
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116917/7C2D1D58BE5711F18527103B6A11F970/1D0E31D0BE5811F1853B03476A11F970.roa
File: 1D0E31D0BE5811F1853B03476A11F970.roa (raw, json)
Hash identifier: VESTuMuHssX7CSElEJFtf9ulmVsRH6kOx3YztLFbl4w=
Subject key identifier: 24:80:7B:2E:4B:52:CF:0F:31:3C:D1:36:D8:3A:A1:50:3E:85:50:A3
Certificate issuer: /CN=A9116917/serialNumber=BFCC6EE62524353EFCAC17137C17BC90CC0ECEBB
Certificate serial: 02
Authority key identifier: BF:CC:6E:E6:25:24:35:3E:FC:AC:17:13:7C:17:BC:90:CC:0E:CE:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v8xu5iUkNT78rBcTfBe8kMwOzrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116917/7C2D1D58BE5711F18527103B6A11F970/1D0E31D0BE5811F1853B03476A11F970.roa
Signing time: Fri 02 Oct 2026 11:55:08 +0000
ROA not before: Fri 02 Oct 2026 11:55:08 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 398465
IP address blocks: 121.50.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116917/7C2D1D58BE5711F18527103B6A11F970/v8xu5iUkNT78rBcTfBe8kMwOzrs.crl
rsync://rpki.apnic.net/member_repository/A9116917/7C2D1D58BE5711F18527103B6A11F970/v8xu5iUkNT78rBcTfBe8kMwOzrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v8xu5iUkNT78rBcTfBe8kMwOzrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 10:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116917, serialNumber=BFCC6EE62524353EFCAC17137C17BC90CC0ECEBB
Validity
Not Before: Oct 2 11:55:08 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6abf9b9c-7a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b3:9b:11:79:ee:67:c2:c0:ff:ba:0a:63:6f:
f2:8e:ff:aa:47:13:2b:eb:e1:b1:6c:d8:09:d2:c7:
85:91:6d:db:bf:95:9c:eb:2d:c1:ef:8c:43:73:b9:
c2:ff:c2:14:d7:a8:5b:94:02:b1:fd:57:a2:f6:8c:
f0:1c:c3:f0:84:8c:74:fb:c4:5c:6a:eb:56:04:a8:
81:c6:59:d9:8a:ee:ec:34:d6:2f:13:b2:f1:ee:cf:
bf:96:12:8f:3e:ad:c3:c0:2a:55:80:5f:ba:2e:a7:
d2:ec:6d:03:dd:e1:89:fe:d4:b3:06:b7:63:37:39:
e1:d3:87:ab:6c:35:96:e6:0a:c6:49:5d:2e:2e:9c:
31:af:69:63:98:d3:09:a6:dd:02:ea:22:5e:f7:57:
5c:22:8a:50:27:93:69:87:15:a5:52:88:e8:d4:4a:
6f:9c:d8:c1:af:d6:b2:d4:24:6a:62:1f:1d:ef:b7:
7a:9d:47:d0:ea:3a:23:72:5c:06:1c:37:6b:e1:f7:
80:ae:e9:b5:6b:4e:ca:a7:58:fd:e9:45:56:8a:a4:
fe:89:a5:99:59:fe:62:14:ac:a6:1c:51:cd:b1:78:
b7:27:38:1a:cd:8e:d6:d9:f0:60:79:d2:52:17:87:
a1:f9:a0:7a:31:7f:e7:6b:1f:ac:a1:47:3b:df:5f:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:80:7B:2E:4B:52:CF:0F:31:3C:D1:36:D8:3A:A1:50:3E:85:50:A3
X509v3 Authority Key Identifier:
keyid:BF:CC:6E:E6:25:24:35:3E:FC:AC:17:13:7C:17:BC:90:CC:0E:CE:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116917/7C2D1D58BE5711F18527103B6A11F970/v8xu5iUkNT78rBcTfBe8kMwOzrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v8xu5iUkNT78rBcTfBe8kMwOzrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116917/7C2D1D58BE5711F18527103B6A11F970/1D0E31D0BE5811F1853B03476A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
121.50.170.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:f9:91:96:a9:fe:f9:19:67:18:cc:32:89:5f:cc:b2:ea:2a:
1d:39:e2:e3:7e:c8:50:97:ed:dd:8e:a3:95:10:24:2a:0d:87:
6d:07:97:fb:44:15:ee:7e:3e:d9:53:26:28:f6:3d:8a:09:ff:
8e:7b:a3:ac:61:93:b3:2d:73:11:46:03:ff:9d:ae:58:d3:87:
ff:a1:f5:eb:9b:59:88:f3:ef:0c:23:86:34:45:e0:8a:56:83:
cc:26:8b:7a:6e:a8:7e:e9:99:d2:03:ad:fe:8a:b3:3c:ef:56:
09:a2:44:87:fc:d5:72:d4:24:23:26:a5:bf:97:9c:88:e6:43:
92:bc:26:d9:eb:04:87:63:cd:8e:e2:a8:20:2a:e6:56:51:a4:
3d:0e:8a:40:e2:1d:7f:16:8d:42:de:67:c9:1a:ab:8e:44:34:
78:98:45:f4:10:a4:67:38:f0:dd:03:fe:5b:f1:24:96:38:93:
27:7c:84:58:da:86:ee:11:bb:8c:e1:7a:18:3b:e6:79:35:97:
3e:86:00:4e:30:02:05:d4:56:c8:93:10:33:15:b7:56:17:14:
40:5b:a9:7a:76:3f:d2:3d:4f:ef:30:ed:4e:d7:ff:44:31:88:
7a:38:89:8b:35:c4:71:a5:32:d5:f7:1a:f1:c4:92:98:b9:85:
21:3d:68:33
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjkxNzExMC8GA1UEBRMoQkZDQzZFRTYyNTI0MzUzRUZDQUMxNzEzN0MxN0JDOTBD
QzBFQ0VCQjAeFw0yNjEwMDIxMTU1MDhaFw0yODAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYmY5YjljLTdhOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDas5sRee5nwsD/ugpjb/KO/6pHEyvr4bFs2AnSx4WRbdu/lZzrLcHvjENzucL/
whTXqFuUArH9V6L2jPAcw/CEjHT7xFxq61YEqIHGWdmK7uw01i8TsvHuz7+WEo8+
rcPAKlWAX7oup9LsbQPd4Yn+1LMGt2M3OeHTh6tsNZbmCsZJXS4unDGvaWOY0wmm
3QLqIl73V1wiilAnk2mHFaVSiOjUSm+c2MGv1rLUJGpiHx3vt3qdR9DqOiNyXAYc
N2vh94Cu6bVrTsqnWP3pRVaKpP6JpZlZ/mIUrKYcUc2xeLcnOBrNjtbZ8GB50lIX
h6H5oHoxf+drH6yhRzvfX3uVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUJIB7LktS
zw8xPNE22DqhUD6FUKMwHwYDVR0jBBgwFoAUv8xu5iUkNT78rBcTfBe8kMwOzrsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTE3LzdDMkQxRDU4QkU1
NzExRjE4NTI3MTAzQjZBMTFGOTcwL3Y4eHU1aVVrTlQ3OHJCY1RmQmU4a013T3py
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdjh4dTVpVWtOVDc4ckJjVGZCZThrTXdPenJzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjkxNy83QzJEMUQ1OEJFNTcxMUYxODUyNzEwM0I2QTExRjk3MC8xRDBFMzFEMEJF
NTgxMUYxODUzQjAzNDc2QTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAF5MqowDQYJKoZIhvcNAQELBQADggEBAKz5kZap/vkZZxjMMolfzLLq
Kh054uN+yFCX7d2Oo5UQJCoNh20Hl/tEFe5+PtlTJij2PYoJ/457o6xhk7MtcxFG
A/+drljTh/+h9eubWYjz7wwjhjRF4IpWg8wmi3puqH7pmdIDrf6KszzvVgmiRIf8
1XLUJCMmpb+XnIjmQ5K8JtnrBIdjzY7iqCAq5lZRpD0OikDiHX8WjULeZ8kaq45E
NHiYRfQQpGc48N0D/lvxJJY4kyd8hFjahu4Ru4zhehg75nk1lz6GAE4wAgXUVsiT
EDMVt1YXFEBbqXp2P9I9T+8w7U7X/0QxiHo4iYs1xHGlMtX3GvHEkpi5hSE9aDM=
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:57:55 2026 by rpki-client