
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/2B17862A82EE11EAB170FD4BC4F9AE02.roa
File: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (raw, json)
Hash identifier: z7n2Ro4Gkp0kvswymZ3NmSJNOHu0kHCX/BYv3spailI=
Subject key identifier: 3B:B2:C4:72:48:7C:80:5D:B5:2D:57:B7:87:35:06:62:5C:67:B4:DB
Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Certificate serial: 0DFE
Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/2B17862A82EE11EAB170FD4BC4F9AE02.roa
Signing time: Wed 10 Jun 2026 18:21:09 +0000
ROA not before: Wed 10 Jun 2026 18:21:09 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 18197
IP address blocks: 116.68.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3582 (0xdfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Validity
Not Before: Jun 10 18:21:09 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a29ab15-6444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:2a:5d:1b:fc:ac:79:00:59:96:ea:0c:03:
37:38:9c:e0:aa:72:1b:61:1d:b8:dd:7a:56:cb:35:
d2:7a:de:bf:8e:3d:f5:83:c5:83:54:37:c1:78:e6:
b8:9b:1e:53:6a:1b:09:3d:48:0b:d6:3d:31:78:c5:
b9:c7:cf:91:58:a4:47:a1:93:44:e7:1a:76:66:88:
d0:16:8e:9e:39:3d:e2:45:6d:5c:31:ce:eb:7b:2f:
b2:8d:89:9c:70:6e:cd:9e:8c:5f:46:75:f1:2c:28:
22:68:68:11:90:a8:04:af:01:dc:9b:ce:4b:bd:92:
90:e5:53:06:a8:a7:b8:3e:1e:f9:fb:a4:c1:f1:be:
b4:b9:8d:4f:a5:df:86:f9:a1:ba:95:72:9a:e6:db:
b9:88:52:e1:35:28:92:e0:ec:3b:a1:0a:4c:d0:45:
75:cf:54:8c:b5:f3:22:df:6f:37:4f:00:3e:c1:25:
1f:ca:e0:2a:e4:37:f2:12:eb:da:05:ed:25:35:b7:
f0:e4:37:16:f4:37:b6:e6:fa:da:9d:1f:cb:b3:6d:
e8:0e:15:31:27:9c:e3:20:40:d1:8b:9d:b5:79:12:
ce:12:48:b3:15:23:12:18:94:df:5a:fd:37:c7:f9:
66:97:a8:79:b4:e6:1b:29:a3:d1:23:5d:ee:09:2e:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B2:C4:72:48:7C:80:5D:B5:2D:57:B7:87:35:06:62:5C:67:B4:DB
X509v3 Authority Key Identifier:
keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/2B17862A82EE11EAB170FD4BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.68.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:42:e8:6d:e2:58:25:1d:86:d8:19:73:a1:10:9e:64:a2:b7:
6d:7e:94:0d:b4:ae:b2:39:44:83:0e:bd:16:3f:68:c3:a4:4e:
90:08:46:ba:7a:70:f7:ac:e2:f2:6a:6e:b6:75:2e:52:76:e3:
3d:59:c4:e4:13:ad:b7:b7:80:02:2c:b6:69:bb:c7:a4:51:3b:
01:75:fc:3f:0f:a9:e5:f6:68:89:3d:2b:f5:59:56:dd:70:4d:
68:e0:5f:a5:78:53:a6:50:f3:a9:dd:78:ed:0f:cc:58:ea:c5:
e1:d4:ff:c2:c7:f4:71:48:58:ca:c5:e6:94:af:08:5d:cc:cf:
bd:21:f5:1b:dc:a5:fc:cb:0e:16:e1:47:0a:d0:aa:6d:c5:91:
45:25:31:b3:f6:57:b6:f7:41:61:14:19:e9:da:f6:89:22:ae:
b0:ae:91:25:ac:08:56:88:89:1f:81:a3:d8:eb:69:27:57:55:
a5:c1:30:7a:ec:6e:21:39:71:9f:d1:17:86:b2:15:7b:4d:b3:
dc:7e:d3:25:47:c1:71:e4:23:1d:52:ed:b3:06:15:85:04:7b:
11:f1:18:75:a8:fd:8e:fe:9d:1f:5b:0b:8c:d0:ad:c6:b3:66:
db:a7:c2:ee:bb:02:41:53:05:57:21:be:26:4b:34:69:4f:66:
c8:5c:b4:43
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx
QkQzM0JFOTkwHhcNMjYwNjEwMTgyMTA5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI5YWIxNS02NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjUkqXRv8rHkAWZbqDAM3OJzgqnIbYR243XpWyzXSet6/jj31g8WDVDfBeOa4
mx5TahsJPUgL1j0xeMW5x8+RWKRHoZNE5xp2ZojQFo6eOT3iRW1cMc7rey+yjYmc
cG7NnoxfRnXxLCgiaGgRkKgErwHcm85LvZKQ5VMGqKe4Ph75+6TB8b60uY1Ppd+G
+aG6lXKa5tu5iFLhNSiS4Ow7oQpM0EV1z1SMtfMi3283TwA+wSUfyuAq5DfyEuva
Be0lNbfw5DcW9De25vranR/Ls23oDhUxJ5zjIEDRi521eRLOEkizFSMSGJTfWv03
x/lml6h5tOYbKaPRI13uCS7D4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDuyxHJI
fIBdtS1Xt4c1BmJcZ7TbMB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5
RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDY2QTAvNjI1RkY3MjZEOUU3MTFFOTg4MDU0MDE2QzRGOUFFMDIvMkIxNzg2MkE4
MkVFMTFFQUIxNzBGRDRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdESfMA0GCSqGSIb3DQEBCwUAA4IBAQCfQuht4lglHYbYGXOhEJ5k
ordtfpQNtK6yOUSDDr0WP2jDpE6QCEa6enD3rOLyam62dS5SduM9WcTkE623t4AC
LLZpu8ekUTsBdfw/D6nl9miJPSv1WVbdcE1o4F+leFOmUPOp3XjtD8xY6sXh1P/C
x/RxSFjKxeaUrwhdzM+9IfUb3KX8yw4W4UcK0KptxZFFJTGz9le290FhFBnp2vaJ
Iq6wrpElrAhWiIkfgaPY62knV1WlwTB67G4hOXGf0ReGshV7TbPcftMlR8Fx5CMd
Uu2zBhWFBHsR8Rh1qP2O/p0fWwuM0K3Gs2bbp8LuuwJBUwVXIb4mSzRpT2bIXLRD
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:42 2026 by rpki-client