
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/3EEBC4867BFF11EFA2839E45C4F9AE02.roa
File: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (raw, json)
Hash identifier: BNw54ourUE+j9qMXjxmgsD1rJcXCowGw6fh8YI3ahFs=
Subject key identifier: 20:FA:E1:DF:F0:BC:7C:C9:B6:16:BC:4E:0F:C0:07:C4:E2:CD:29:01
Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial: 018C
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/3EEBC4867BFF11EFA2839E45C4F9AE02.roa
Signing time: Mon 21 Sep 2026 04:56:17 +0000
ROA not before: Mon 21 Sep 2026 04:56:17 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 153334
IP address blocks: 160.187.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Validity
Not Before: Sep 21 04:56:17 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab0b8f1-5773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:ee:ae:e7:11:3d:66:b9:84:7a:85:f9:36:
1c:96:1f:22:85:86:41:3d:c2:7b:f1:37:54:95:16:
f3:48:82:88:75:73:d0:1e:15:ae:33:6b:07:68:93:
d3:71:d2:de:91:dd:02:25:0d:b2:27:5e:c4:3c:4c:
d2:e3:41:28:78:3c:88:cd:5e:fd:be:7a:77:a8:12:
e0:33:3a:01:9e:f6:06:85:bc:31:d4:04:c5:fc:5c:
9a:f6:c3:33:85:96:b9:d8:ea:b1:20:b4:04:72:20:
2c:46:30:3d:4a:ec:14:f8:e9:39:16:47:37:0a:f6:
c7:f5:46:1c:a6:51:94:ef:5e:d9:10:10:9a:35:48:
ab:6a:0e:bc:bc:37:11:0a:c1:bf:a7:15:fa:f5:10:
e2:73:db:0f:a7:ec:34:3f:77:f8:9e:ee:10:a1:e8:
a8:33:8b:b5:ba:04:55:45:52:f0:a0:cb:b5:05:77:
77:25:fa:08:8f:e9:ff:08:5c:0c:0f:34:62:e1:b9:
0f:c9:4c:45:07:6e:35:5b:05:5d:02:23:d0:f0:b0:
ba:08:51:de:a9:e6:5d:e7:bd:a6:f8:de:66:b3:01:
53:f7:fd:29:21:aa:8d:91:cb:14:95:10:46:20:2c:
9c:7a:b0:9e:1a:74:ca:ce:25:de:4c:b6:c6:61:fb:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:E1:DF:F0:BC:7C:C9:B6:16:BC:4E:0F:C0:07:C4:E2:CD:29:01
X509v3 Authority Key Identifier:
keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/3EEBC4867BFF11EFA2839E45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.96.0/24
Signature Algorithm: sha256WithRSAEncryption
de:eb:b2:60:a9:a3:9a:f4:f8:ee:c4:41:df:c2:51:1a:9f:98:
34:a4:fc:2d:5b:a4:f7:90:5f:26:4f:d7:ab:1c:3d:b4:eb:91:
e2:e6:d4:88:3c:b3:37:ad:d1:be:6a:f9:ad:07:cd:8a:5e:d0:
c4:3c:70:67:f4:07:75:5a:a9:48:ce:f4:bf:4e:40:b7:39:7a:
64:2b:ed:ec:0e:d2:f5:0c:ce:72:66:6e:84:00:f9:21:3a:ad:
df:4c:04:e0:da:05:8b:cc:ff:02:1c:24:47:e9:d9:14:b8:50:
ae:52:32:85:b3:16:42:25:a5:de:1a:b9:91:29:6a:01:d3:73:
e6:d0:7d:5a:13:3d:c8:0f:da:c9:a2:be:de:6a:c8:a2:50:a4:
af:3d:c5:21:97:3d:6a:89:98:c9:c1:1d:09:54:54:21:b6:73:
2d:32:89:35:71:e7:1a:df:24:41:b9:1e:df:92:c7:57:d9:ae:
ee:1e:5f:cc:e3:6f:a6:ed:59:d5:a7:84:63:3c:58:d3:e1:3d:
ea:c0:aa:8b:77:fb:41:bb:21:2b:cd:de:e4:09:98:a9:01:06:
8e:22:ae:45:3c:a1:10:16:77:3b:36:8e:2f:ba:50:50:8e:6f:
51:1f:b4:4a:ac:b8:a8:06:b0:fd:54:16:0e:7a:9b:7c:7d:8b:
df:c4:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:34:39 2026 by rpki-client