
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa
File: 195AEC4287CF11F09EDBA229C4F9AE02.roa (raw, json)
Hash identifier: f9ESRqKJ4W+yUzggHJXYT2JAv4ZXslIe8zOWbDGBETA=
Subject key identifier: FB:AF:F4:FF:F9:40:9C:27:00:03:4C:E2:62:C8:AB:50:D9:97:C4:99
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1E26
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa
Signing time: Tue 20 Oct 2026 15:14:16 +0000
ROA not before: Tue 20 Oct 2026 15:14:16 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 133502
IP address blocks: 119.30.64.0/24 maxlen: 24
119.30.81.0/24 maxlen: 24
119.30.90.0/24 maxlen: 24
119.30.110.0/24 maxlen: 24
119.30.116.0/22 maxlen: 24
119.73.0.0/22 maxlen: 24
119.73.7.0/24 maxlen: 24
119.73.8.0/24 maxlen: 24
119.73.19.0/24 maxlen: 24
119.73.23.0/24 maxlen: 24
119.73.59.0/24 maxlen: 24
119.73.62.0/24 maxlen: 24
119.73.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7718 (0x1e26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Oct 20 15:14:16 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ad78548-9d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:dc:ee:55:75:7e:41:fb:43:82:2b:02:48:
ab:8e:cc:a2:29:35:63:99:0f:f0:f0:e6:c5:9f:6f:
77:67:bd:79:3d:e0:9b:e5:03:f4:46:14:5b:fc:47:
6c:d5:94:0f:00:1b:0e:f1:d1:d6:fb:7f:6a:79:db:
14:2b:66:41:98:09:ea:84:bc:e3:65:55:b3:f4:a5:
e7:65:60:0e:c8:bb:d3:68:cd:54:1b:a0:b3:c7:2b:
ee:8c:a6:8d:06:f3:e5:4e:88:48:f7:60:a7:f1:8c:
53:10:0f:b5:84:f7:63:c7:b1:74:13:98:c6:c7:f2:
ad:37:cc:4c:01:59:62:ae:e3:34:17:5f:ca:6d:c2:
55:98:45:eb:01:a2:98:c4:da:20:46:ce:ce:2b:93:
46:39:3e:2b:f8:ac:ae:4d:b8:83:19:2c:29:13:37:
a4:10:4c:7c:ac:b7:c8:70:38:bb:26:61:93:2d:a5:
fa:10:ff:dd:e5:49:59:0f:00:64:d7:5a:5a:f7:2c:
dc:3e:4a:19:99:f3:2a:68:88:ad:7c:3b:22:b2:54:
1e:4a:53:ef:a7:55:62:d3:a1:18:ce:2e:e9:a6:65:
85:38:6f:3e:64:82:3b:5b:bc:a8:24:18:f0:af:2f:
13:55:27:33:03:a7:6c:76:b9:d5:2f:f1:d5:77:3c:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AF:F4:FF:F9:40:9C:27:00:03:4C:E2:62:C8:AB:50:D9:97:C4:99
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.30.64.0/24
119.30.81.0/24
119.30.90.0/24
119.30.110.0/24
119.30.116.0/22
119.73.0.0/22
119.73.7.0-119.73.8.255
119.73.19.0/24
119.73.23.0/24
119.73.59.0/24
119.73.62.0/24
119.73.88.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5a:c4:0f:9b:e1:08:62:f9:c9:66:c8:01:e5:a8:97:08:c1:
b6:fd:cd:45:e1:b4:d8:06:35:cd:66:3e:1f:9e:b7:95:74:5f:
4e:ac:fc:4a:05:7c:68:1e:60:13:7d:f4:e4:f6:45:99:de:10:
7a:16:fc:2b:57:f3:ad:bb:97:79:43:48:d6:0a:bc:2b:bf:d6:
84:b1:81:ef:91:b2:72:09:a6:d9:43:8e:06:2a:a0:cb:f8:f1:
ff:85:9b:c3:21:51:66:ab:7e:af:be:2e:46:89:78:a5:b8:1e:
87:07:3e:3d:1e:cb:e5:75:d9:a0:6b:9f:72:71:cc:4a:7d:71:
40:f3:6e:72:e3:52:91:28:d5:bb:04:d4:c6:82:10:70:91:04:
3f:b0:93:7b:e1:16:16:22:da:39:c8:42:f7:ae:ed:be:36:8a:
a9:0c:48:8d:39:46:9e:aa:15:2a:80:c0:f2:3b:f9:75:99:eb:
bb:14:e4:b7:91:d6:44:56:50:63:68:37:09:50:e0:cc:d8:ea:
62:42:5e:fd:49:fd:55:07:71:a0:73:d3:af:d2:cb:5d:21:2f:
c0:78:cc:68:cc:94:aa:5f:80:c3:86:1b:b2:32:99:50:81:12:
52:0f:d5:04:86:cf:75:65:c5:fb:01:88:62:bb:d7:84:36:b1:
b3:ef:ae:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:24 2026 by rpki-client