
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/777F5CEE8AA611EA94BC0D13C4F9AE02.roa
File: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (raw, json)
Hash identifier: A41l4a5QeLuyAAjDqJtyo29qvmKv7EtwQyyVY7eLbxI=
Subject key identifier: DF:4A:18:53:B4:B6:E8:E5:60:00:C9:E6:7D:C6:CC:69:FC:80:DA:BD
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1D98
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/777F5CEE8AA611EA94BC0D13C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:27:17 +0000
ROA not before: Tue 04 Nov 2025 15:00:36 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 58470
IP address blocks: 119.30.105.0/24 maxlen: 24
119.30.116.0/22 maxlen: 24
119.73.59.0/24 maxlen: 24
2401::/36 maxlen: 36
2401:0:6f00::/40 maxlen: 40
2401:0:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7576 (0x1d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Nov 4 15:00:36 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48505-d4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:f6:42:cf:30:07:62:b5:82:b8:46:88:07:
58:61:c6:69:41:cf:30:5d:99:39:0d:55:b1:4d:e5:
24:d7:7b:27:53:79:56:d4:fb:ca:e7:70:28:33:64:
e1:7c:b4:c5:b2:a9:44:1a:57:9d:f8:ae:b5:62:39:
c6:46:19:70:96:b9:e7:79:aa:df:3c:ad:e8:76:38:
75:80:d7:8e:a9:61:18:b6:aa:84:dd:9e:70:25:f9:
07:e3:2f:84:39:7a:ee:6b:1e:44:df:01:40:59:94:
3d:b2:b6:0b:bd:76:7d:ae:ff:31:53:d7:79:90:56:
f8:fc:78:83:7b:ff:af:50:12:fc:e8:34:e6:5e:61:
21:2e:b4:f5:21:8c:30:1f:87:f6:49:e5:46:d2:3a:
e6:cb:24:fe:51:35:d6:eb:d8:74:d1:9b:7f:e2:7f:
11:e9:0b:55:9f:e7:e0:b3:6f:6c:79:e4:03:26:a0:
c4:78:52:2d:82:86:a8:7e:cc:94:c1:22:2b:55:97:
16:d4:c6:0c:bc:9e:5c:ea:d1:45:78:44:25:66:86:
df:8a:15:d7:5c:e6:65:a0:10:95:15:e3:3b:d3:78:
e3:33:02:b6:7c:d6:5c:4e:d7:8f:f8:48:ab:97:fa:
48:1e:a2:c1:62:a9:88:d7:fd:02:c1:80:5b:17:a0:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4A:18:53:B4:B6:E8:E5:60:00:C9:E6:7D:C6:CC:69:FC:80:DA:BD
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/777F5CEE8AA611EA94BC0D13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.30.105.0/24
119.30.116.0/22
119.73.59.0/24
IPv6:
2401::/36
2401:0:6f00::/40
2401:0:c000::/40
Signature Algorithm: sha256WithRSAEncryption
31:26:55:80:75:e9:cd:9e:bc:28:28:23:17:b1:38:32:b5:c4:
7a:53:3c:8b:c5:6c:a2:29:17:6e:e5:c3:ac:14:d4:2a:24:81:
94:4c:81:4d:91:5b:c8:e0:6d:db:91:11:82:fa:aa:78:a6:da:
7d:51:a6:79:24:7b:9d:72:87:e4:6c:35:d7:63:63:de:38:2d:
cc:dc:3f:68:e1:ff:e8:33:f5:a3:d8:10:53:30:13:80:0b:21:
4a:b9:e6:18:ef:62:12:76:9d:1f:91:2c:3d:2d:da:74:bd:ee:
f4:5d:a4:fa:d3:ad:d2:e8:c0:1b:b2:0a:68:9c:f9:8a:77:15:
8e:9c:7c:ac:0f:7f:67:08:ec:c0:f7:14:58:ff:f3:c0:8b:38:
a2:7d:ea:db:17:66:c1:4e:48:9c:6c:df:bc:fd:e1:bb:73:db:
15:2d:23:6e:79:07:48:42:a3:8e:cb:f3:c7:e0:e3:15:74:c7:
25:49:b3:6c:ef:33:d2:06:8d:54:92:8d:ca:e6:db:ff:da:43:
76:80:ea:ca:24:24:0f:cc:7a:0e:70:6b:91:a2:10:54:1b:39:
c4:2d:87:72:7e:f4:94:d4:9a:1a:58:89:ca:15:8e:3d:aa:e4:
47:55:91:2a:d1:58:0c:6d:58:21:d2:96:ad:13:29:2d:c4:7f:
d6:b5:53:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:17 2026 by rpki-client