
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/A83ECFAE791B11F0B7D48969C4F9AE02.roa
File: A83ECFAE791B11F0B7D48969C4F9AE02.roa (raw, json)
Hash identifier: mUJCyq9Quz8XTmFeT3HrV8pJ/1hf+u+XYqhrbRQjU3c=
Subject key identifier: C4:49:D3:65:24:7D:0A:01:C3:85:AF:75:39:F2:D8:F8:EC:26:9A:B2
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 14CF
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/A83ECFAE791B11F0B7D48969C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:19:58 +0000
ROA not before: Thu 14 Aug 2025 14:33:34 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 35876
IP address blocks: 116.204.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5327 (0x14cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Aug 14 14:33:34 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4753d-8e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:a1:e7:cf:17:ef:63:25:62:7f:51:06:0b:
82:7c:c6:23:62:f7:23:70:f5:cc:6d:85:15:7a:f4:
20:34:45:90:43:00:a0:f2:8e:3c:d4:4f:87:c2:a3:
1d:3a:54:8d:dd:ed:e4:d7:81:58:b8:57:2d:d2:f7:
d8:a8:9c:4a:20:15:75:c9:48:a0:0a:22:c6:90:92:
61:50:0d:a2:c3:a9:2c:5e:c9:b4:0e:49:d6:71:65:
fe:18:e9:a0:89:a6:59:28:23:b7:80:9e:a7:30:e0:
4c:90:dc:49:b9:3c:02:c8:bc:bb:8c:0c:5a:24:27:
99:c8:7e:bf:19:c6:6c:d0:69:fc:30:d9:a6:fe:30:
54:2a:4e:1b:af:24:fa:1e:67:0c:18:37:e9:c0:2c:
bc:d0:4d:dc:40:15:37:b6:d8:d1:11:86:99:8d:48:
f9:ed:63:df:db:b3:c4:35:6e:73:21:52:20:cf:8a:
d6:36:ed:32:eb:a4:27:d6:1c:c3:d8:64:47:02:67:
06:3d:63:1a:59:ca:5b:ac:1c:79:fd:68:b3:c6:e7:
d3:70:71:1b:56:d4:9b:34:2b:ee:51:bc:27:48:2b:
59:7a:12:ea:a1:99:b0:39:3e:01:7d:c1:98:e3:b2:
9c:c5:43:45:e4:ba:79:84:9a:9b:fd:35:c4:ca:01:
15:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:49:D3:65:24:7D:0A:01:C3:85:AF:75:39:F2:D8:F8:EC:26:9A:B2
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/A83ECFAE791B11F0B7D48969C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.204.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:4b:6c:7c:41:bf:a5:10:3c:6b:01:9b:31:89:fd:87:d5:35:
1e:7d:63:b0:47:5f:63:2b:92:6e:9d:20:f6:83:7f:a0:e0:a0:
4b:22:52:ce:04:03:0d:6b:cd:e4:71:1a:e0:a1:6c:40:26:dd:
0a:7c:b0:78:59:44:00:a9:ac:9c:47:1c:d6:c4:0e:e3:4e:a7:
eb:ac:7f:a6:71:66:b8:1f:fe:46:b5:57:1a:b4:2c:59:09:b3:
35:9b:c7:4c:91:50:af:10:de:40:06:b9:ba:4c:c7:a0:da:27:
c9:f7:fb:ab:4c:c9:db:3f:46:85:af:cc:79:ab:78:25:e9:da:
00:7a:c1:62:3e:7b:75:8d:af:df:7f:a8:2a:0b:7f:ee:fa:24:
d3:90:96:dd:11:f6:fb:1b:e4:5c:a9:a4:ff:e4:ac:bf:d2:b6:
7b:97:1d:29:5e:50:26:10:bf:a0:5a:93:26:fa:c2:0b:9e:ea:
a0:82:be:f1:43:59:bc:dd:b9:34:e8:c3:22:dc:20:e4:c8:44:
c2:17:99:ea:25:fe:75:ed:6d:58:27:07:92:23:e9:06:33:94:
f0:7c:da:dd:0e:2f:77:13:c2:22:c4:3d:a5:a9:4f:95:02:91:
a9:c6:9f:44:6d:c6:ce:ee:73:10:c2:f0:02:e0:03:b9:dc:cf:
b9:5f:4e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:16:03 2026 by rpki-client