
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/932FE94E6BB911ED97343873C4F9AE02.roa
File: 932FE94E6BB911ED97343873C4F9AE02.roa (raw, json)
Hash identifier: ERom4Ei0HIGCTmZt1BesT0wAL5vdqp/U/eF25sHImyc=
Subject key identifier: 4B:6D:11:3D:8F:A3:5B:0D:52:4A:0C:76:5C:5E:AD:A0:DF:22:03:81
Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Certificate serial: 0329
Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/932FE94E6BB911ED97343873C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:06:53 +0000
ROA not before: Tue 03 Jun 2025 01:56:43 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 136961
IP address blocks: 165.220.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809 (0x329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Validity
Not Before: Jun 3 01:56:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4722d-2e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:be:4d:84:b7:d2:fb:c1:3f:56:79:b6:0d:
99:c8:e4:f9:21:07:b0:9d:c6:88:2f:b4:7e:d0:3a:
24:1d:cf:78:91:8e:8e:f3:29:a1:d5:de:fc:c0:20:
bf:57:8f:40:10:77:1d:ad:32:97:41:47:75:88:f3:
e2:84:b4:71:95:56:e5:a9:ef:56:6e:ca:36:de:c8:
b9:ff:ef:ea:d7:7e:56:2e:09:06:32:63:65:b6:5a:
18:2a:c4:2c:41:e3:87:52:6f:96:d1:32:88:2d:6b:
7f:c1:47:d7:b0:53:ad:40:05:2b:5b:78:28:1b:96:
54:3f:c7:17:a7:2d:f9:5b:b3:be:df:7a:39:76:55:
7e:6a:62:bc:28:fe:68:54:70:bd:d9:4f:50:10:ea:
07:01:e6:24:ef:42:01:9d:ae:30:61:c0:97:8e:c0:
4e:6a:21:3c:3f:6c:18:3a:0b:e1:45:fe:f0:7c:2e:
46:c3:cf:ff:a2:59:a4:30:c6:fd:d7:cc:52:ef:5e:
f0:be:7a:f5:7e:bc:71:a6:b7:1f:c2:4b:ab:4c:a8:
18:c8:b1:ab:db:e0:95:96:6c:65:83:6e:3a:d9:4e:
d6:e9:9f:b1:02:ce:a1:35:92:b5:38:e0:0d:8a:f4:
c3:e5:b9:43:5c:a0:c3:64:27:6a:82:b5:d2:af:4b:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6D:11:3D:8F:A3:5B:0D:52:4A:0C:76:5C:5E:AD:A0:DF:22:03:81
X509v3 Authority Key Identifier:
keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/932FE94E6BB911ED97343873C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.220.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:97:5d:40:41:5f:1a:77:5f:6a:6d:c5:3b:57:85:c9:b0:c1:
bc:d3:44:70:49:4d:d6:c7:78:99:c4:94:ac:a8:71:58:1e:16:
cd:03:89:72:74:1c:2d:3e:11:fc:63:ee:75:8e:c6:45:f2:41:
be:e7:2b:7d:c6:29:e0:d1:75:dd:8f:6a:a3:0e:c3:58:3d:b4:
75:d6:b6:4e:6e:ea:ef:1a:61:1d:15:55:2b:12:89:99:87:25:
1e:10:cb:ac:de:5e:ab:c7:39:61:f6:93:2a:1a:83:4e:d1:a0:
1c:16:fe:43:d4:b8:b5:ba:a9:49:d6:2f:c1:70:bc:53:03:8c:
d8:31:cb:eb:98:2c:e1:c5:ff:b2:12:6e:80:63:e0:d5:c8:3a:
80:75:61:65:6a:94:cb:14:63:74:d5:62:be:ee:bb:e2:a7:3e:
e4:04:83:64:b7:b9:a1:16:93:d4:6f:d5:f7:63:0b:f8:aa:f9:
3a:32:04:69:a3:d0:65:7f:9a:38:67:34:34:cb:2a:b3:1c:06:
d3:98:22:35:e2:46:d4:11:d3:0e:41:bd:fa:a2:85:7e:c4:0f:
22:5f:2a:92:85:07:c5:56:ac:44:06:55:d4:49:15:51:c3:c2:
c5:11:16:36:02:a0:fe:b7:4a:b1:3e:2e:71:92:f2:1c:13:84:
14:7d:19:c8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw
RjdBOTc3ODkwHhcNMjUwNjAzMDE1NjQzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzIyZC0yZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQu+TYS30vvBP1Z5tg2ZyOT5IQewncaIL7R+0DokHc94kY6O8ymh1d78wCC/
V49AEHcdrTKXQUd1iPPihLRxlVblqe9Wbso23si5/+/q135WLgkGMmNltloYKsQs
QeOHUm+W0TKILWt/wUfXsFOtQAUrW3goG5ZUP8cXpy35W7O+33o5dlV+amK8KP5o
VHC92U9QEOoHAeYk70IBna4wYcCXjsBOaiE8P2wYOgvhRf7wfC5Gw8//olmkMMb9
18xS717wvnr1frxxprcfwkurTKgYyLGr2+CVlmxlg2462U7W6Z+xAs6hNZK1OOAN
ivTD5blDXKDDZCdqgrXSr0vEuQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEttET2P
o1sNUkoMdlxeraDfIgOBMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5
OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg0OTQvMzFCODI2M0MwOTkzMTFFREIyMUM5QjRCQzRGOUFFMDIvOTMyRkU5NEU2
QkI5MTFFRDk3MzQzODczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDpdwIMA0GCSqGSIb3DQEBCwUAA4IBAQCcl11AQV8ad19qbcU7V4XJ
sMG800RwSU3Wx3iZxJSsqHFYHhbNA4lydBwtPhH8Y+51jsZF8kG+5yt9xing0XXd
j2qjDsNYPbR11rZOburvGmEdFVUrEomZhyUeEMus3l6rxzlh9pMqGoNO0aAcFv5D
1Li1uqlJ1i/BcLxTA4zYMcvrmCzhxf+yEm6AY+DVyDqAdWFlapTLFGN01WK+7rvi
pz7kBINkt7mhFpPUb9X3Ywv4qvk6MgRpo9Blf5o4ZzQ0yyqzHAbTmCI14kbUEdMO
Qb36ooV+xA8iXyqShQfFVqxEBlXUSRVRw8LFERY2AqD+t0qxPi5xkvIcE4QUfRnI
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:09 2026 by rpki-client