
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
File: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (raw, json)
Hash identifier: +vGpERWiBuMBlKPDS1a/v/6YNwEfDRXHxhaLA+4vBFw=
Subject key identifier: 4B:BC:F3:BD:50:B0:C8:C7:3B:57:D2:A0:37:DF:E9:DD:8A:12:CC:24
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1E27
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
Signing time: Tue 20 Oct 2026 15:14:18 +0000
ROA not before: Tue 20 Oct 2026 15:14:18 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 136974
IP address blocks: 210.2.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7719 (0x1e27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Oct 20 15:14:18 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ad7854a-1858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4c:95:48:0c:11:aa:9a:48:12:a2:79:aa:2d:
50:04:5a:85:23:8c:e9:a8:08:88:7f:81:16:06:27:
96:fd:1f:19:81:a2:02:20:39:e3:61:13:40:91:ab:
f5:0e:ec:7b:25:dd:f0:3c:bb:b4:68:de:af:d2:23:
31:26:6a:85:9c:14:d2:95:1c:4e:19:fb:1d:73:9d:
93:7f:6b:60:25:4c:a4:ea:16:97:cc:c1:9a:10:1d:
c9:f8:eb:58:a8:c6:8d:3d:55:eb:e8:c2:1f:b0:2d:
63:da:bd:e6:19:c2:72:fb:a3:e7:a4:32:46:85:f2:
a5:18:93:54:bb:90:f9:cc:77:9d:4a:f1:a1:4c:d8:
17:3d:54:77:50:4a:c2:0b:42:76:b3:06:a2:d1:a4:
34:9a:51:92:22:fe:85:ab:08:03:b1:16:db:4e:74:
f3:b8:0a:2b:a2:0f:0e:0e:ad:02:ec:46:c0:5a:90:
05:9a:fb:08:c5:ee:f7:28:a4:26:93:bb:ba:1d:c3:
92:27:b8:2e:87:99:32:8e:ba:43:79:20:c5:79:5d:
0f:73:f0:85:5a:1a:b9:71:ce:48:79:2f:5f:aa:c2:
02:3d:0f:32:12:75:4a:4a:72:9b:8b:e1:b8:c0:73:
d2:c2:18:7d:c4:2c:27:4c:9a:30:3f:a3:cb:50:c5:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BC:F3:BD:50:B0:C8:C7:3B:57:D2:A0:37:DF:E9:DD:8A:12:CC:24
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.2.136.0/24
Signature Algorithm: sha256WithRSAEncryption
48:db:64:8d:da:65:2d:04:38:e8:ff:d3:fe:40:51:28:6a:e6:
ba:a7:61:85:d2:9c:76:d9:c8:90:4f:f3:a6:40:2d:7c:f3:37:
90:e9:9c:75:4d:bc:b5:e5:cd:c2:82:5c:3d:11:15:6b:cd:5f:
78:bb:9f:5f:8d:44:f0:1c:a2:de:9f:b6:bd:dc:3e:0e:22:b0:
c3:6c:b6:89:ff:5f:aa:d1:ed:9e:e0:b0:f4:95:bd:ca:f1:d7:
4e:23:cc:4d:fa:89:26:71:f1:fb:8e:67:aa:a5:90:ae:9d:96:
d3:8d:9b:c5:2a:24:f7:55:e6:a4:70:77:2b:67:a1:b3:75:06:
e5:f4:6a:31:0c:7a:4f:8b:cb:fb:92:fc:13:1a:05:58:5a:c9:
e3:e5:1d:11:96:6a:f2:cd:40:40:36:f8:6a:b8:23:a0:4d:c2:
e5:78:34:4f:35:2c:83:49:c7:3c:a5:99:ec:be:1b:ac:5c:99:
6e:9a:93:cf:26:fc:60:22:42:a0:79:83:bd:e6:75:f5:b5:61:
b3:25:9d:fd:f6:0a:07:63:38:64:7a:6f:33:23:25:56:61:32:
94:97:70:79:64:7a:5e:07:c0:72:44:c5:f6:88:34:85:55:13:
bf:cc:69:82:6b:46:6c:ae:27:0a:ff:44:ce:61:1e:30:9e:bb:
4b:58:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:46 2026 by rpki-client