
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/DDFBF53064F811F18CD9A2CE7647A888.roa
File: DDFBF53064F811F18CD9A2CE7647A888.roa (raw, json)
Hash identifier: rnHtHer8GYacGwWfe6Ay6DpWc4MNGCoinmNNStme7Mo=
Subject key identifier: 47:5D:5E:7E:EB:11:FA:D8:40:62:DF:91:9F:92:E4:93:31:08:82:CF
Certificate issuer: /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D
Certificate serial: 20
Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/DDFBF53064F811F18CD9A2CE7647A888.roa
Signing time: Sat 27 Jun 2026 14:56:47 +0000
ROA not before: Sat 27 Jun 2026 14:56:47 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 142529
IP address blocks: 162.4.132.0/23 maxlen: 23
162.4.132.0/24 maxlen: 24
162.4.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl
rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D
Validity
Not Before: Jun 27 14:56:47 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3fe4af-b23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:09:75:d7:fd:10:7b:d4:af:cc:af:02:af:
aa:b9:51:57:5c:e0:80:ca:14:05:1d:58:a8:49:22:
fc:39:58:44:8b:80:b5:fa:c1:95:b8:3a:33:a3:30:
d2:40:b0:fb:e0:84:53:e9:42:64:c5:b7:17:23:cc:
ef:4a:03:46:37:df:82:c2:0f:8b:29:88:6c:80:7e:
59:98:5b:84:fb:fb:8a:64:17:f6:93:de:7d:10:fa:
b7:e4:a1:26:77:0a:d8:53:8a:cc:ef:e1:1c:96:15:
3f:67:4e:10:5e:ee:55:e8:48:2c:8e:98:1e:2c:64:
ef:a9:67:47:12:03:28:35:17:c2:93:9c:e2:cc:93:
c3:02:57:5c:82:c9:a8:52:ce:99:c5:5a:b9:82:1c:
a0:d4:37:f6:ed:9b:cd:bc:5e:02:24:14:c7:de:ba:
47:dc:e3:86:0a:5b:d0:e3:81:2a:4b:d2:8f:94:65:
d0:6b:aa:5f:4c:0b:79:09:09:18:96:5d:7b:98:c1:
bd:d0:e7:1e:7c:8a:f1:d9:c0:86:c8:b8:33:31:59:
f0:81:8b:95:52:74:79:45:30:2d:e6:1f:10:d7:61:
82:cb:6e:c8:ea:66:9a:d3:d1:08:22:5e:3a:54:79:
e9:52:ce:35:92:b5:9b:9f:3c:64:9b:d3:4a:24:13:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5D:5E:7E:EB:11:FA:D8:40:62:DF:91:9F:92:E4:93:31:08:82:CF
X509v3 Authority Key Identifier:
keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/DDFBF53064F811F18CD9A2CE7647A888.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.132.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:5c:a2:94:dd:53:24:31:6d:c4:2f:8e:1c:c8:65:a7:4b:f2:
6f:f0:d2:47:f1:a6:16:39:6d:2e:54:83:d8:c9:ff:14:9c:ee:
f1:b5:e9:73:a7:9a:80:4e:20:0d:b4:e7:90:53:14:da:dc:1f:
ae:37:b4:6f:97:be:f4:40:fa:f2:b2:f7:8d:dc:5e:79:52:10:
b4:9c:b0:cc:8a:27:07:7c:c6:04:63:17:90:ad:95:e3:61:e0:
8d:35:bd:0b:4c:16:61:9b:00:21:b4:7a:42:fe:93:7c:02:12:
08:ff:df:db:16:f4:ab:65:a2:af:15:84:77:c7:a4:dd:80:a6:
74:25:2d:dc:69:82:4d:38:56:21:10:f4:b7:fc:d0:af:1f:d3:
bf:45:2e:3a:9c:40:83:4d:57:a3:82:3d:6f:de:24:45:aa:b2:
05:1c:9f:16:fb:f5:72:85:c0:60:a0:ee:69:2b:98:e0:6a:dc:
eb:a9:5a:42:45:72:eb:59:4c:b6:bd:85:a5:bb:c2:21:cb:ff:
95:00:f7:3e:72:f5:d6:ac:b5:91:dd:0d:69:72:af:6d:0a:83:
eb:16:8f:1c:85:de:45:d5:8b:c5:7b:68:27:a6:44:0c:18:11:
72:22:d7:4d:0b:d3:15:6c:11:45:d1:f5:e9:32:69:68:f9:57:
0e:47:50:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 06:23:38 2026 by rpki-client