
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/9DB90EE05E0F11F09722E15EC4F9AE02.roa
File: 9DB90EE05E0F11F09722E15EC4F9AE02.roa (raw, json)
Hash identifier: YgUFuSigzbesjAaXAB7QXjCPj2vjaQ0V6QVQsQKeXvQ=
Subject key identifier: 2F:F5:7E:AD:F5:30:E2:87:73:2B:56:5F:E3:08:CA:EE:49:74:CD:AC
Certificate issuer: /CN=A9176632/serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Certificate serial: 02
Authority key identifier: 83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/9DB90EE05E0F11F09722E15EC4F9AE02.roa
Signing time: Fri 11 Jul 2025 04:29:22 +0000
ROA not before: Fri 11 Jul 2025 04:29:22 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154040
IP address blocks: 165.101.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176632, serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Validity
Not Before: Jul 11 04:29:22 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68709321-aa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:a7:1c:8e:0d:dd:85:8a:fd:f3:1d:21:b7:
ca:d5:91:35:6e:e7:6b:5e:e8:09:7b:08:e0:de:bd:
68:05:1b:87:bb:cc:b2:0f:c2:ef:fd:80:1b:66:6f:
89:d5:4a:ef:b2:4d:3e:5d:52:05:99:4b:d0:70:5c:
cc:4c:a4:96:7e:b4:2b:9e:08:1a:f4:93:fc:8c:9a:
00:d5:a5:f4:a3:c9:b5:8d:00:c6:cd:db:bf:86:9a:
8c:ae:72:88:d8:f1:f3:35:ac:43:bf:6e:6d:9b:9d:
65:bc:44:f9:1b:59:94:f3:85:26:95:83:97:a9:b1:
c3:ee:77:e6:7a:a8:ed:35:50:98:13:aa:99:68:f3:
1b:a7:f5:41:f4:52:76:34:07:14:91:4d:82:e8:a2:
e9:82:ec:79:7e:78:0c:41:a3:c8:dc:a5:20:a5:bc:
56:50:16:12:53:98:dc:d7:00:82:5f:f1:a3:71:37:
fe:eb:39:25:46:38:4a:54:c2:76:c6:4c:a4:35:3b:
7f:63:22:8f:1c:e9:6c:bd:d2:59:20:77:61:a7:d1:
be:49:b5:60:b1:7a:0a:49:45:fc:d5:0e:eb:1c:c1:
57:5e:03:36:9c:24:5b:f0:e7:61:ad:0e:fa:da:5c:
38:c9:ce:09:98:fc:89:8c:74:83:7e:38:f2:d4:e9:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F5:7E:AD:F5:30:E2:87:73:2B:56:5F:E3:08:CA:EE:49:74:CD:AC
X509v3 Authority Key Identifier:
keyid:83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/9DB90EE05E0F11F09722E15EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.166.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:2c:cf:f5:dd:2b:ae:cb:66:8f:a6:81:77:c1:78:f6:d5:ff:
3a:8b:28:90:ff:98:a6:78:70:2f:e3:84:41:2a:2f:97:51:e5:
9c:ed:5e:d9:f2:c3:dd:58:b9:d0:77:06:a2:6b:fe:13:1f:e8:
c3:bd:79:eb:a2:e3:31:5e:31:e2:f2:36:29:3c:76:be:c1:63:
f4:aa:b3:d8:29:bb:b9:d1:d9:fd:de:bf:50:7f:e8:e7:8f:37:
02:2b:9a:ed:7b:e6:b5:0b:4e:6a:bf:74:5c:4f:0e:46:ae:09:
5e:69:c2:e2:69:40:e7:fa:7c:c7:10:ca:9d:35:81:11:03:0b:
fe:d1:c1:53:ad:79:38:66:fd:83:cd:c2:e4:0c:7f:b8:a4:47:
78:aa:67:e0:63:b7:19:5f:6e:69:83:7d:73:8a:74:a5:e3:26:
6c:e0:ea:9a:98:7d:ba:9e:ef:34:bb:0f:b8:66:01:8b:ff:e0:
dc:4a:5f:7c:ad:b1:d4:77:4e:78:97:72:b2:b6:7a:86:d3:b1:
d1:9c:4a:cf:72:cb:dd:e2:68:4e:cb:e7:b2:82:06:6c:d5:e0:
08:7e:d9:3a:41:bd:11:6a:cb:95:15:a5:b9:93:ad:0b:4c:80:
c0:f8:56:55:91:2f:9f:16:4b:eb:6c:9c:65:c0:f1:a8:c4:08:
dc:1c:ae:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:49:08 2025 by rpki-client