
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/A54CA35E853B11EFB513D149C4F9AE02.roa
File: A54CA35E853B11EFB513D149C4F9AE02.roa (raw, json)
Hash identifier: /vNUIQMQmo/+bpr7T8qr5NTsbD+Gg65QmwR+l9u79do=
Subject key identifier: 06:84:F5:B1:C9:FD:67:4C:69:9C:58:26:93:D6:B5:03:6E:85:9F:0E
Certificate issuer: /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Certificate serial: 011C
Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/A54CA35E853B11EFB513D149C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:18:19 +0000
ROA not before: Fri 05 Dec 2025 03:44:06 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 150154
IP address blocks: 160.187.184.0/23 maxlen: 23
160.187.184.0/24 maxlen: 24
160.187.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170EED, serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Validity
Not Before: Dec 5 03:44:06 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a59c2b-d546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:0c:26:80:d3:f9:0e:ae:bb:27:5a:31:a0:
eb:26:b3:bb:fc:a8:77:5f:b9:c6:e6:65:84:84:a6:
ef:04:c1:fa:73:ba:23:b2:6f:33:88:da:c8:16:de:
94:84:c8:11:2e:30:7a:79:6b:db:70:fd:4d:7b:cb:
3c:15:98:d4:6d:aa:76:04:0c:eb:79:aa:30:02:74:
f1:d1:3e:31:46:ff:a9:8d:b3:8d:f2:86:4e:15:ad:
f8:da:f7:18:d9:f1:28:14:2b:db:c1:a0:23:eb:27:
15:3a:af:6a:86:63:15:76:43:9c:91:60:d4:88:8f:
03:4b:79:b2:db:b1:e9:ca:cf:a0:12:90:ff:9c:30:
a3:a8:22:d4:c1:19:0a:cc:20:d3:4c:0f:df:2b:da:
51:ab:27:8c:3e:76:b2:20:59:a7:0f:66:91:00:28:
39:91:b4:3c:f4:23:a9:50:fb:25:ff:f2:a5:80:6d:
1a:c9:6f:ad:3b:56:55:69:01:3a:2f:fc:f2:50:c5:
51:46:e6:54:5b:ab:de:cd:6b:63:1c:13:a4:7e:54:
72:48:5f:5c:76:cc:b7:f0:56:5e:8f:3b:b4:73:5d:
60:3a:16:35:3e:e6:9b:5b:f4:6a:ed:b7:d5:5e:3b:
52:16:58:af:cf:e2:d4:cc:4f:10:75:ca:49:ab:4e:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:84:F5:B1:C9:FD:67:4C:69:9C:58:26:93:D6:B5:03:6E:85:9F:0E
X509v3 Authority Key Identifier:
keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/A54CA35E853B11EFB513D149C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.184.0/23
Signature Algorithm: sha256WithRSAEncryption
97:3a:63:c8:ce:dd:d4:64:3b:cf:c7:f4:a6:b8:33:b1:d8:6a:
c1:45:25:a8:4e:3c:0e:26:a2:a5:ad:3a:8e:66:49:52:a3:07:
3d:97:a6:e1:15:53:cb:94:3e:94:57:3a:08:1c:ec:ec:38:cf:
2d:51:db:ab:bd:e1:87:f4:f2:4e:e1:80:17:d3:01:e9:3f:e2:
91:72:00:7f:0f:ca:3e:7b:fd:c1:32:d5:7b:60:03:d0:f3:ae:
1e:f4:ea:ce:cb:6b:b7:66:30:0c:5c:3d:3f:02:05:66:24:64:
fb:b0:a5:b3:ed:66:4d:21:38:31:5b:6e:02:28:42:87:24:6d:
76:7d:c7:ca:a6:22:60:91:d5:f5:9a:91:03:47:af:2c:bd:df:
2b:9f:a7:0c:d0:9c:cb:1b:ed:4a:69:77:4c:5c:a4:52:b2:bb:
e3:37:cc:ac:85:c1:d7:bc:06:ff:ef:4b:f5:69:78:d5:3d:32:
51:8c:ce:56:e7:ff:93:6b:8b:2d:7b:6e:35:43:d8:86:1d:6f:
f0:a9:ad:03:61:1e:54:db:0a:a2:4d:ef:a9:05:a7:44:4e:d7:
ba:43:b4:fe:52:81:68:30:e3:2e:d3:51:69:a1:d0:00:7b:67:
f0:62:f8:78:4d:01:dc:b4:2c:f7:d5:5d:2f:64:26:16:ce:48:
dc:9c:ea:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:49:58 2026 by rpki-client