
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A9545AE6D1011EFA13D6E2BC4F9AE02.roa
File: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (raw, json)
Hash identifier: QW3XlobWtDfhs9tL0Ef+uIt4WE/w5r6ErA9tyl349gM=
Subject key identifier: 6D:58:3E:10:71:FA:8D:6D:35:75:F8:87:51:60:61:5E:1F:CC:83:2E
Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial: 05BE
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A9545AE6D1011EFA13D6E2BC4F9AE02.roa
Signing time: Sat 22 Aug 2026 23:44:51 +0000
ROA not before: Sat 22 Aug 2026 23:44:51 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 55933
IP address blocks: 103.67.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 23:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1470 (0x5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Validity
Not Before: Aug 22 23:44:51 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a8a3473-0b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:2b:fb:16:b1:7c:a7:8b:c8:e7:a1:83:c6:
a2:1f:7c:08:b3:75:f7:04:99:01:8d:b3:be:36:29:
9b:c9:5e:a2:f2:6b:9d:6e:3c:5b:d8:af:49:13:15:
d5:2d:39:eb:0a:82:76:b5:db:21:b7:77:cb:94:42:
81:b7:be:1a:e6:98:40:bb:c1:b1:ef:7e:d4:5e:04:
8f:70:1a:ca:62:87:c6:fd:7c:9d:14:0b:a6:34:97:
17:a5:da:37:34:7c:95:c8:6c:27:79:a1:1e:47:73:
47:8f:66:42:6f:90:c8:ec:ff:3f:95:40:42:9d:52:
3a:5d:e5:01:50:0f:bd:e1:5b:1a:a9:3e:9d:e5:9b:
9e:1d:5f:26:a2:d7:a6:22:fc:e7:e0:38:ee:94:00:
6c:0d:36:0f:64:0d:e7:5d:e4:06:d1:ec:0d:c9:a5:
e7:b0:55:c9:5f:fd:e9:70:ec:d9:a7:7b:6f:2d:e8:
fa:e9:6c:63:6b:80:bb:5c:f9:c5:bd:0d:1c:f7:3c:
ae:a6:eb:d6:a7:b9:1a:90:60:16:a4:84:67:68:97:
ff:26:63:b6:e6:4d:16:a5:98:b0:55:03:19:d5:f4:
19:68:d6:83:ff:be:d0:ae:5a:7d:b5:02:a4:c7:de:
63:ad:93:84:44:f7:52:0b:41:43:66:b1:e2:05:64:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:58:3E:10:71:FA:8D:6D:35:75:F8:87:51:60:61:5E:1F:CC:83:2E
X509v3 Authority Key Identifier:
keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A9545AE6D1011EFA13D6E2BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.67.252.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:ea:c4:6f:06:88:35:d8:b5:e0:dd:aa:65:78:31:12:18:a4:
43:84:52:b2:75:cc:f3:1b:58:10:b9:44:8b:59:b8:66:c0:56:
48:b3:f0:50:f9:9d:5f:f5:68:da:6a:a8:f9:93:5d:e3:ad:19:
6a:9a:34:11:3c:ba:65:b2:f2:b4:f1:88:4c:20:82:6e:2d:a2:
fb:1d:2f:48:7f:4b:9f:ad:6d:e1:f0:86:35:d4:aa:37:61:f8:
f9:cf:0e:e2:fc:a4:c3:c6:f7:94:20:0a:7d:e3:d9:8a:95:c1:
71:20:b4:b2:10:dd:94:7c:dc:1b:eb:6c:3e:4c:8d:49:8d:71:
ae:8f:b2:4e:68:c5:1a:52:79:2d:9c:cf:2f:01:78:99:e7:b4:
e4:91:00:70:34:9d:d8:d5:e4:ad:47:37:6d:73:0e:6e:40:73:
f0:db:eb:d4:42:39:17:35:2f:6c:1f:49:69:46:74:e8:d3:6c:
c7:73:05:17:dd:76:05:26:4a:7c:35:df:87:f8:c7:14:a5:2f:
04:0d:9f:5b:f0:ec:43:d4:d4:32:9e:e5:4e:ed:f1:83:6c:76:
48:53:d6:9a:66:9a:1e:cd:47:b3:b3:bb:41:21:fd:6a:19:5b:
2f:7e:69:4a:76:5b:43:be:49:d6:f7:7a:68:52:51:5f:1a:4b:
81:c7:e7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:41:27 2026 by rpki-client