
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/6E6FFF6A92F911ED8A66E70CC4F9AE02.roa
File: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (raw, json)
Hash identifier: wBIj83x+5tbUquS7FIlQQAMIzPRLzq+ZJDvfE+mcXhY=
Subject key identifier: 63:C7:4F:D3:D3:0F:39:61:67:30:2D:F2:F4:9A:83:C2:84:AF:1B:C1
Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial: 09F8
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/6E6FFF6A92F911ED8A66E70CC4F9AE02.roa
Signing time: Wed 24 Jun 2026 20:24:29 +0000
ROA not before: Wed 24 Jun 2026 20:24:29 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 41095
IP address blocks: 45.116.8.0/24 maxlen: 24
45.116.9.0/24 maxlen: 24
45.116.10.0/24 maxlen: 24
45.116.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2552 (0x9f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Validity
Not Before: Jun 24 20:24:29 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3c3cfd-0efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:27:ec:26:d9:cd:d2:2b:56:d6:d7:b2:cb:
52:d3:e4:40:39:cc:02:7e:8c:ad:57:0e:b1:45:94:
a6:40:f7:31:cd:e4:30:f7:c9:7f:3a:5f:5f:ce:f0:
7e:d9:ee:d4:14:61:19:3c:d1:d5:9f:5f:ba:2b:06:
ea:c8:cb:d7:28:10:9e:70:43:3b:6d:b8:ba:d5:bf:
8c:4e:f0:e8:f8:91:90:42:50:66:41:b1:0f:42:89:
94:ce:60:98:c4:e3:91:cc:81:f4:c4:f2:2a:10:71:
cf:2b:c1:b7:70:3a:94:f9:34:3a:41:19:ac:c8:6a:
c0:cb:9e:93:50:93:96:2e:5a:49:1b:51:5f:4b:33:
63:b4:4f:c7:53:45:4d:86:90:c7:f4:88:8c:a5:41:
c9:4a:57:dd:91:6f:37:7e:2e:18:b0:a9:75:d6:75:
fd:13:d3:d7:d6:6c:c4:52:78:50:e7:bc:cd:4d:df:
8b:9d:ff:38:3b:27:f5:bf:3b:59:c8:48:e1:88:70:
8c:3d:67:4a:4a:26:6c:1a:93:24:18:80:a4:7a:73:
22:ff:28:c9:cb:36:bd:6e:34:28:c5:35:28:43:5f:
2b:11:ae:78:2e:98:48:87:54:36:b4:a4:0f:e2:b9:
33:f1:f2:e0:46:42:76:ee:6d:80:b5:59:23:4c:c2:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C7:4F:D3:D3:0F:39:61:67:30:2D:F2:F4:9A:83:C2:84:AF:1B:C1
X509v3 Authority Key Identifier:
keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/6E6FFF6A92F911ED8A66E70CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.116.8.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:71:2f:04:ec:f7:c0:0f:b5:9d:8d:dc:3e:e2:17:81:99:44:
60:ca:2a:8f:9f:a6:fe:c4:98:bf:b3:78:83:70:6b:4f:90:aa:
30:e6:d3:51:b8:3c:93:7a:b5:20:b8:ad:96:01:8d:e6:54:9f:
31:67:aa:aa:c5:e6:55:8c:45:ef:19:b2:0a:63:91:ad:cb:94:
35:a7:66:91:7a:a8:21:c9:f3:ba:98:8e:0e:81:f3:23:09:c9:
1f:90:ed:a6:a4:37:e1:da:52:cc:5b:76:a4:ec:a4:48:07:da:
3e:51:a7:fd:16:46:b9:d0:2a:d5:d8:6b:fd:ee:b8:0f:1d:49:
a8:17:d4:95:5f:e8:96:fd:c1:42:50:8c:6f:b8:b5:6b:25:bc:
c3:85:71:95:c2:4b:53:67:8a:2e:49:ee:9c:2b:dd:fd:23:97:
a9:98:5c:7a:57:e0:e5:9d:e3:dc:9d:b1:7e:9f:a8:79:48:c0:
76:23:3e:ea:46:34:90:c5:18:96:35:6d:ba:3b:9e:4e:28:de:
f3:af:5f:1b:f1:da:34:7f:39:1d:2d:c1:b8:90:ec:f7:90:f3:
f6:60:a6:ce:16:2e:fb:d5:24:3e:8e:b2:de:19:e9:d2:6d:d6:
7d:e5:f9:3a:6f:49:56:c0:5a:0e:38:c6:60:ca:d1:3f:05:c2:
1d:47:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:19:27 2026 by rpki-client