
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa
File: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (raw, json)
Hash identifier: sQk+yM3Gx/YbHKT6r1DBnCC//TTxz60uDzdDsP9GUkw=
Subject key identifier: 08:74:FF:87:8B:72:2C:9B:FD:08:7A:83:C7:9D:2C:40:63:F1:C6:EF
Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Certificate serial: E2
Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa
Signing time: Tue 03 Feb 2026 06:28:25 +0000
ROA not before: Tue 03 Feb 2026 06:28:25 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 4764
IP address blocks: 160.250.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Validity
Not Before: Feb 3 06:28:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69819589-0941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:f5:06:b1:bc:e9:0a:aa:70:11:61:77:17:
57:20:26:84:39:99:5a:25:a4:cb:cb:6d:f7:9b:68:
ef:71:a7:46:32:0f:3d:1e:3a:44:2b:05:11:1d:90:
d2:fe:45:d0:fb:64:e9:f9:32:88:bf:d3:16:a0:8e:
b0:80:88:1c:4c:8b:9b:59:a0:88:4e:5d:57:a8:31:
1e:75:78:a0:9e:aa:a5:1c:0b:10:a1:1f:67:36:ea:
51:4f:8c:d4:29:64:64:09:e2:a6:02:89:83:31:d0:
85:24:91:21:ab:ab:38:99:8f:ac:af:57:74:cd:1c:
d5:76:48:be:e4:64:a0:57:1f:17:90:7e:22:bc:fd:
38:e9:8d:de:f1:41:97:6a:93:dc:c1:9d:7d:6b:9c:
b1:3b:5d:4f:4b:2f:84:92:e5:c5:0d:54:de:05:ee:
48:30:1c:fe:3a:1d:de:33:ea:68:eb:20:b3:96:cf:
7c:17:3e:0f:b8:81:5d:fb:f8:92:f4:d9:2b:f4:27:
57:d0:26:d4:b6:16:19:da:78:08:73:d7:bd:d9:9c:
ba:f6:2f:ca:ff:04:11:76:f0:f5:34:38:1a:8f:ba:
99:5d:f5:4f:0b:cc:72:ae:b6:1b:75:66:ec:44:2f:
07:33:c2:8f:4a:3d:21:93:f4:f2:10:75:dc:7e:67:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:74:FF:87:8B:72:2C:9B:FD:08:7A:83:C7:9D:2C:40:63:F1:C6:EF
X509v3 Authority Key Identifier:
keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.176.0/24
Signature Algorithm: sha256WithRSAEncryption
28:dd:da:63:8b:2a:7b:fa:df:89:84:0b:88:ca:0a:8e:c7:0d:
78:2b:9b:3e:d6:5e:bc:28:9f:29:ba:f1:47:77:51:c8:fd:df:
29:f6:de:d8:e8:86:b6:ab:e5:79:58:e1:9a:ca:40:33:9b:62:
2a:a4:4c:94:25:b0:ec:16:29:29:90:33:4d:ea:a6:72:1c:4b:
74:29:b6:1b:f6:ce:94:10:0c:94:d2:88:59:b2:8a:3f:57:a6:
96:d0:73:02:38:16:e3:90:74:6e:11:d1:fb:b5:d6:37:92:a3:
3d:ab:09:0f:03:33:35:8f:eb:10:7e:ba:d2:b9:6c:0c:64:85:
f6:85:98:48:12:49:dc:c9:66:b6:1e:9c:53:b5:ab:ab:2c:4e:
84:20:17:8f:0f:10:62:16:24:c1:ff:ad:3d:e4:30:12:f3:39:
21:90:2f:e2:be:d7:8a:cc:ff:00:13:e4:26:9e:bc:7f:d3:7a:
06:d3:5e:a3:f3:c2:44:4d:d0:3e:c1:2e:e0:96:a3:64:fa:de:
63:49:7b:37:cb:3b:4b:06:86:29:43:8c:78:9b:8d:b8:5c:94:
6b:48:c2:77:e4:d0:95:d9:68:b6:84:4f:cc:e7:ea:0a:9d:5c:
cb:c0:a7:29:29:73:57:df:3a:68:93:49:76:a1:31:2d:81:8e:
39:c2:88:89
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
N0Q5NTgxMTAvBgNVBAUTKDlGNDkwNkMwRDRDQzk2NDVEOUJGRDkzMzY0QTIzQTVB
MzNFRjU4REIwHhcNMjYwMjAzMDYyODI1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgxOTU4OS0wOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA45L1BrG86QqqcBFhdxdXICaEOZlaJaTLy233m2jvcadGMg89HjpEKwURHZDS
/kXQ+2Tp+TKIv9MWoI6wgIgcTIubWaCITl1XqDEedXignqqlHAsQoR9nNupRT4zU
KWRkCeKmAomDMdCFJJEhq6s4mY+sr1d0zRzVdki+5GSgVx8XkH4ivP046Y3e8UGX
apPcwZ19a5yxO11PSy+EkuXFDVTeBe5IMBz+Oh3eM+po6yCzls98Fz4PuIFd+/iS
9Nkr9CdX0CbUthYZ2ngIc9e92Zy69i/K/wQRdvD1NDgaj7qZXfVPC8xyrrYbdWbs
RC8HM8KPSj0hk/TyEHXcfmdj3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAh0/4eL
ciyb/Qh6g8edLEBj8cbvMB8GA1UdIwQYMBaAFJ9JBsDUzJZF2b/ZM2SiOloz71jb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82NzJEQjA0OEIz
OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxrWFp2OWt6WktJNldqUHZX
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0Q5NTgvNjcyREIwNDhCMzlCMTFFRjgwRjY0MzVFQzRGOUFFMDIvMEFDOEJCNzRC
NUUyMTFFRkJFRjRCQzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACg+rAwDQYJKoZIhvcNAQELBQADggEBACjd2mOLKnv634mE
C4jKCo7HDXgrmz7WXrwonym68Ud3Ucj93yn23tjohrar5XlY4ZrKQDObYiqkTJQl
sOwWKSmQM03qpnIcS3Qpthv2zpQQDJTSiFmyij9XppbQcwI4FuOQdG4R0fu11jeS
oz2rCQ8DMzWP6xB+utK5bAxkhfaFmEgSSdzJZrYenFO1q6ssToQgF48PEGIWJMH/
rT3kMBLzOSGQL+K+14rM/wAT5CaevH/TegbTXqPzwkRN0D7BLuCWo2T63mNJezfL
O0sGhilDjHibjbhclGtIwnfk0JXZaLaET8zn6gqdXMvApykpc1ffOmiTSXahMS2B
jjnCiIk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:47 2026 by rpki-client