6:02:9f:b1:
a6:c6:76:d3:3e:ae:e1:a4:c7:2e:5a:3a:0c:c6:ea:
2a:3a:6d:9c:62:0d:85:b9:c6:e7:01:89:73:b6:a1:
5f:a6:d5:d1:97:61:dc:a8:e5:01:a8:ac:0e:b1:7b:
42:4a:be:d9:a4:66:e4:d3:b1:2f:d9:65:31:ca:5c:
50:bc:b4:20:ee:7f:f2:3c:e8:fb:27:cb:0c:05:0d:
73:59:a3:ab:03:1a:62:d0:3b:e6:88:f7:da:12:50:
14:e3:83:2e:40:66:ac:1b:1b:54:5c:12:8c:ee:1b:
d6:2b:5f:14:c3:c2:c8:eb:c5:9f:e5:d6:a4:7b:19:
2e:4c:09:66:b2:a6:d6:8d:c1:4e:09:e5:2b:d4:f3:
16:da:f5:a7:5e:2a:c1:4b:39:d6:81:4e:eb:4d:fe:
08:4b:3b:77:7d:cc:84:f1:2e:05:d8:44:e8:66:7e:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A6:01:36:92:5F:AC:A8:FF:E8:98:28:C8:54:8C:D2:1B:95:1C:9E
X509v3 Authority Key Identifier:
keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/67B0ACBC8E5011EE95DFC141C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.138.251.0/24
Signature Algorithm: sha256WithRSAEncryption
28:44:e5:7b:81:8f:25:2c:2f:64:1f:b0:71:75:24:1e:25:45:
41:65:39:95:73:a7:03:e2:35:bd:fc:2f:7c:e7:53:d5:eb:64:
7f:c3:fc:08:e0:a5:f8:05:69:f5:91:49:a6:50:55:52:77:37:
4c:e0:52:ff:2c:a0:d1:34:77:70:eb:7a:d9:99:f2:71:88:30:
48:c3:9d:7d:93:c0:15:2f:34:e3:fa:bf:7d:4b:0a:92:41:2d:
66:1d:fb:59:c9:aa:72:e0:6d:f4:49:51:86:56:a2:18:77:f4:
25:89:30:75:93:fc:28:6e:6f:dd:08:b9:df:04:ef:19:60:ff:
3b:56:aa:2c:d0:4e:3a:3c:da:52:3e:76:2e:51:d1:04:70:6d:
91:81:01:8a:ec:43:ba:a1:ee:4b:d2:46:a0:1b:58:d5:ae:1a:
1e:c7:df:61:ed:2b:14:b5:09:b2:50:e9:ff:68:3d:b5:53:bf:
86:8c:db:25:a5:0e:3b:04:ee:f5:14:9c:88:d6:33:dc:85:5d:
79:81:17:1f:a6:09:b0:b8:94:21:92:25:a6:97:8c:e1:8d:b3:
75:7c:f4:9a:a3:b5:c4:44:37:fb:8c:3c:de:cc:0d:4b:ef:7c:
9e:e5:ee:26:0f:ff:9f:3f:38:93:e0:97:0a:5e:25:02:a7:56:
c9:d8:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:49:51 2026 by rpki-client