
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/932FE94E6BB911ED97343873C4F9AE02.roa
File: 932FE94E6BB911ED97343873C4F9AE02.roa (raw, json)
Hash identifier: GdVtXHJdH4jIbp9hVVrgdQOKKJfAbWGF3eFgrBsJxvA=
Subject key identifier: 05:D8:F6:EE:32:0E:76:DA:6C:73:A0:B0:A3:0B:8D:D1:3D:9B:59:90
Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Certificate serial: 035A
Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/932FE94E6BB911ED97343873C4F9AE02.roa
Signing time: Wed 27 May 2026 01:32:12 +0000
ROA not before: Wed 27 May 2026 01:32:12 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 136961
IP address blocks: 165.220.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858 (0x35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Validity
Not Before: May 27 01:32:12 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a16499c-6747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0d:cd:4b:84:db:c6:fa:0d:42:b5:cc:4c:22:
4d:ac:58:1a:6a:d9:d5:d0:4f:4e:68:e0:f8:45:dd:
0d:9f:fc:23:9a:43:ef:57:69:ae:0e:ed:96:b7:31:
cf:61:d3:52:3b:4c:2f:71:d4:a4:08:47:44:71:af:
f6:b3:ff:b1:91:e0:ca:13:54:4e:a6:7c:a2:7f:50:
c1:ae:73:b7:88:5a:fe:2b:4f:a9:e6:9b:6b:e0:e9:
43:60:61:b4:59:f7:01:57:ba:00:a4:d8:84:6f:01:
31:ee:61:10:35:fd:4c:2e:a5:a4:9c:14:3f:64:b1:
a8:46:40:bd:be:fe:75:21:71:7f:e1:77:af:6a:59:
42:27:47:5d:ed:56:47:8c:f8:08:1b:9d:c1:7c:9a:
a9:ee:9e:34:1d:3c:e5:27:e5:ea:22:8e:94:96:be:
cf:1a:26:6d:ac:97:44:c9:3a:e5:85:c1:d3:2c:cb:
d3:43:16:57:1b:39:c3:70:05:26:23:b9:34:62:6f:
f8:af:f8:27:5d:fa:2d:6c:f5:ed:07:1f:ef:39:2c:
07:a5:45:74:87:c5:4a:8f:ce:5b:5d:84:9f:79:1d:
b8:4c:4b:7a:4c:9c:67:2d:ce:57:14:bb:62:91:89:
a4:1c:09:f7:32:17:08:02:51:e6:9f:d7:87:3a:f9:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D8:F6:EE:32:0E:76:DA:6C:73:A0:B0:A3:0B:8D:D1:3D:9B:59:90
X509v3 Authority Key Identifier:
keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/932FE94E6BB911ED97343873C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.220.8.0/21
Signature Algorithm: sha256WithRSAEncryption
80:cd:68:72:69:91:f8:f3:98:98:c3:3e:0c:2b:d6:93:49:80:
d9:c5:d2:64:3a:bd:d7:a6:69:76:2a:ec:50:e4:1e:f9:ae:8d:
0b:63:7b:25:91:6e:e7:97:57:dc:69:2d:2a:c3:34:26:59:11:
29:de:f8:0b:da:63:d7:a9:9c:a0:ed:92:87:dd:11:fc:4b:a0:
1f:80:fe:10:64:fe:5a:ed:f1:a4:b6:50:bf:03:4d:b9:d3:07:
a2:2d:31:bd:7c:02:00:b7:87:cd:dc:04:c0:53:d9:82:a5:46:
17:20:36:c7:06:97:a4:8b:58:c2:37:6b:03:ab:a6:2f:15:17:
bf:e7:aa:0b:d2:1d:b3:e7:64:84:fe:f1:3d:62:f9:d6:e0:88:
4e:72:85:16:c8:c1:87:87:ce:46:07:8e:b4:c2:a9:f0:5b:77:
76:d2:f8:fb:45:72:c0:cd:97:8d:87:8b:34:da:41:72:0e:1a:
69:8b:b8:90:e1:5b:37:b7:08:c7:23:9c:97:a5:4f:df:a2:a7:
ac:94:10:f6:2c:73:d0:43:ce:d9:ee:dd:77:a6:02:42:aa:b5:
4f:08:89:47:fc:32:6d:b4:8b:17:95:12:e1:7e:8e:f8:ae:30:
37:72:33:ed:bc:1f:08:95:35:e6:a9:f3:82:18:8a:f2:c6:62:
d0:30:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:04:30 2026 by rpki-client