
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/0B9DC9A2623711F0B8A15A64C4F9AE02.roa
File: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (raw, json)
Hash identifier: 4gDTb37IJyZ+JBazZaPsyxB7SJI6xxcbthYmqr0Dp8I=
Subject key identifier: D0:D3:6F:11:17:CC:5B:F4:B6:81:CE:E1:CF:00:90:D1:F2:5D:FA:9A
Certificate issuer: /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Certificate serial: 78
Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/0B9DC9A2623711F0B8A15A64C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:11:24 +0000
ROA not before: Wed 16 Jul 2025 11:21:40 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153056
IP address blocks: 165.101.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Validity
Not Before: Jul 16 11:21:40 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3e69c-caeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:04:b0:c2:1f:6d:b0:c6:75:ff:23:36:3a:
70:c5:68:86:70:2c:42:02:34:37:9e:1e:bf:10:a1:
47:98:16:0d:77:cd:d8:e5:f1:f3:6b:f1:1e:36:d0:
fe:ad:ac:99:c4:1d:7e:a8:0c:01:00:ab:37:94:2d:
99:9f:d9:df:88:8b:56:45:14:6c:4b:2d:4f:43:a8:
8b:29:2b:da:c2:a6:6a:5a:61:c6:34:8c:6f:a3:8d:
f0:c7:25:2d:69:42:60:29:a4:f8:23:cf:aa:4e:9f:
c4:fd:5c:52:d7:c8:fa:d3:d4:32:a2:2b:40:1d:ac:
1d:6a:ca:61:63:31:fa:7d:e9:ce:8e:cb:7d:d8:ac:
1b:a2:c2:11:3e:df:30:5b:40:0f:ad:a6:ca:66:56:
54:a2:2a:7a:81:8d:c9:e3:61:d8:8d:52:25:29:49:
48:39:2d:0e:81:87:02:e4:3a:44:58:5c:74:18:06:
ac:5a:83:50:d7:32:bc:a3:03:ce:41:7d:60:c3:5f:
af:b0:e4:5d:ec:19:d0:3f:05:55:e1:a6:a2:80:18:
39:ca:e4:bb:85:18:8e:94:5e:fe:0e:fa:33:47:87:
bc:51:e4:ab:83:77:ce:13:f9:13:b2:02:01:07:79:
e8:f4:dd:60:a8:cb:30:f0:3b:f0:e0:73:a3:34:86:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:6F:11:17:CC:5B:F4:B6:81:CE:E1:CF:00:90:D1:F2:5D:FA:9A
X509v3 Authority Key Identifier:
keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/0B9DC9A2623711F0B8A15A64C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.187.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3f:8d:be:46:4e:69:f3:c3:18:0b:37:74:93:d2:a6:4d:3c:
76:ae:dc:c5:f1:e0:53:21:71:94:7b:3d:7f:a4:ea:3d:61:7c:
fc:9c:ff:c8:83:9a:5f:e2:a1:f5:6d:ef:f6:9a:c9:a5:7a:70:
db:56:df:34:53:b8:06:6b:ad:a2:a1:37:bc:a2:6a:70:7f:d7:
f9:e7:61:77:d1:a4:1a:d8:26:c7:51:64:6e:26:e6:72:c9:f7:
37:7a:99:66:c1:10:2f:1a:ba:32:c5:e3:5f:c6:3a:63:c2:21:
42:94:f9:12:49:ed:b9:c4:a6:a5:9c:89:7f:49:24:e5:46:0b:
22:25:c8:3e:49:40:af:9d:c2:d5:b4:da:c1:3f:09:ea:d6:ee:
ee:3d:35:56:fd:24:f6:64:69:0a:df:08:98:ad:c2:c9:16:44:
ec:26:7d:6d:43:97:f5:6f:db:07:6a:95:43:54:bc:39:09:fe:
a2:e0:db:ac:51:de:49:a3:50:df:a1:0a:80:f0:c3:90:79:32:
cf:d0:00:25:77:e2:9a:bd:7c:8b:67:08:04:a8:56:16:8a:ba:
a3:68:f5:21:b7:5c:28:9f:92:25:ea:7e:16:84:6c:d1:67:25:
b4:6c:ad:9f:aa:bf:52:94:ac:79:ec:67:95:b5:1d:3b:43:9a:
7f:a5:0b:ed
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MDU4NzExMC8GA1UEBRMoQTlCNTNGN0I2MTk2MzE4NzA5Mjg5MDJGRjQ4NDc2NTc0
MUJEQTJFOTAeFw0yNTA3MTYxMTIxNDBaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNlNjljLWNhZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmKwSwwh9tsMZ1/yM2OnDFaIZwLEICNDeeHr8QoUeYFg13zdjl8fNr8R420P6t
rJnEHX6oDAEAqzeULZmf2d+Ii1ZFFGxLLU9DqIspK9rCpmpaYcY0jG+jjfDHJS1p
QmAppPgjz6pOn8T9XFLXyPrT1DKiK0AdrB1qymFjMfp96c6Oy33YrBuiwhE+3zBb
QA+tpspmVlSiKnqBjcnjYdiNUiUpSUg5LQ6BhwLkOkRYXHQYBqxag1DXMryjA85B
fWDDX6+w5F3sGdA/BVXhpqKAGDnK5LuFGI6UXv4O+jNHh7xR5KuDd84T+ROyAgEH
eej03WCoyzDwO/Dgc6M0hkFXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU0NNvERfM
W/S2gc7hzwCQ0fJd+powHwYDVR0jBBgwFoAUqbU/e2GWMYcJKJAv9IR2V0G9oukw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwNTg3LzkwRjE0MzVBNjIx
ODExRjBBQTIyQTAyNkM0RjlBRTAyL3FiVV9lMkdXTVljSktKQXY5SVIyVjBHOW91
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcWJVX2UyR1dNWWNKS0pBdjlJUjJWMEc5b3VrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDU4Ny85MEYxNDM1QTYyMTgxMUYwQUEyMkEwMjZDNEY5QUUwMi8wQjlEQzlBMjYy
MzcxMUYwQjhBMTVBNjRDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAClZbswDQYJKoZIhvcNAQELBQADggEBABs/jb5GTmnzwxgLN3ST0qZN
PHau3MXx4FMhcZR7PX+k6j1hfPyc/8iDml/iofVt7/aayaV6cNtW3zRTuAZrraKh
N7yianB/1/nnYXfRpBrYJsdRZG4m5nLJ9zd6mWbBEC8aujLF41/GOmPCIUKU+RJJ
7bnEpqWciX9JJOVGCyIlyD5JQK+dwtW02sE/CerW7u49NVb9JPZkaQrfCJitwskW
ROwmfW1Dl/Vv2wdqlUNUvDkJ/qLg26xR3kmjUN+hCoDww5B5Ms/QACV34pq9fItn
CASoVhaKuqNo9SG3XCifkiXqfhaEbNFnJbRsrZ+qv1KUrHnsZ5W1HTtDmn+lC+0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:35 2026 by rpki-client