
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/095798588ABA11EAB5EDDE54C4F9AE02.roa
File: 095798588ABA11EAB5EDDE54C4F9AE02.roa (raw, json)
Hash identifier: cY6byPuSXq5kT4I6QxVsWBStNUk3asYxZRGjdG59u38=
Subject key identifier: A6:90:D1:E6:E4:B6:C1:C4:A7:86:05:7F:03:72:BE:5C:85:FE:50:29
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1E2A
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/095798588ABA11EAB5EDDE54C4F9AE02.roa
Signing time: Tue 20 Oct 2026 15:14:24 +0000
ROA not before: Tue 20 Oct 2026 15:14:24 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 18212
IP address blocks: 210.2.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7722 (0x1e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Oct 20 15:14:24 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ad78550-a222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:a1:5c:1f:93:bc:65:8e:05:59:d9:67:f1:
59:3d:fb:23:c2:0b:09:b3:57:af:93:76:1a:48:06:
6a:c3:c3:ce:42:81:61:8e:f0:ef:64:b2:57:89:d6:
64:02:05:6d:1d:db:1c:15:bd:e4:91:e0:f9:01:12:
c2:0e:23:a9:af:5e:d4:82:77:bf:b4:26:cb:fd:ca:
f9:cc:e7:3d:a4:5c:c2:e3:d1:1b:61:5b:57:20:be:
56:2b:1d:9d:19:d5:27:43:56:a7:3a:75:ae:13:6c:
e6:2f:15:89:29:99:3f:d4:e7:b5:a7:4c:6d:c1:05:
2d:b0:d8:d2:77:71:60:8f:b3:11:43:a1:7c:6b:ec:
a8:7e:0a:28:ba:d9:cb:7d:46:68:67:9f:28:8a:ca:
a4:26:48:74:a7:79:7a:ae:32:7d:af:df:8e:69:26:
70:37:f6:3b:0c:5e:1e:e3:05:fa:c7:d5:0e:f9:af:
81:dc:a5:ff:11:23:2a:03:10:f8:38:29:e9:ed:13:
a5:90:85:c0:ef:d8:ee:50:a6:de:1a:b4:12:9e:34:
fe:24:1d:4a:6f:cc:04:99:21:9d:18:e5:6e:b6:e6:
a8:e1:d3:71:64:fc:81:99:63:af:11:90:cd:01:ae:
9b:0f:78:cc:ec:00:b9:42:62:23:0a:1a:3a:22:d0:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:90:D1:E6:E4:B6:C1:C4:A7:86:05:7F:03:72:BE:5C:85:FE:50:29
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/095798588ABA11EAB5EDDE54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.2.130.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8c:36:7e:2b:2e:75:57:b0:21:e8:93:98:ab:32:19:8c:f3:
e1:3a:3b:a2:67:e6:7e:07:f3:da:a0:49:e6:69:9f:28:0c:51:
24:36:40:71:17:bb:7e:7b:42:d9:87:cc:a4:1c:37:5a:42:20:
5a:a0:ad:43:f6:b2:5d:83:e0:63:3d:0f:76:ca:22:b3:b4:6f:
8f:0a:bf:3e:e3:03:b9:a8:53:8b:c0:84:be:dd:f3:e2:01:12:
15:a1:46:a0:c6:89:cb:1b:e2:06:df:1c:30:8a:d2:f4:a3:09:
0b:cc:78:5d:24:0d:fd:8d:81:08:01:70:20:5d:b1:17:e2:0b:
d0:7f:da:ff:54:b3:9a:da:73:73:7a:69:6e:c2:b7:db:d1:27:
22:99:85:96:30:8c:a4:7d:79:fe:46:17:f9:d7:d1:97:12:38:
6f:b9:cc:e6:2e:08:62:be:3b:5d:88:a1:b1:09:cf:e3:d1:76:
f5:c9:64:1a:8d:34:c3:c5:f8:35:ae:83:15:46:52:29:8c:8c:
37:9e:c5:05:d1:dc:b7:6b:dd:ed:6d:2a:e6:2b:95:a0:a4:7e:
4e:c6:1f:29:c5:a0:83:ff:15:28:45:7c:30:58:e0:c1:ef:6c:
28:24:01:17:b5:66:59:af:00:de:6b:29:80:f1:f2:ef:be:96:
b3:2a:89:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:37:45 2026 by rpki-client