
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/A1369C781C3B11F1A9F167973A3D8C67.roa
File: A1369C781C3B11F1A9F167973A3D8C67.roa (raw, json)
Hash identifier: Ln2S+wJ8y0nN9Ehuf580iL5liKxjlD5bK/WsoPCx1Ew=
Subject key identifier: 40:D5:19:D8:2C:4F:D7:1A:E2:4A:02:47:B1:91:E4:28:02:8B:67:DE
Certificate issuer: /CN=A9153F90/serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E
Certificate serial: 42
Authority key identifier: 7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/A1369C781C3B11F1A9F167973A3D8C67.roa
Signing time: Tue 07 Jul 2026 10:35:48 +0000
ROA not before: Tue 07 Jul 2026 10:35:48 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 152884
IP address blocks: 160.20.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl
rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F90, serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E
Validity
Not Before: Jul 7 10:35:48 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4cd684-a0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:e4:ce:f6:af:73:0f:ee:c4:c1:7c:cd:32:
b0:ce:72:8d:17:88:ef:82:d4:71:d0:a1:3c:4b:95:
f9:9d:72:18:cb:7c:0e:32:4c:6a:3d:18:a8:4b:68:
dd:da:f2:42:5b:4c:ce:94:57:ea:df:ac:2c:39:04:
1d:17:fa:48:65:db:f9:f2:f8:97:51:41:03:0f:89:
a0:4c:5c:ab:f4:d8:df:a8:b0:5d:c7:a7:8f:00:9e:
e3:d9:40:79:fd:b8:23:3f:92:fc:10:b6:f0:0b:f1:
01:fa:cb:e7:7e:2d:d4:a8:79:2f:72:12:76:02:a0:
8e:67:f8:3f:76:a3:68:8d:df:9f:4d:d8:76:a5:1f:
58:b5:66:e8:c7:68:18:2f:aa:c1:dc:59:c9:95:35:
e7:27:ae:18:e3:31:8c:e8:79:20:ee:81:1f:8a:c6:
69:e8:ad:c0:d9:50:3a:33:ed:97:b2:da:e7:3e:b6:
bc:01:4f:15:bf:21:01:25:5a:32:a9:8e:21:1a:07:
b4:7b:cd:26:e7:9f:0a:e4:77:f6:b5:88:d0:fc:66:
b5:dd:34:72:e2:1a:88:2e:f9:76:37:68:5f:20:ff:
33:f4:c3:a0:d2:2b:7c:a1:13:40:fa:5f:86:89:30:
cf:92:1d:f9:eb:b7:1b:a2:38:4e:be:b5:cb:2b:59:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D5:19:D8:2C:4F:D7:1A:E2:4A:02:47:B1:91:E4:28:02:8B:67:DE
X509v3 Authority Key Identifier:
keyid:7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/A1369C781C3B11F1A9F167973A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
160.20.120.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b2:ac:09:54:8a:82:b8:e6:99:0c:4b:9e:54:58:14:79:f6:
37:0b:ee:5b:b7:3b:4a:44:0b:98:4f:09:ba:3f:a6:b1:a9:f1:
f6:40:b0:53:36:86:36:93:f3:d7:41:ab:fd:11:a9:a0:ea:7f:
7d:cc:b1:46:88:95:13:85:5d:ae:3e:a4:c2:68:de:dc:4f:1a:
4b:4c:ad:3f:4d:81:9c:bc:d9:10:c3:6d:77:43:6d:44:38:e1:
9e:3f:40:b4:8f:bc:38:f9:a7:f5:89:2a:e7:96:d6:6d:10:3b:
cf:f5:18:1c:b1:68:36:f8:93:3e:c5:a5:33:50:a3:1d:26:ca:
9e:e0:0b:54:78:92:37:96:45:60:39:57:42:9f:17:e2:94:86:
9e:23:31:df:2a:05:e3:76:0f:d9:db:d9:51:e6:c7:e5:15:49:
40:bc:22:99:c6:f7:a6:45:fa:b6:d3:ac:27:1b:06:f2:6b:86:
01:88:44:31:9a:ee:74:3e:2c:19:0f:ec:04:0a:5a:a6:18:db:
d0:ce:3c:8c:98:4d:eb:a2:09:36:a6:b0:e1:00:e6:cb:0a:55:
44:c7:cd:55:08:cd:2f:83:04:48:b1:72:99:d2:7b:9c:ea:f3:
fa:56:e3:b8:bb:d2:2d:b1:df:74:eb:39:59:73:bf:da:b4:78:
fb:11:f2:59
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
M0Y5MDExMC8GA1UEBRMoN0Y0OTM1ODk1QzJENkNCNjJDNDE3NUM0OEU2RUQ5NURD
MTY4MTk3RTAeFw0yNjA3MDcxMDM1NDhaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNGNkNjg0LWEwYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCojeTO9q9zD+7EwXzNMrDOco0XiO+C1HHQoTxLlfmdchjLfA4yTGo9GKhLaN3a
8kJbTM6UV+rfrCw5BB0X+khl2/ny+JdRQQMPiaBMXKv02N+osF3Hp48AnuPZQHn9
uCM/kvwQtvAL8QH6y+d+LdSoeS9yEnYCoI5n+D92o2iN359N2HalH1i1ZujHaBgv
qsHcWcmVNecnrhjjMYzoeSDugR+KxmnorcDZUDoz7Zey2uc+trwBTxW/IQElWjKp
jiEaB7R7zSbnnwrkd/a1iND8ZrXdNHLiGogu+XY3aF8g/zP0w6DSK3yhE0D6X4aJ
MM+SHfnrtxuiOE6+tcsrWbdbAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUQNUZ2CxP
1xriSgJHsZHkKAKLZ94wHwYDVR0jBBgwFoAUf0k1iVwtbLYsQXXEjm7ZXcFoGX4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwL0Y5MTNENTE0MUMz
NjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZc1FYWEVqbTdaWGNGb0dY
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZjBrMWlWd3RiTFlzUVhYRWptN1pYY0ZvR1g0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0Y5MC9GOTEzRDUxNDFDMzYxMUYxODg0N0FCMkIzODNEOEM2Ny9BMTM2OUM3ODFD
M0IxMUYxQTlGMTY3OTczQTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACgFHgwDQYJKoZIhvcNAQELBQADggEBAIOyrAlUioK45pkMS55UWBR5
9jcL7lu3O0pEC5hPCbo/prGp8fZAsFM2hjaT89dBq/0RqaDqf33MsUaIlROFXa4+
pMJo3txPGktMrT9NgZy82RDDbXdDbUQ44Z4/QLSPvDj5p/WJKueW1m0QO8/1GByx
aDb4kz7FpTNQox0myp7gC1R4kjeWRWA5V0KfF+KUhp4jMd8qBeN2D9nb2VHmx+UV
SUC8IpnG96ZF+rbTrCcbBvJrhgGIRDGa7nQ+LBkP7AQKWqYY29DOPIyYTeuiCTam
sOEA5ssKVUTHzVUIzS+DBEixcpnSe5zq8/pW47i70i2x33TrOVlzv9q0ePsR8lk=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:34:28 2026 by rpki-client