
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/A90FC92A4D9A11F1BFB1418A8AEE528E.roa
File: A90FC92A4D9A11F1BFB1418A8AEE528E.roa (raw, json)
Hash identifier: MJ/jjFfOeUDxm6Ef+BKKNAOkmjTDqHRrvT96SWW9MdI=
Subject key identifier: FF:5F:E6:19:FA:E5:A6:1B:AA:35:81:9E:51:2D:42:EF:A0:DC:0D:6B
Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Certificate serial: 019C
Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/A90FC92A4D9A11F1BFB1418A8AEE528E.roa
Signing time: Thu 14 May 2026 00:25:21 +0000
ROA not before: Thu 14 May 2026 00:25:21 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 151847
IP address blocks: 103.168.172.0/24 maxlen: 24
202.12.124.0/24 maxlen: 24
2402:5d60::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jun 2026 04:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Validity
Not Before: May 14 00:25:21 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a051670-79c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:79:10:f9:a4:95:5c:e8:3f:d6:46:3f:96:
f4:d9:28:42:23:0d:09:20:55:a9:4e:e8:83:cc:18:
97:41:33:c0:9f:ab:57:6b:ca:69:8e:76:2a:58:67:
bd:e2:82:c7:81:86:a9:3f:74:61:98:fd:f9:b4:15:
0d:3a:47:07:56:d1:e3:a8:fd:7f:83:f8:3b:b5:32:
f5:77:ff:45:ef:18:9b:15:7f:38:43:45:1f:06:49:
12:23:54:44:5f:0a:02:a8:e6:11:5c:19:04:67:3d:
14:18:62:99:48:90:b1:a1:15:f3:d0:58:e5:9c:a7:
b7:ae:4f:40:b4:9d:bb:bf:85:aa:59:f4:2c:b4:ca:
d3:4c:77:4c:57:94:bf:d4:88:dd:ff:52:4d:6d:6a:
31:fe:1a:07:59:d7:b9:6a:97:2b:81:52:27:01:66:
7e:89:ed:b2:61:2d:7b:25:87:d3:2a:d8:6b:d9:56:
3d:2a:41:20:c8:7a:8d:b9:46:74:41:8e:49:a0:24:
97:61:80:5e:ae:eb:e2:0a:68:13:fa:ec:50:bc:ca:
c5:fb:1e:d8:48:e4:18:21:43:ee:b4:7d:7e:21:e3:
61:ce:7d:7a:32:a6:f0:ed:2d:e2:92:b2:21:4d:20:
9b:f0:0c:a8:96:98:0e:e9:e5:62:a1:88:f1:f8:7b:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5F:E6:19:FA:E5:A6:1B:AA:35:81:9E:51:2D:42:EF:A0:DC:0D:6B
X509v3 Authority Key Identifier:
keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/A90FC92A4D9A11F1BFB1418A8AEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.172.0/24
202.12.124.0/24
IPv6:
2402:5d60::/32
Signature Algorithm: sha256WithRSAEncryption
47:eb:e3:78:74:1d:c7:3d:2b:1d:2c:ee:39:84:d0:00:5f:3a:
7b:42:9b:10:f5:3e:5c:de:ab:1a:99:9f:f3:a5:eb:f3:6d:c7:
02:ab:03:a9:e7:0a:7e:d9:1e:09:62:db:4b:f3:a7:71:f0:97:
84:25:93:b1:1e:e8:2e:6e:6b:e8:71:ac:fe:0d:8b:af:16:f1:
0f:57:a2:48:04:06:a9:6d:b2:e0:46:26:e8:93:da:72:e1:40:
a4:f2:64:07:da:30:4d:42:70:1a:09:35:b4:ca:93:c7:4e:22:
cd:e1:7f:6c:97:52:04:ea:92:5f:3b:3e:e2:c8:26:e2:cf:6e:
41:71:c7:44:46:0c:68:d7:25:35:5f:d6:9f:3d:dc:6d:a5:3d:
88:8a:53:d4:00:1b:22:1f:6a:ed:fa:4f:4c:f6:e1:ca:18:c7:
37:0d:56:74:12:f0:02:27:50:25:ff:0d:63:e9:eb:5e:cc:e2:
b7:85:bc:73:91:2a:fb:60:3a:a3:60:a1:a4:77:0e:3d:89:69:
17:1e:6c:86:32:ae:ad:5f:1a:cd:32:2b:d6:d5:05:04:91:f3:
d8:13:a9:d0:05:db:f7:b2:a2:19:37:97:4b:c0:74:4f:a9:61:
23:78:b7:e7:b5:8f:14:c4:16:c4:68:d8:43:20:c1:bf:43:7d:
14:a5:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 16:15:08 2026 by rpki-client