
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8D769B548D3C11F0A8123F21C4F9AE02.roa
File: 8D769B548D3C11F0A8123F21C4F9AE02.roa (raw, json)
Hash identifier: 5cXLpNEPj2n6/HEGy8/26JkT8yzOfvZLJ/SaAIq5f84=
Subject key identifier: FE:AB:CC:9C:42:65:35:60:A6:E7:05:BC:F6:E0:BB:E4:4D:11:B5:90
Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Certificate serial: 355E
Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8D769B548D3C11F0A8123F21C4F9AE02.roa
Signing time: Wed 08 Apr 2026 06:17:59 +0000
ROA not before: Wed 08 Apr 2026 06:17:59 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 16509
IP address blocks: 216.99.198.0/24 maxlen: 24
216.99.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13662 (0x355e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Validity
Not Before: Apr 8 06:17:59 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69d5f317-8472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:4b:44:04:cb:40:71:0d:53:6c:e9:c8:a1:
a6:83:38:b6:d1:ef:31:53:6c:9c:8a:ee:2d:dd:6e:
82:62:e9:b1:b0:30:69:30:aa:c4:81:4a:68:3e:ce:
48:9a:f4:5a:1a:15:93:4f:de:03:75:04:00:1d:73:
e8:a8:c0:97:5f:b6:a8:b2:86:89:bc:62:51:08:f4:
f2:5b:fd:d6:f6:77:f2:dd:39:93:36:28:d0:bd:77:
da:ed:65:97:44:9f:09:10:07:41:52:7a:26:a5:5d:
c4:4d:30:91:5c:99:df:d8:c2:24:23:4c:9c:30:06:
ea:3c:df:4e:06:b7:74:f3:d4:96:ba:64:4b:eb:76:
4d:06:a4:a0:b8:12:92:10:7d:77:03:f4:1e:8a:75:
e0:b2:d0:c3:21:37:52:4b:44:08:04:66:6d:56:03:
e8:63:47:32:a5:6a:83:ed:e3:aa:66:8f:3e:aa:79:
2e:42:f3:1c:49:a3:64:6e:32:04:77:85:69:3e:00:
33:ba:0d:6d:04:f3:25:8f:e8:02:ea:ec:2a:04:d6:
68:1f:db:9a:15:9d:48:63:03:7b:a5:67:77:61:f6:
49:fe:ae:3e:be:ef:c7:9c:b1:48:aa:46:ab:be:d9:
1d:92:04:69:2a:03:18:b3:3d:11:20:09:b8:77:17:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AB:CC:9C:42:65:35:60:A6:E7:05:BC:F6:E0:BB:E4:4D:11:B5:90
X509v3 Authority Key Identifier:
keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8D769B548D3C11F0A8123F21C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
216.99.198.0/24
216.99.204.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b2:8b:57:a4:e6:79:4e:db:10:cf:ae:b5:94:79:d5:30:bc:
ee:41:18:5a:53:75:fe:5b:8e:d5:f9:ee:4b:b3:bf:82:e7:06:
59:48:a4:5d:65:50:2b:97:27:da:43:b9:df:70:76:fc:c4:c7:
82:31:4c:78:14:df:14:7b:88:19:2c:91:d4:98:23:43:e4:ce:
82:f0:c7:29:fe:ee:35:5b:53:a4:b4:d6:23:6c:c8:cb:e2:db:
42:c7:1d:25:db:20:c7:fe:d2:d5:db:0a:c1:a8:df:bc:6b:8c:
6d:b2:a5:03:f1:5e:70:5f:13:5b:06:fd:87:9d:88:3a:07:0a:
33:0e:98:9a:1b:ab:03:ab:8f:45:85:11:18:6a:21:06:3a:66:
60:29:60:cc:ef:8a:f1:2b:77:88:35:e4:57:11:b4:c3:a4:cc:
9b:13:a9:e3:7c:99:e5:5d:15:e1:cb:61:0d:a5:66:c3:75:29:
ce:5f:ed:73:b6:21:9d:5e:01:da:a3:57:e1:13:77:93:fb:02:
61:87:ce:aa:74:b5:53:43:ff:2b:32:88:67:9d:3f:73:d4:de:
52:2e:09:ae:1e:94:e2:54:72:99:9c:05:46:83:eb:3e:ef:da:
57:03:96:52:1d:c8:2f:76:ab:d1:ec:61:c1:2b:95:78:6f:01:
0a:70:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:00:31 2026 by rpki-client