
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
File: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (raw, json)
Hash identifier: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=
Subject key identifier: 99:2A:61:6A:75:A8:E5:7F:70:CE:D1:B7:DB:99:D0:1B:8B:56:E7:B4
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1D8F
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:27:09 +0000
ROA not before: Tue 04 Nov 2025 15:00:28 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 136974
IP address blocks: 210.2.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7567 (0x1d8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Nov 4 15:00:28 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a484fc-3f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:d7:c3:62:fd:04:27:64:72:a5:82:6e:83:
7d:f9:4f:58:93:6a:64:62:52:11:89:27:5a:92:01:
b2:36:a7:00:6e:44:b8:83:45:05:2b:ff:28:b2:f4:
61:c2:9f:93:ad:30:62:de:5f:8e:22:01:83:57:3e:
9b:e7:c0:1f:c2:09:d5:b4:a1:5b:2f:cc:09:49:09:
8a:61:a0:bc:4b:4b:e2:6b:6e:ef:99:1f:a1:88:01:
f5:d5:e2:8d:d4:87:ce:66:2a:98:d9:d1:59:e6:3f:
47:7f:26:68:49:f2:ec:b6:fd:1e:5b:d4:56:8a:ae:
63:ab:38:f4:e1:ee:9c:b3:da:bd:5e:7a:f2:c8:03:
94:e9:e0:49:32:0e:fa:9e:b8:30:52:58:6c:74:f7:
c1:7a:ce:b8:2c:3e:c4:27:b7:a9:5e:92:64:25:e2:
23:28:84:f4:06:ab:be:ff:2f:8b:e0:aa:b5:7d:aa:
fe:ea:87:54:95:b4:78:18:3a:f0:c9:d4:20:bc:5d:
46:85:22:37:ad:b6:94:b5:bc:b7:21:9a:f1:22:55:
ad:22:be:3c:ef:60:7f:05:d2:f0:61:ae:34:4d:8e:
1d:e3:c1:88:55:fd:9d:22:9b:45:08:07:89:af:6f:
89:78:8e:22:85:74:06:f1:1c:ad:dc:2c:44:40:15:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2A:61:6A:75:A8:E5:7F:70:CE:D1:B7:DB:99:D0:1B:8B:56:E7:B4
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.2.136.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d2:b8:b9:30:02:5b:a7:b0:c4:60:5e:43:8e:e2:cd:05:91:
f4:89:f5:b8:be:cc:a3:b8:e0:d8:70:b7:fe:62:5b:57:2c:35:
59:25:a2:e5:6d:60:37:0a:a5:ad:c8:d3:b6:5e:e2:a1:1e:eb:
bd:40:ed:a9:1c:03:cd:d5:1a:bb:f1:0e:48:6e:0c:a4:6b:66:
c6:68:b3:24:07:89:45:64:ef:37:61:b2:6e:50:94:92:dc:df:
32:d5:f3:08:23:83:b3:f1:c7:38:9b:77:39:80:88:b1:9c:23:
bf:8c:78:9a:c1:d8:5f:fc:5b:86:d0:5e:38:35:7c:ee:09:a9:
aa:80:9a:ea:50:8d:a5:73:4e:a5:0d:52:16:01:f7:1d:7c:52:
bf:b5:41:a4:da:5a:3a:ec:a8:3c:a7:26:2c:37:fa:d3:79:1d:
a9:47:b8:0d:f5:ba:97:f1:58:6a:76:1c:b4:95:53:58:ad:10:
df:45:86:a4:b3:a8:91:df:f9:ac:6d:a7:62:95:00:64:7d:01:
bd:5f:52:c3:3e:95:c4:8a:d0:97:49:e7:b2:0b:cd:b0:4e:e5:
ff:f9:5e:97:38:56:87:a5:bc:69:27:32:48:57:b2:4d:51:1c:
df:43:4d:6a:50:a4:89:bb:e1:77:f7:d1:d2:39:07:46:26:3e:
5f:d8:b6:88
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICHY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4
NkE5QjNGRDgwHhcNMjUxMTA0MTUwMDI4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODRmYy0zZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmYPXw2L9BCdkcqWCboN9+U9Yk2pkYlIRiSdakgGyNqcAbkS4g0UFK/8osvRh
wp+TrTBi3l+OIgGDVz6b58AfwgnVtKFbL8wJSQmKYaC8S0via27vmR+hiAH11eKN
1IfOZiqY2dFZ5j9HfyZoSfLstv0eW9RWiq5jqzj04e6cs9q9XnryyAOU6eBJMg76
nrgwUlhsdPfBes64LD7EJ7epXpJkJeIjKIT0Bqu+/y+L4Kq1far+6odUlbR4GDrw
ydQgvF1GhSI3rbaUtby3IZrxIlWtIr4872B/BdLwYa40TY4d48GIVf2dIptFCAeJ
r2+JeI4ihXQG8Ryt3CxEQBVn+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJkqYWp1
qOV/cM7Rt9uZ0BuLVue0MB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE
ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvRDJFRjUzMTIx
OUFFMTFFQjhEM0JDMjBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0gKIMA0GCSqGSIb3DQEBCwUAA4IBAQBw0ri5MAJbp7DEYF5DjuLN
BZH0ifW4vsyjuODYcLf+YltXLDVZJaLlbWA3CqWtyNO2XuKhHuu9QO2pHAPN1Rq7
8Q5Ibgyka2bGaLMkB4lFZO83YbJuUJSS3N8y1fMII4Oz8cc4m3c5gIixnCO/jHia
wdhf/FuG0F44NXzuCamqgJrqUI2lc06lDVIWAfcdfFK/tUGk2lo67Kg8pyYsN/rT
eR2pR7gN9bqX8Vhqdhy0lVNYrRDfRYaks6iR3/msbadilQBkfQG9X1LDPpXEitCX
SeeyC82wTuX/+V6XOFaHpbxpJzJIV7JNURzfQ01qUKSJu+F399HSOQdGJj5f2LaI
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:50 2026 by rpki-client