
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/0A94FC36198711EB80EAEF4CC4F9AE02.roa
File: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (raw, json)
Hash identifier: 6fP6rDBHclh/0NOHkluOXt1a6fQZ2ulzPfQPIbkh2Ik=
Subject key identifier: B9:99:78:77:54:87:D4:55:96:77:E0:AD:BF:F3:4B:C4:83:AE:9C:66
Certificate issuer: /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Certificate serial: 0810
Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/0A94FC36198711EB80EAEF4CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:52:46 +0000
ROA not before: Thu 18 Dec 2025 21:18:00 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 7486
IP address blocks: 165.69.0.0/17 maxlen: 18
165.69.32.0/24 maxlen: 24
165.69.36.0/24 maxlen: 24
165.69.40.0/24 maxlen: 24
165.69.128.0/17 maxlen: 18
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Validity
Not Before: Dec 18 21:18:00 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a452be-a4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:69:be:fc:e6:c3:60:52:e1:71:cb:42:cd:
60:65:ed:2b:d2:e4:b2:2e:a2:f9:4e:59:82:40:76:
cc:be:67:15:1a:a7:7b:40:b4:cf:fb:dc:62:9c:3d:
af:19:3c:10:e1:42:23:8a:cc:97:9b:35:02:06:11:
f8:9a:d7:3a:34:35:55:8f:a7:8c:0e:b7:26:a4:66:
90:31:66:84:4c:eb:83:e4:d1:24:6e:53:8f:83:00:
16:b9:d3:d5:ea:6e:2e:00:d5:e5:0c:d4:2e:ba:7f:
bb:62:52:c9:65:19:93:1d:e8:31:a4:7e:f9:6c:dd:
57:72:3a:af:b4:be:77:62:49:f2:95:15:05:e2:bb:
01:d5:f4:6a:1c:f5:ed:07:88:95:4f:29:8f:71:58:
88:4d:90:dc:cb:89:07:9d:c5:f1:ac:e5:9b:e9:d7:
6a:29:20:02:39:c6:19:db:c4:24:03:23:7c:da:ba:
77:77:8f:4e:41:62:a7:ce:97:20:a6:ba:07:6a:20:
1a:f4:62:0c:5d:86:40:e4:cc:3c:87:06:cd:61:7e:
2e:96:9d:fe:db:8d:87:cf:a8:b9:de:6a:cb:eb:a9:
79:d6:cb:0d:6a:b4:ea:81:f6:78:3f:49:a1:c5:81:
f4:4b:6d:53:ca:13:3b:f1:ea:99:5e:eb:1a:e0:47:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:99:78:77:54:87:D4:55:96:77:E0:AD:BF:F3:4B:C4:83:AE:9C:66
X509v3 Authority Key Identifier:
keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/0A94FC36198711EB80EAEF4CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:52:73:80:44:e5:16:56:b1:cd:3d:9e:b9:06:8e:43:b4:f8:
dc:9a:f9:36:6a:30:5a:e6:01:ec:6e:cf:c8:fc:23:9f:48:07:
ae:6b:e7:51:bb:7d:f0:e0:57:d2:f5:b0:d7:d7:40:1a:d6:a6:
ae:51:0a:ba:7c:ef:76:75:a6:1f:00:66:80:b9:fa:b0:d8:19:
f1:1d:a0:66:57:cb:de:e1:3b:88:b0:46:8a:c6:01:f3:6c:81:
b4:f0:74:bc:36:c9:92:19:36:3e:ea:b1:35:3d:c5:8d:4f:18:
0e:a8:68:33:1d:fe:36:0c:bf:b0:9d:ac:d5:da:47:90:b5:67:
97:06:9a:55:21:93:43:f2:72:68:dc:f7:71:15:74:36:be:28:
d7:fd:fd:14:2f:06:4f:50:74:4a:41:d1:3c:5b:42:06:20:a4:
24:1f:6e:06:32:3b:67:9b:41:c2:19:9f:03:f0:70:07:8d:f6:
94:42:7e:4b:95:bc:0f:6d:f5:43:fb:1f:eb:b1:9a:f3:2d:e6:
56:d7:60:f7:df:02:4e:bc:00:af:ae:9c:b3:53:ac:07:20:57:
4d:cd:6c:90:30:46:fb:7e:d8:83:4f:70:da:66:a7:0e:73:7f:
fe:8d:d1:d8:0c:6b:1c:40:36:9f:b3:f3:6e:64:37:40:78:af:
31:ee:84:cd
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzExNzIxMTAvBgNVBAUTKDc2REVBQzA2MDQ2MEY2RjhBNUJENTgyOTlDNTNBQkNB
RjlCMUQzNTgwHhcNMjUxMjE4MjExODAwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTJiZS1hNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1mNpvvzmw2BS4XHLQs1gZe0r0uSyLqL5TlmCQHbMvmcVGqd7QLTP+9xinD2v
GTwQ4UIjisyXmzUCBhH4mtc6NDVVj6eMDrcmpGaQMWaETOuD5NEkblOPgwAWudPV
6m4uANXlDNQuun+7YlLJZRmTHegxpH75bN1XcjqvtL53YknylRUF4rsB1fRqHPXt
B4iVTymPcViITZDcy4kHncXxrOWb6ddqKSACOcYZ28QkAyN82rp3d49OQWKnzpcg
proHaiAa9GIMXYZA5Mw8hwbNYX4ulp3+242Hz6i53mrL66l51ssNarTqgfZ4P0mh
xYH0S21TyhM78eqZXusa4EdcaQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFLmZeHdU
h9RVlnfgrb/zS8SDrpxmMB8GA1UdIwQYMBaAFHberAYEYPb4pb1YKZxTq8r5sdNY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTE3Mi84MTU4M0FCRTE4
QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2aWx2VmdwbkZPcnl2bXgw
MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2R0NnNCZ1JnOXZpbHZWZ3BuRk9yeXZteDAxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzExNzIvODE1ODNBQkUxOEJFMTFFQkFDMTBERTQ2QzRGOUFFMDIvMEE5NEZDMzYx
OTg3MTFFQjgwRUFFRjRDQzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMApUUwDQYJKoZIhvcNAQELBQADggEBAHVSc4BE5RZWsc09nrkGjkO0
+Nya+TZqMFrmAexuz8j8I59IB65r51G7ffDgV9L1sNfXQBrWpq5RCrp873Z1ph8A
ZoC5+rDYGfEdoGZXy97hO4iwRorGAfNsgbTwdLw2yZIZNj7qsTU9xY1PGA6oaDMd
/jYMv7CdrNXaR5C1Z5cGmlUhk0Pycmjc93EVdDa+KNf9/RQvBk9QdEpB0TxbQgYg
pCQfbgYyO2ebQcIZnwPwcAeN9pRCfkuVvA9t9UP7H+uxmvMt5lbXYPffAk68AK+u
nLNTrAcgV03NbJAwRvt+2INPcNpmpw5zf/6N0dgMaxxANp+z825kN0B4rzHuhM0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:55 2026 by rpki-client