
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa
File: E206DF40E79011E699B81D0FC4F9AE02.roa (raw, json)
Hash identifier: P1JfODy9ggFysOgtu/OU47FjHyLvrjYoVlv3KO8vNIQ=
Subject key identifier: 19:33:AB:4F:DA:63:E7:82:AA:AE:5E:C4:74:36:A4:E2:A5:10:BF:12
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1E31
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa
Signing time: Tue 20 Oct 2026 15:14:38 +0000
ROA not before: Tue 20 Oct 2026 15:14:38 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 9387
IP address blocks: 119.73.14.0/24 maxlen: 24
119.73.15.0/24 maxlen: 24
119.73.32.0/24 maxlen: 24
119.73.33.0/24 maxlen: 24
119.73.34.0/24 maxlen: 24
119.73.35.0/24 maxlen: 24
119.73.36.0/24 maxlen: 24
119.73.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7729 (0x1e31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Oct 20 15:14:38 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ad7855e-fefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3d:6a:cc:f2:2f:af:43:96:88:bf:75:1f:2e:
9c:3d:eb:dc:b1:1b:d4:c4:15:72:ef:b5:4c:40:73:
ef:66:b6:96:6f:e7:3a:1c:56:a4:41:cc:d0:0b:5f:
92:c3:77:91:72:d6:20:1e:86:a0:17:bc:83:a1:a2:
b9:d5:15:08:a3:fb:d6:12:d0:ed:41:3c:9b:59:8e:
c1:b3:a6:93:2e:f8:97:a3:02:93:99:65:a0:cf:4b:
53:60:72:8a:7f:dc:e2:8d:0d:45:50:e9:e3:6a:42:
b1:20:54:bc:4b:fb:75:97:8a:37:d0:cf:10:85:f5:
92:22:3c:72:37:c3:52:b9:3c:a0:ea:ed:26:2c:24:
3c:f8:1f:3b:87:a4:56:3c:4f:c5:b4:32:a8:aa:a1:
ab:e5:5b:71:bb:ef:b3:58:eb:82:c1:71:74:b9:45:
d7:a8:79:69:eb:09:1f:8e:73:0f:0c:e0:a1:d4:f5:
76:c2:f0:a7:ab:73:d2:cc:2d:23:a6:8a:12:47:6f:
ef:c7:eb:22:77:cb:e6:53:5e:65:b6:76:dd:fe:1c:
c2:ce:35:0d:40:f2:6d:e0:26:48:9a:54:e2:c6:3b:
06:43:4b:fd:13:dd:18:1f:bb:40:94:e7:62:4e:5d:
85:3c:a5:2f:95:09:2f:b9:5d:87:06:8f:04:52:2c:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:33:AB:4F:DA:63:E7:82:AA:AE:5E:C4:74:36:A4:E2:A5:10:BF:12
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.73.14.0/23
119.73.32.0-119.73.37.255
Signature Algorithm: sha256WithRSAEncryption
47:06:d0:60:f8:38:8c:86:85:11:04:0d:94:75:c8:5a:72:1d:
a4:34:d4:a1:37:97:c5:56:8d:41:ab:33:4e:b6:43:c5:ae:4b:
33:de:7e:4b:2f:1e:ba:94:92:19:30:be:70:af:14:b2:b7:32:
1f:35:02:51:a6:19:e7:b3:ec:ac:12:54:50:65:45:2f:62:58:
38:c5:c6:df:41:c7:99:e4:5e:21:ed:54:59:54:44:f6:b9:9a:
e6:4b:0e:e6:2d:8f:d6:bc:21:d6:c3:69:0a:a6:04:5d:a4:ce:
bb:da:22:ac:5d:92:1b:3b:ed:27:45:90:8a:ae:34:9e:4c:7f:
e1:3b:48:84:1d:b0:0e:c1:34:f8:67:6d:05:b5:bc:4e:bb:06:
c4:71:cb:47:4f:71:0f:3c:57:c3:9f:bb:2c:86:96:26:c6:c1:
86:df:3b:64:11:a9:26:6d:0d:a6:b1:d4:67:2f:34:bf:a4:e0:
a4:cf:62:de:d7:06:95:19:87:0b:4a:9a:8e:85:5e:26:19:3a:
b1:ae:67:1c:7d:fd:38:8f:56:7e:9a:fe:99:b1:17:c0:46:62:
95:46:ee:34:2a:18:af:13:5b:71:ef:aa:87:9c:bb:24:cf:be:
33:ba:f3:3c:b2:96:f5:15:85:c1:38:49:85:a4:94:25:91:7d:
32:85:36:ed
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICHjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4
NkE5QjNGRDgwHhcNMjYxMDIwMTUxNDM4WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQ3ODU1ZS1mZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5z1qzPIvr0OWiL91Hy6cPevcsRvUxBVy77VMQHPvZraWb+c6HFakQczQC1+S
w3eRctYgHoagF7yDoaK51RUIo/vWEtDtQTybWY7Bs6aTLviXowKTmWWgz0tTYHKK
f9zijQ1FUOnjakKxIFS8S/t1l4o30M8QhfWSIjxyN8NSuTyg6u0mLCQ8+B87h6RW
PE/FtDKoqqGr5Vtxu++zWOuCwXF0uUXXqHlp6wkfjnMPDOCh1PV2wvCnq3PSzC0j
pooSR2/vx+sid8vmU15ltnbd/hzCzjUNQPJt4CZImlTixjsGQ0v9E90YH7tAlOdi
Tl2FPKUvlQkvuV2HBo8EUiyyrwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFBkzq0/a
Y+eCqq5exHQ2pOKlEL8SMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE
ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvRTIwNkRGNDBF
NzkwMTFFNjk5QjgxRDBGQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQBd0kOMAwDBAV3SSADBAF3SSQwDQYJKoZIhvcNAQELBQADggEBAEcG
0GD4OIyGhREEDZR1yFpyHaQ01KE3l8VWjUGrM062Q8WuSzPefksvHrqUkhkwvnCv
FLK3Mh81AlGmGeez7KwSVFBlRS9iWDjFxt9Bx5nkXiHtVFlURPa5muZLDuYtj9a8
IdbDaQqmBF2kzrvaIqxdkhs77SdFkIquNJ5Mf+E7SIQdsA7BNPhnbQW1vE67BsRx
y0dPcQ88V8OfuyyGlibGwYbfO2QRqSZtDaax1GcvNL+k4KTPYt7XBpUZhwtKmo6F
XiYZOrGuZxx9/TiPVn6a/pmxF8BGYpVG7jQqGK8TW3HvqoecuyTPvjO68zyylvUV
hcE4SYWklCWRfTKFNu0=
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:24:29 2026 by rpki-client