
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/5C67E8E87B7411F1A3D02C1F63A30FBC.roa
File: 5C67E8E87B7411F1A3D02C1F63A30FBC.roa (raw, json)
Hash identifier: ORuMnxH7G7FX6h8tXJKoehvjLlQp1iQA/wSMC0O4y0s=
Subject key identifier: 84:97:21:5B:94:6B:A1:F1:6A:23:B0:C1:66:FA:99:91:50:C0:0C:58
Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Certificate serial: 135C
Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/5C67E8E87B7411F1A3D02C1F63A30FBC.roa
Signing time: Thu 09 Jul 2026 09:08:02 +0000
ROA not before: Thu 09 Jul 2026 09:08:02 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 20940
IP address blocks: 203.144.1.0/24 maxlen: 24
2401:fdc0:a000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Jul 2026 09:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4956 (0x135c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Validity
Not Before: Jul 9 09:08:02 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a4f64f2-6e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:1b:6a:7f:02:75:23:49:29:a4:c5:0f:37:
e0:8c:cc:d1:44:61:16:1e:83:b3:c9:71:6d:a2:26:
b0:f6:34:b6:b5:26:ff:0d:be:6d:b7:52:69:36:dd:
3f:d7:22:8f:80:c1:86:34:e0:c8:f0:f7:d9:86:f4:
a6:55:2b:4f:fa:93:9f:c5:08:1e:0a:63:66:d8:34:
e2:d5:1b:cc:dc:ce:41:68:89:54:c1:1a:76:72:9d:
e6:7b:ce:c3:15:35:42:cc:58:bb:b1:6d:e5:04:11:
91:e5:40:ce:14:03:1b:93:ce:70:ae:d2:2f:05:ee:
da:fc:86:65:46:62:e3:63:0b:43:b5:82:51:a0:3f:
f0:7c:3f:4b:ca:73:3d:d1:2f:c4:70:13:40:be:6e:
3a:87:6f:15:fc:2b:29:c7:8a:6c:89:ba:5a:8a:95:
c9:0e:f3:93:d5:2c:85:00:cf:33:1d:ec:72:4d:ad:
5a:76:63:1c:1a:45:e3:96:05:83:08:20:e0:70:00:
85:8b:aa:1d:7d:ba:0f:0d:1d:f7:e8:fe:dd:cf:5c:
fb:10:e7:59:fc:17:1d:ba:cb:b9:da:f0:19:79:11:
4c:90:ad:f0:21:2d:59:f4:ef:68:84:d3:33:4b:4e:
24:c0:24:b1:1a:b2:12:1b:08:0a:aa:0b:89:f6:cd:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:97:21:5B:94:6B:A1:F1:6A:23:B0:C1:66:FA:99:91:50:C0:0C:58
X509v3 Authority Key Identifier:
keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/5C67E8E87B7411F1A3D02C1F63A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.144.1.0/24
IPv6:
2401:fdc0:a000::/48
Signature Algorithm: sha256WithRSAEncryption
84:bf:f3:cf:5f:cf:8e:c5:b4:0e:1c:fa:d2:02:3b:2b:dc:64:
46:62:03:cb:2c:eb:7e:32:d5:bc:0f:8d:6c:1d:af:c3:ef:43:
e8:02:3c:69:0c:f7:d1:96:9e:92:dc:46:9e:8a:50:f8:8f:cb:
4f:d2:32:9d:91:28:eb:6c:5c:d7:b1:9f:2e:1f:3b:a4:da:ae:
eb:1c:a9:54:1f:5f:95:c0:e1:c1:cf:15:88:f9:15:46:13:b2:
1d:de:cc:c4:15:04:f7:8f:61:3c:15:2c:7e:1f:f0:b7:33:e1:
ad:b6:8b:2b:41:a9:25:f5:2f:89:85:44:aa:5f:13:3e:e3:20:
da:a9:b5:fa:56:fe:91:5e:00:5f:c2:42:d6:68:60:12:f8:e5:
47:09:09:c3:43:7e:05:96:bd:5a:18:4e:38:c6:21:79:48:42:
41:28:6f:e3:f9:77:4c:a4:ca:5e:1d:5e:26:6c:dd:dc:a9:bd:
fd:e6:d3:28:c0:85:74:e6:a6:63:26:e0:87:97:a5:3e:4b:93:
15:49:2c:46:cb:2b:2b:bf:ea:77:a9:0a:ef:ce:2d:12:ac:55:
a3:c6:30:95:df:e2:90:0f:5d:18:99:97:30:22:87:d8:1c:26:
02:f7:15:ce:a1:5d:e3:54:01:59:c2:3c:e9:4a:5c:7b:12:01:
c4:07:a3:46
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICE1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy
QkY2MEQ1MUUwHhcNMjYwNzA5MDkwODAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmNjRmMi02ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PYban8CdSNJKaTFDzfgjMzRRGEWHoOzyXFtoiaw9jS2tSb/Db5tt1JpNt0/
1yKPgMGGNODI8PfZhvSmVStP+pOfxQgeCmNm2DTi1RvM3M5BaIlUwRp2cp3me87D
FTVCzFi7sW3lBBGR5UDOFAMbk85wrtIvBe7a/IZlRmLjYwtDtYJRoD/wfD9LynM9
0S/EcBNAvm46h28V/Cspx4psibpaipXJDvOT1SyFAM8zHexyTa1admMcGkXjlgWD
CCDgcACFi6odfboPDR336P7dz1z7EOdZ/Bcdusu52vAZeRFMkK3wIS1Z9O9ohNMz
S04kwCSxGrISGwgKqguJ9s1hTQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFISXIVuU
a6HxaiOwwWb6mZFQwAxYMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5
NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx
UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjQ4NjAvQjQwMUM5ODJFOTcwMTFFOEIwMzU5MzU5QzRGOUFFMDIvNUM2N0U4RTg3
Qjc0MTFGMUEzRDAyQzFGNjNBMzBGQkMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAy5ABMA8EAgACMAkDBwAkAf3AoAAwDQYJKoZIhvcNAQELBQADggEB
AIS/889fz47FtA4c+tICOyvcZEZiA8ss634y1bwPjWwdr8PvQ+gCPGkM99GWnpLc
Rp6KUPiPy0/SMp2RKOtsXNexny4fO6TaruscqVQfX5XA4cHPFYj5FUYTsh3ezMQV
BPePYTwVLH4f8Lcz4a22iytBqSX1L4mFRKpfEz7jINqptfpW/pFeAF/CQtZoYBL4
5UcJCcNDfgWWvVoYTjjGIXlIQkEob+P5d0ykyl4dXiZs3dypvf3m0yjAhXTmpmMm
4IeXpT5LkxVJLEbLKyu/6nepCu/OLRKsVaPGMJXf4pAPXRiZlzAih9gcJgL3Fc6h
XeNUAVnCPOlKXHsSAcQHo0Y=
-----END CERTIFICATE-----
Generated at Thu Jul 9 17:29:48 2026 by rpki-client