
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa
File: AF75682A101911F09363D44DC4F9AE02.roa (raw, json)
Hash identifier: zinCGW8B10ELBoVTK9ivj+xoznmYoRevOOweMKPNJts=
Subject key identifier: CE:B5:C3:F0:C9:8D:C4:9D:74:84:FA:6C:BC:75:95:4C:B8:95:67:50
Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial: AD
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:06:44 +0000
ROA not before: Tue 29 Jul 2025 08:15:16 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139645
IP address blocks: 160.187.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Validity
Not Before: Jul 29 08:15:16 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f394-584f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:d9:5f:6c:2d:3a:4a:b0:17:e7:a9:26:61:
84:4d:e4:02:4b:16:31:0b:0a:a5:2d:a6:94:3b:ea:
ce:5f:be:76:17:10:85:a1:ee:5c:b9:de:72:38:a9:
ca:e6:50:33:bc:89:17:0e:75:79:10:ff:5f:82:7f:
dd:dd:b3:6f:d5:bc:57:68:f3:00:6a:0c:bb:ae:80:
3c:9a:29:57:62:ad:66:ba:b3:df:03:9a:a8:e8:3c:
c5:38:ed:ae:9a:2c:66:95:03:93:6f:02:65:53:48:
c3:17:0e:5e:ed:17:af:3f:29:74:24:fb:46:dd:1f:
73:4d:16:9f:4b:a4:fe:06:57:fe:b1:cd:4d:df:a5:
38:fc:70:60:8c:75:01:8b:b3:2c:b4:2c:02:7a:a5:
b3:0b:2a:73:ed:48:99:8a:5d:fc:43:c5:5f:43:40:
2a:0a:47:74:33:f1:48:7b:94:40:bd:a5:b7:7b:29:
cf:2c:25:5b:17:4d:5b:16:07:91:f1:0a:ea:69:af:
2a:fe:04:db:e9:7c:6b:ac:1d:18:0c:d8:1d:ff:66:
c2:c1:29:6c:17:c6:07:65:ad:4a:36:5e:41:c8:ea:
a4:2d:31:d1:36:f0:fb:cc:39:29:bc:c0:01:73:4b:
b0:7b:81:f0:86:f2:b1:df:3e:d7:45:33:39:8e:23:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B5:C3:F0:C9:8D:C4:9D:74:84:FA:6C:BC:75:95:4C:B8:95:67:50
X509v3 Authority Key Identifier:
keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.132.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:d1:a0:6e:77:80:45:61:82:c3:fc:44:75:83:a1:de:53:04:
b4:52:09:5f:c1:34:65:1e:fa:a2:2a:59:c7:85:c5:87:a4:db:
07:dd:d4:af:7f:f2:54:ee:84:70:6e:e3:61:bd:52:51:71:30:
bb:78:d5:8f:0d:be:5b:5c:91:69:c8:b2:21:77:71:51:d8:04:
ce:65:d0:28:ce:a6:ed:76:5c:d8:ce:ff:fa:32:37:f9:c8:97:
6b:f5:93:20:05:65:57:1f:f2:1b:cb:ba:f8:c4:13:c4:01:eb:
ae:64:2a:2a:4a:df:c2:7d:59:6c:fa:1f:2e:f5:52:8a:3d:2e:
90:b7:e3:b2:fe:28:68:0d:c8:cc:f7:99:10:04:1e:80:43:8e:
7f:73:4b:1c:d9:68:c5:a5:d6:33:60:6d:6d:89:3c:f4:aa:39:
d6:d8:59:03:4e:00:43:bc:e1:5e:bb:e7:4d:ee:5c:e0:05:df:
b7:2a:34:b1:2e:c7:ad:6b:d8:69:b6:63:40:58:c3:bf:1c:69:
4b:86:d3:a0:fc:2a:4f:98:4c:47:3b:e8:27:3c:b6:6d:36:0b:
aa:42:41:02:22:9f:06:a0:84:99:3a:19:7d:46:5b:68:4d:5c:
ff:4c:8c:d1:23:31:57:3f:66:73:19:a5:8b:4d:8d:48:9c:56:
d2:cd:0c:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNGQUMxMTAvBgNVBAUTKDlENDU2N0ZCRTI1MkM2NjE2NDJBQTMzRTc4MDQ4QTg3
MTdGQTdDQjMwHhcNMjUwNzI5MDgxNTE2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZjM5NC01ODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwRrZX2wtOkqwF+epJmGETeQCSxYxCwqlLaaUO+rOX752FxCFoe5cud5yOKnK
5lAzvIkXDnV5EP9fgn/d3bNv1bxXaPMAagy7roA8milXYq1murPfA5qo6DzFOO2u
mixmlQOTbwJlU0jDFw5e7RevPyl0JPtG3R9zTRafS6T+Blf+sc1N36U4/HBgjHUB
i7MstCwCeqWzCypz7UiZil38Q8VfQ0AqCkd0M/FIe5RAvaW3eynPLCVbF01bFgeR
8Qrqaa8q/gTb6XxrrB0YDNgd/2bCwSlsF8YHZa1KNl5ByOqkLTHRNvD7zDkpvMAB
c0uwe4HwhvKx3z7XRTM5jiMrBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM61w/DJ
jcSddIT6bLx1lUy4lWdQMB8GA1UdIwQYMBaAFJ1FZ/viUsZhZCqjPngEiocX+nyz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0ZBQy9BRkY1NjNFNjEw
MTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9uVVZuLS1KU3htRmtLcU0tZUFTS2h4ZjZm
TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25VVm4tLUpTeG1Ga0txTS1lQVNLaHhmNmZMTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzNGQUMvQUZGNTYzRTYxMDE4MTFGMDgwQkNDMzQ4QzRGOUFFMDIvQUY3NTY4MkEx
MDE5MTFGMDkzNjNENDREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoLuEMA0GCSqGSIb3DQEBCwUAA4IBAQDP0aBud4BFYYLD/ER1g6He
UwS0UglfwTRlHvqiKlnHhcWHpNsH3dSvf/JU7oRwbuNhvVJRcTC7eNWPDb5bXJFp
yLIhd3FR2ATOZdAozqbtdlzYzv/6Mjf5yJdr9ZMgBWVXH/Iby7r4xBPEAeuuZCoq
St/CfVls+h8u9VKKPS6Qt+Oy/ihoDcjM95kQBB6AQ45/c0sc2WjFpdYzYG1tiTz0
qjnW2FkDTgBDvOFeu+dN7lzgBd+3KjSxLseta9hptmNAWMO/HGlLhtOg/CpPmExH
O+gnPLZtNguqQkECIp8GoISZOhl9RltoTVz/TIzRIzFXP2ZzGaWLTY1InFbSzQz4
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:29:08 2026 by rpki-client