
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/B9800BF82E9011ED96AE647FC4F9AE02.roa
File: B9800BF82E9011ED96AE647FC4F9AE02.roa (raw, json)
Hash identifier: dHCO1G8lWFfxvpeBqux6copqCjiz6D9jyruxlvZX7Ak=
Subject key identifier: 90:13:7A:58:16:22:3B:5B:8D:D6:DC:C6:C7:59:A8:84:47:EC:51:54
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 0611
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/B9800BF82E9011ED96AE647FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:00:04 +0000
ROA not before: Wed 30 Apr 2025 19:29:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59253
IP address blocks: 164.152.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1553 (0x611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: Apr 30 19:29:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a44664-1b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:1f:1b:b9:13:74:f7:fd:41:a1:bd:b7:04:
85:fa:04:e5:60:aa:94:83:e0:fd:26:99:f9:ce:c0:
6b:59:8b:fe:bf:e8:64:2e:50:a3:66:76:47:7e:62:
5b:00:42:ff:8d:d1:64:0b:c7:b7:27:e9:45:19:26:
56:db:ae:7b:34:98:3e:cb:8a:2c:ae:8c:79:c9:c4:
44:b5:6f:6e:9f:54:db:bd:74:9e:c8:b8:6f:38:c7:
4e:8b:e5:d5:99:53:3a:cf:3d:c4:15:b7:c5:e9:7b:
11:e0:f1:52:fd:13:27:ef:df:a3:e4:2f:13:6b:39:
eb:1e:69:03:20:7b:38:71:ec:e2:86:d3:35:df:df:
be:9a:40:69:33:74:87:e6:c8:78:b8:52:71:ad:e4:
39:f6:8d:e9:1c:61:52:29:4c:15:a7:ca:5d:21:b6:
d6:1b:8f:96:d2:ad:8c:5d:09:41:41:2b:e9:4b:0a:
76:e5:19:fb:b2:18:a1:20:a1:07:59:1d:b9:ba:bc:
25:05:59:a4:4d:70:1c:b0:ec:9a:56:60:a2:d8:54:
a3:70:8b:3f:fd:58:7f:98:b8:9a:9e:ed:2c:0f:9a:
59:14:2c:90:c7:58:5a:83:d1:8d:0d:42:93:c6:ea:
ee:11:76:57:52:fa:01:45:2f:6f:39:cd:0d:76:55:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:13:7A:58:16:22:3B:5B:8D:D6:DC:C6:C7:59:A8:84:47:EC:51:54
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/B9800BF82E9011ED96AE647FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
164.152.166.0/23
Signature Algorithm: sha256WithRSAEncryption
73:a9:43:9b:6b:48:d1:98:44:b9:8b:59:d0:ed:92:84:4d:cc:
11:1f:1f:d8:3d:9a:aa:4f:bf:de:ed:63:2e:b3:66:59:e7:71:
bf:19:9f:1f:2f:63:ba:72:e5:69:6e:82:71:12:2d:ef:40:83:
de:7c:e6:70:11:6e:96:7c:00:00:98:e9:3c:52:34:f5:c7:d2:
f7:0c:db:2f:33:61:68:84:57:43:c6:4b:f5:e1:ce:f7:b2:1f:
4e:8b:73:c0:77:a7:3a:b3:1d:78:31:47:6e:94:24:8e:5b:45:
7d:14:aa:3d:26:4e:48:a6:45:4f:99:3b:f8:c9:56:db:d1:d2:
38:a1:fe:85:ee:a3:54:ad:95:93:9a:c6:f4:66:84:b0:e2:f3:
52:dd:00:fb:be:a9:44:ea:67:19:cc:55:0a:0b:b3:ed:18:f8:
ee:63:76:92:9d:a0:26:4d:b6:5a:31:06:9e:86:79:9e:e9:19:
09:06:d7:68:d4:61:d1:70:c3:78:c5:a1:47:61:12:41:1a:7f:
03:e5:bb:35:9e:e3:14:66:60:b3:1e:2e:35:e6:31:62:67:8a:
e8:4e:31:b1:bd:47:2e:99:d9:df:67:f1:74:ef:15:74:ab:dd:
c0:c4:f7:93:15:1e:04:5a:cf:04:ac:c3:b4:3a:a6:62:ec:f9:
fa:c6:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:25 2026 by rpki-client