
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/554EE88487D911F08B837C49C4F9AE02.roa
File: 554EE88487D911F08B837C49C4F9AE02.roa (raw, json)
Hash identifier: KnUN81UlQodoF87eK+aMyyLj9TmAgnUYNMTKbDpsY9w=
Subject key identifier: 40:66:17:B9:CC:8E:20:C1:7E:FE:36:E7:6E:27:DC:DE:F5:13:51:24
Certificate issuer: /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Certificate serial: 85
Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/554EE88487D911F08B837C49C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:10:44 +0000
ROA not before: Tue 02 Sep 2025 08:46:36 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 58768
IP address blocks: 165.101.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Validity
Not Before: Sep 2 08:46:36 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3f484-43b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:77:05:99:02:e6:85:98:1e:44:62:df:de:
d6:cb:25:d1:9e:19:a9:fc:61:fa:a9:64:d1:b5:cf:
00:08:03:80:9e:67:c2:90:74:a6:9a:c9:39:d1:11:
69:43:9e:e7:90:59:e6:04:d9:2b:e8:9f:7f:6c:f8:
d5:1f:26:92:f1:d3:44:d9:26:a1:75:a2:07:45:e3:
6d:0d:b0:52:5d:e5:cd:a2:32:b6:06:b6:2f:f0:4e:
8f:bb:b8:7e:de:9d:0c:08:a4:96:27:1d:6c:cf:f8:
84:23:f1:ed:7e:cf:db:90:1c:c8:59:97:d0:27:b2:
e5:09:50:4a:e0:15:bf:14:43:4d:00:bf:c7:3d:2c:
e0:a8:d0:f6:c4:e3:b5:f6:2b:84:c3:90:1f:f1:2d:
e4:95:08:67:e6:f2:9c:26:e2:8b:16:41:1c:8d:48:
85:ad:96:12:e7:49:73:ab:4e:31:5a:1e:60:50:c2:
4b:52:86:cc:5e:16:ef:71:d4:d6:4a:57:56:93:5d:
ab:81:20:87:7f:8e:61:51:49:b0:0f:0c:ea:33:1e:
a0:98:ec:68:c7:7a:f0:cf:c0:14:d2:72:a1:ac:17:
7e:b0:ff:42:b0:07:26:3d:b8:0a:81:4c:85:eb:5d:
24:19:49:07:b5:5f:71:4d:7e:90:d0:17:bc:f0:a7:
b9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:66:17:B9:CC:8E:20:C1:7E:FE:36:E7:6E:27:DC:DE:F5:13:51:24
X509v3 Authority Key Identifier:
keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/554EE88487D911F08B837C49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.23.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b1:d0:19:22:13:7c:e8:7b:ac:4d:f1:55:72:aa:07:7b:33:
45:a1:2f:11:f6:7e:e9:f6:cb:e0:14:38:28:0d:97:c9:5f:b5:
bb:18:a2:04:c7:d6:31:66:8d:21:6d:7b:18:8e:51:90:bf:b6:
70:54:67:98:f3:5d:18:db:2b:82:ea:30:f2:25:5f:1c:6a:28:
a3:a4:a3:47:90:5f:8d:57:8b:52:80:44:f2:ca:d8:20:8e:07:
2e:73:7f:92:8d:70:cf:e1:c3:e4:66:ab:9f:20:13:91:ae:23:
c4:f8:9b:4a:2c:55:92:71:58:01:7d:9a:54:b0:af:7a:1d:9e:
0a:f8:36:6b:59:fe:32:e7:58:0d:2f:ee:33:5a:62:97:bf:4d:
9b:da:d2:07:62:ec:68:46:c9:3d:63:e5:d6:72:a2:1a:8a:dc:
a8:28:53:45:2b:6c:01:3b:c2:b1:70:c6:d5:bf:d2:e9:1f:29:
07:41:96:df:91:ac:7f:3f:e4:13:44:f3:c2:8a:a9:61:4a:3f:
d8:99:bf:2a:5b:5c:b7:d2:e8:55:5d:d3:6e:0f:3b:ef:31:58:
4d:b7:ef:ed:be:fa:41:44:02:82:4a:7a:73:84:36:cc:e5:6d:
c6:9c:6c:33:ea:4c:87:27:c6:66:6c:a2:d3:c0:20:dd:c4:08:
85:25:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:50 2026 by rpki-client