
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa
File: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (raw, json)
Hash identifier: Mu781u2UOCsoMogGCO1asa+hOVZHkRFUxZxq0Tk4hzk=
Subject key identifier: 15:66:70:74:C9:48:8D:5A:83:EF:B8:1B:CE:E8:5E:F1:11:DC:43:5E
Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial: 01A1
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:42:23 +0000
ROA not before: Sat 31 May 2025 05:15:50 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 164.75.128.0/24 maxlen: 24
164.75.129.0/24 maxlen: 24
164.75.130.0/24 maxlen: 24
164.75.131.0/24 maxlen: 24
164.75.132.0/24 maxlen: 24
164.75.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Validity
Not Before: May 31 05:15:50 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3eddf-4bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:2a:88:8f:64:21:7d:c2:a1:d1:31:67:6d:
16:a1:13:f9:81:79:d2:74:bf:b9:2d:c4:30:16:20:
0b:20:f2:61:1a:30:3b:30:16:10:b4:3c:47:0f:40:
24:9f:c5:3d:34:92:03:46:79:f3:d4:b2:38:ac:07:
3c:49:c0:67:ba:9a:dd:b1:39:eb:26:86:eb:e3:6c:
42:7b:b9:96:11:f5:c5:e1:f8:bf:fc:41:7f:48:4d:
0f:2a:de:c7:e7:4d:d7:5c:33:0f:86:52:cd:44:be:
b5:09:0c:5d:89:68:12:b5:bd:24:af:9c:01:9e:c1:
71:8a:7d:cc:fd:64:5d:45:28:a4:eb:0d:82:0f:95:
6f:1b:1c:32:32:bc:15:9d:8f:d9:83:32:89:a9:13:
55:86:2a:22:7b:ca:23:cb:48:20:ff:6c:68:fd:57:
8b:5f:70:93:e7:e9:c2:bb:15:7c:13:0b:46:22:d2:
4d:7f:49:16:20:ff:94:e3:86:88:14:ae:09:c4:da:
73:48:ff:e7:e1:86:02:3f:e2:62:25:6a:06:f5:af:
8b:f1:e1:c6:3b:a6:0b:86:57:27:77:53:ac:9a:54:
9f:b9:1b:48:a8:ce:e6:ae:13:4a:2a:00:3b:f4:2e:
e2:53:65:11:77:f6:46:66:ec:86:2d:bd:d4:5d:25:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:66:70:74:C9:48:8D:5A:83:EF:B8:1B:CE:E8:5E:F1:11:DC:43:5E
X509v3 Authority Key Identifier:
keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
164.75.128.0-164.75.133.255
Signature Algorithm: sha256WithRSAEncryption
54:5e:bb:b2:f0:ae:ad:ce:97:83:94:8a:de:3a:76:7b:e4:49:
dd:90:40:94:c2:53:8b:87:7a:02:26:b2:2e:5b:a8:63:1d:4d:
dd:73:49:d6:59:59:f2:16:71:4c:e5:c6:be:f1:b7:36:c5:04:
35:1c:6a:00:ac:bd:d0:a6:30:14:50:ce:85:86:52:f7:2e:bb:
2a:25:93:1b:1f:ad:6e:a0:59:ed:37:c5:74:79:6d:5b:5d:bf:
8f:86:93:8b:8d:2d:24:9b:c0:dc:a4:e3:d2:57:be:6c:43:31:
87:22:c2:63:f2:36:d5:61:7d:cf:84:f3:4f:d1:11:aa:a5:29:
6d:9e:70:e2:ce:71:b2:d2:09:1e:08:fc:48:37:52:0f:4d:36:
e8:e0:4c:48:99:76:2d:d1:54:84:2c:da:27:10:bb:7e:13:f8:
33:ef:f3:74:60:f3:a0:5f:30:7f:b9:48:53:b2:6e:b9:11:7f:
55:3e:22:21:aa:67:d9:94:21:d8:85:a8:2e:60:63:2b:85:a3:
eb:07:59:8f:3b:91:71:9a:0f:d0:9b:10:16:44:9c:c2:82:0a:
5a:80:53:f2:a2:41:25:e0:e2:82:6d:29:d6:c3:23:89:08:13:
86:3f:fc:25:2b:38:74:27:57:5e:83:c2:1f:99:ff:33:f7:90:
4a:9b:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:36 2026 by rpki-client