
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/B2CB84D4F3E211EB9512E219C4F9AE02.roa
File: B2CB84D4F3E211EB9512E219C4F9AE02.roa (raw, json)
Hash identifier: bT0CPgLPKWM/kUdjakieKJEvRcvSEX5+8obnsl7sVh4=
Subject key identifier: B5:63:73:C5:58:88:36:53:EE:9D:E2:9B:A3:09:FA:4E:15:ED:CC:16
Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Certificate serial: 0636
Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/B2CB84D4F3E211EB9512E219C4F9AE02.roa
Signing time: Wed 02 Sep 2026 22:44:54 +0000
ROA not before: Wed 02 Sep 2026 22:44:54 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 136500
IP address blocks: 202.36.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1590 (0x636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Validity
Not Before: Sep 2 22:44:54 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98a6e5-60db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:eb:ca:ba:f9:97:4a:02:2a:35:3e:61:7b:
45:b7:40:69:4b:c1:0a:12:1c:61:92:3f:51:1c:fa:
ee:9d:8d:07:b9:5b:f2:4c:43:27:25:67:36:92:27:
30:23:94:67:23:95:7f:f1:34:3a:d2:94:1d:7b:c9:
05:96:1e:9f:ed:2b:de:a2:58:21:4f:96:22:96:5e:
5a:52:b2:aa:63:eb:1c:da:a5:bb:82:f4:7e:ae:7e:
b9:5a:ff:9c:ae:d4:2b:94:7f:29:81:f3:cd:0d:21:
2d:4a:0b:fb:35:56:19:a8:bb:01:4a:be:57:a9:f4:
bb:55:34:4b:39:a9:92:e8:3f:7f:fc:a9:e3:74:78:
8c:91:75:9d:e9:ce:a5:a8:15:ea:67:e4:24:ec:f7:
0d:b6:c8:05:86:e5:13:aa:42:63:b6:12:35:64:a1:
9f:8e:26:de:f0:ef:ae:e2:e2:72:30:7a:b2:90:06:
57:01:14:10:cd:bd:f1:c9:51:35:55:5e:51:89:34:
9a:22:6d:62:a5:da:37:2c:7d:1c:bc:34:e4:a8:c3:
ff:b9:94:3d:9b:4a:22:7b:03:69:7c:0f:a4:08:cd:
41:f9:ec:bc:f1:49:73:be:23:54:48:e1:40:1c:24:
bc:00:46:1d:0b:e7:e7:e1:14:35:a6:f1:22:a1:b9:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:63:73:C5:58:88:36:53:EE:9D:E2:9B:A3:09:FA:4E:15:ED:CC:16
X509v3 Authority Key Identifier:
keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/B2CB84D4F3E211EB9512E219C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.36.175.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c5:9d:cd:a4:e0:54:be:1d:3f:90:34:8d:13:eb:fe:f0:5e:
55:64:ab:ca:85:c1:4c:19:21:25:15:6e:69:fe:fc:a0:c4:2c:
34:e3:aa:e4:c6:72:46:9f:3f:90:85:4d:74:55:9f:cb:83:50:
2d:93:bd:a2:80:91:5c:71:60:7b:dc:62:75:2b:d6:16:b7:49:
44:b6:d9:0e:c4:d2:de:b0:f0:93:27:eb:ce:20:30:25:8e:af:
97:33:4a:19:2c:35:0a:ab:c2:a3:43:56:70:c7:32:85:86:44:
0b:29:0d:7e:08:c3:cb:27:16:be:ee:d2:4d:77:56:13:8e:1f:
ef:38:5f:a3:0b:74:b8:bc:9d:f0:48:0d:89:19:72:4a:38:f8:
a9:ad:61:86:37:2c:a4:60:55:33:2c:33:4c:4c:ed:95:ea:4e:
4d:90:47:e6:25:64:82:c8:e6:31:9a:2d:6c:8d:22:09:f8:ee:
8e:1a:0f:ff:7b:9e:7d:0a:d7:19:1b:3a:7a:5a:6d:3b:72:60:
a7:0c:f2:5a:b3:a1:3e:f0:d6:8d:96:92:8a:5f:03:ce:e1:f1:
65:8c:34:54:0b:30:9b:ba:a6:95:de:02:5a:a1:6c:82:db:fb:
46:e7:43:56:d6:e4:53:ae:1e:12:71:2e:3b:46:57:70:b7:26:
45:c3:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:37:32 2026 by rpki-client