
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/5068CECECC1C11F1AB40D406F965CEF9.roa
File: 5068CECECC1C11F1AB40D406F965CEF9.roa (raw, json)
Hash identifier: ESZj9FPS/zQAEnhfkQtfgc0Ts0uucZlBzOk+1jtfsiQ=
Subject key identifier: 7B:F6:05:2E:9E:BD:77:D8:90:B0:0E:B3:DF:25:65:A9:56:18:09:37
Certificate issuer: /CN=A9164F00/serialNumber=B750D1F91E828098A6C1CBD57777956C7750B82C
Certificate serial: 02
Authority key identifier: B7:50:D1:F9:1E:82:80:98:A6:C1:CB:D5:77:77:95:6C:77:50:B8:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1DR-R6CgJimwcvVd3eVbHdQuCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/5068CECECC1C11F1AB40D406F965CEF9.roa
Signing time: Tue 20 Oct 2026 00:22:21 +0000
ROA not before: Tue 20 Oct 2026 00:22:20 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 8075
IP address blocks: 203.10.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/t1DR-R6CgJimwcvVd3eVbHdQuCw.crl
rsync://rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/t1DR-R6CgJimwcvVd3eVbHdQuCw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1DR-R6CgJimwcvVd3eVbHdQuCw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 09:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F00, serialNumber=B750D1F91E828098A6C1CBD57777956C7750B82C
Validity
Not Before: Oct 20 00:22:20 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ad6b43c-6e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:7a:84:3b:25:81:73:37:8b:e5:8b:f6:27:
8f:03:05:9b:91:a7:f6:f1:ad:4d:57:84:85:51:f0:
4c:a9:a1:e6:4b:4c:fa:7b:07:a0:e9:6f:62:4e:33:
2b:d4:68:bf:19:a1:8c:3d:54:38:e1:4a:3b:11:1c:
c4:70:45:0a:5b:b3:05:0e:dc:04:08:45:96:8c:1b:
a0:70:a2:a3:d8:4f:16:43:b5:86:39:3a:4e:45:40:
69:12:49:fc:b8:88:18:76:60:86:1e:ec:06:02:aa:
9a:07:52:33:eb:75:dc:e4:5c:e6:26:82:3e:49:dd:
7f:89:05:52:cc:fa:c7:33:e0:14:b0:2f:1f:16:12:
c6:0a:c2:12:e1:22:79:9c:a9:62:7e:b5:8e:6f:02:
20:13:bd:85:1b:7b:b7:2b:52:1c:43:52:58:c9:f3:
34:79:c7:a3:fe:8b:44:1a:7b:f3:a7:f4:fe:28:3d:
c7:6f:9e:c7:f8:b0:49:ef:f9:e2:24:13:91:0d:10:
6c:a5:fa:e8:18:26:8f:ce:9f:4f:f1:d8:80:42:4e:
f6:c6:df:e2:7f:d1:cc:08:17:9f:f5:bf:c6:f1:0a:
15:0d:54:3c:c4:00:fe:56:ea:cc:d2:29:0e:7a:84:
4d:c1:bf:db:12:f3:27:1a:f3:48:c5:95:e5:6b:31:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:05:2E:9E:BD:77:D8:90:B0:0E:B3:DF:25:65:A9:56:18:09:37
X509v3 Authority Key Identifier:
keyid:B7:50:D1:F9:1E:82:80:98:A6:C1:CB:D5:77:77:95:6C:77:50:B8:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/t1DR-R6CgJimwcvVd3eVbHdQuCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1DR-R6CgJimwcvVd3eVbHdQuCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/5068CECECC1C11F1AB40D406F965CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
203.10.29.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0d:f7:d2:78:4b:a0:01:f6:db:cd:e8:b2:58:31:0b:1f:fd:
0c:a4:2c:82:d2:62:7c:c4:53:25:24:b9:0f:ce:bb:a4:e2:88:
96:22:d5:17:37:db:1d:fd:ca:4c:bd:4e:6e:1f:1b:73:7f:58:
52:7b:08:54:00:d2:22:40:11:57:50:06:0a:b0:8d:0a:09:ea:
ba:81:f8:19:d6:63:6a:e8:92:5b:fb:c1:48:6d:af:73:a1:50:
d5:0e:da:f8:fa:5b:72:48:29:49:b2:2f:43:b8:a3:16:01:a3:
c4:09:6f:a6:27:3e:6e:51:20:26:13:5d:f3:8c:33:4f:0d:c5:
36:07:7e:c0:2a:f0:bb:11:ca:81:4e:48:a0:72:68:dc:7a:46:
34:cc:73:4d:b6:9d:30:cb:ba:2f:20:66:7a:09:db:21:68:f6:
8e:e1:d7:f6:17:da:20:cd:84:c1:1e:4e:a0:f6:9c:d8:c2:c4:
eb:53:f0:82:38:dd:a5:ec:90:21:53:bc:86:9a:88:1b:72:7d:
9a:e1:47:89:07:a2:8e:61:57:22:66:5d:75:30:87:df:5e:bc:
36:ed:c9:7c:b2:76:a3:4e:b4:0b:5a:fa:ea:43:5f:84:4f:ba:
cc:0f:87:4c:3b:92:ba:0b:ff:2e:92:aa:19:d5:92:c7:a9:fa:
fc:d1:47:19
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NEYwMDExMC8GA1UEBRMoQjc1MEQxRjkxRTgyODA5OEE2QzFDQkQ1Nzc3Nzk1NkM3
NzUwQjgyQzAeFw0yNjEwMjAwMDIyMjBaFw0yNzEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhZDZiNDNjLTZlNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCe73qEOyWBczeL5Yv2J48DBZuRp/bxrU1XhIVR8EypoeZLTPp7B6Dpb2JOMyvU
aL8ZoYw9VDjhSjsRHMRwRQpbswUO3AQIRZaMG6BwoqPYTxZDtYY5Ok5FQGkSSfy4
iBh2YIYe7AYCqpoHUjPrddzkXOYmgj5J3X+JBVLM+scz4BSwLx8WEsYKwhLhInmc
qWJ+tY5vAiATvYUbe7crUhxDUljJ8zR5x6P+i0Qae/On9P4oPcdvnsf4sEnv+eIk
E5ENEGyl+ugYJo/On0/x2IBCTvbG3+J/0cwIF5/1v8bxChUNVDzEAP5W6szSKQ56
hE3Bv9sS8yca80jFleVrMShhAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUe/YFLp69
d9iQsA6z3yVlqVYYCTcwHwYDVR0jBBgwFoAUt1DR+R6CgJimwcvVd3eVbHdQuCww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0RjAwLzIxNjcxQUMyQ0Mx
QzExRjFCOTFCNEMzNUY4NjVDRUY5L3QxRFItUjZDZ0ppbXdjdlZkM2VWYkhkUXVD
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdDFEUi1SNkNnSmltd2N2VmQzZVZiSGRRdUN3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEYwMC8yMTY3MUFDMkNDMUMxMUYxQjkxQjRDMzVGODY1Q0VGOS81MDY4Q0VDRUND
MUMxMUYxQUI0MEQ0MDZGOTY1Q0VGOS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADLCh0wDQYJKoZIhvcNAQELBQADggEBAHEN99J4S6AB9tvN6LJYMQsf
/QykLILSYnzEUyUkuQ/Ou6TiiJYi1Rc32x39yky9Tm4fG3N/WFJ7CFQA0iJAEVdQ
BgqwjQoJ6rqB+BnWY2roklv7wUhtr3OhUNUO2vj6W3JIKUmyL0O4oxYBo8QJb6Yn
Pm5RICYTXfOMM08NxTYHfsAq8LsRyoFOSKByaNx6RjTMc022nTDLui8gZnoJ2yFo
9o7h1/YX2iDNhMEeTqD2nNjCxOtT8II43aXskCFTvIaaiBtyfZrhR4kHoo5hVyJm
XXUwh99evDbtyXyydqNOtAta+upDX4RPuswPh0w7kroL/y6SqhnVksep+vzRRxk=
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:35 2026 by rpki-client