
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F0E06498748B11EE92D55F6AC4F9AE02.roa
File: F0E06498748B11EE92D55F6AC4F9AE02.roa (raw, json)
Hash identifier: DXyPsBb+TauSinAKSbTPrnscbrr/NLc4whMOIpsP9Xk=
Subject key identifier: 1C:C4:68:CE:6F:87:8E:41:1E:EE:CA:C1:E1:FD:AF:D0:0E:93:27:A4
Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Certificate serial: 01C1
Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F0E06498748B11EE92D55F6AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:24:02 +0000
ROA not before: Tue 13 Jan 2026 03:22:31 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 38220
IP address blocks: 117.18.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Validity
Not Before: Jan 13 03:22:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a413c2-b8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:a4:ec:81:9c:17:fe:6a:dc:5c:f9:28:2a:
df:73:4c:22:2f:b2:db:78:0e:48:e2:ca:e2:0b:e4:
64:9c:09:1e:67:00:eb:40:6a:26:0f:97:31:73:24:
cc:36:e6:a4:13:2f:d9:ed:3a:18:11:65:4e:19:10:
2a:bf:92:60:8f:55:f6:db:54:c7:92:a5:bb:5a:68:
a6:e6:c5:cd:68:b6:83:80:93:a8:49:1e:83:6f:7c:
b3:e1:1d:63:50:4c:8f:8a:32:a0:3d:dc:3e:53:50:
96:39:c7:ca:c3:45:80:92:7c:c4:c7:dc:29:a8:fd:
97:16:67:80:58:f0:2d:46:16:40:dd:10:35:2f:b2:
08:bc:66:15:bd:2d:ec:b3:ea:50:58:a0:78:90:01:
4b:e4:58:a7:a6:75:d0:5e:a9:ea:c5:c2:cb:9f:51:
68:7a:3d:55:1c:ef:a6:c5:a5:82:19:31:86:42:81:
89:ef:2b:c5:d6:e9:3e:92:94:98:f2:a0:c4:e9:89:
5c:f9:09:3c:6c:9a:9d:d7:b1:b4:09:ab:53:01:30:
5a:d6:00:d7:6b:00:bf:a1:51:a2:17:ff:f6:f6:ee:
ef:a4:3e:69:97:82:0b:fb:3c:00:0a:ab:51:d2:73:
75:57:ba:f4:b7:5c:e7:2d:ea:c6:f7:61:af:5e:fd:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C4:68:CE:6F:87:8E:41:1E:EE:CA:C1:E1:FD:AF:D0:0E:93:27:A4
X509v3 Authority Key Identifier:
keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F0E06498748B11EE92D55F6AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.18.117.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e6:b2:97:57:eb:2a:7c:55:89:85:02:24:28:21:39:97:ee:
42:56:d5:97:3a:6b:56:16:69:18:a1:f3:13:80:4a:af:f9:f3:
a0:1a:16:57:de:ac:45:73:68:a6:1f:32:0c:b3:c2:be:e9:00:
95:4d:d3:d4:03:58:2f:ad:20:17:33:15:78:54:3a:6b:4f:eb:
bb:d0:03:d3:55:fc:39:92:63:33:3a:aa:2d:83:d3:9d:29:8e:
2d:1c:85:a4:ab:23:a5:8a:d8:78:9c:2d:56:7e:b0:26:0b:7d:
4a:33:3e:ef:63:d4:74:33:69:4e:f1:d6:62:c4:fa:c2:df:27:
a1:79:77:bd:39:fb:a9:01:2e:a0:5a:9b:1a:a0:82:d0:6e:95:
81:6d:b7:3a:82:9c:68:27:64:64:14:7e:42:d9:e8:b0:f8:03:
6b:92:76:8b:9f:82:b5:f3:58:78:62:9f:55:ab:ea:40:ae:42:
c2:28:f4:ea:d3:d4:7e:97:4c:76:04:ea:6a:39:74:99:10:c5:
d1:9b:47:4a:66:29:04:03:8b:f3:00:7c:65:b2:5e:95:ef:76:
db:95:3b:06:85:07:1e:68:81:dd:d0:76:43:cc:42:a5:de:d9:
a1:d0:a8:9d:7f:4d:5e:40:8a:89:12:df:f7:16:1e:05:f3:67:
c4:db:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:08:43 2026 by rpki-client