
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7D164B822A2811F0819D8C13C4F9AE02.roa
File: 7D164B822A2811F0819D8C13C4F9AE02.roa (raw, json)
Hash identifier: dfXE23weJbeF3Q0ekQ196ZT9XngXBchYp3WwEpVjFic=
Subject key identifier: 23:8B:5D:AE:D6:6A:24:46:1F:98:15:C4:76:97:A5:53:3A:DB:27:15
Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial: 0363
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7D164B822A2811F0819D8C13C4F9AE02.roa
Signing time: Sat 15 Aug 2026 01:49:34 +0000
ROA not before: Sat 15 Aug 2026 01:49:34 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 16509
IP address blocks: 203.4.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867 (0x363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Validity
Not Before: Aug 15 01:49:34 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7fc5ae-ffba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:18:4e:f0:5c:e1:41:f9:58:f9:fe:16:d8:
47:61:39:ad:79:65:81:5e:9f:40:d7:f7:a5:cc:98:
22:54:da:8e:e5:43:72:26:4f:6e:eb:72:9a:9e:88:
43:1e:ed:fc:39:ee:58:21:63:8d:3c:45:4a:ba:62:
71:8d:61:b3:47:66:d0:ca:94:1e:5b:b0:67:e9:45:
a8:cc:98:08:b5:a0:82:54:de:41:1f:c5:fd:ee:7c:
81:e0:3a:2a:ce:f0:54:3e:6f:23:7a:b9:01:01:20:
ea:a0:33:4f:32:98:4f:69:9d:c4:d2:9d:10:19:f5:
1b:4d:8f:36:d1:81:b0:1e:fb:b3:ca:57:7c:6f:53:
07:2c:1c:97:46:ac:8b:00:c4:0d:d3:97:7c:47:e8:
3b:8f:0e:96:21:0a:f6:1b:15:1b:a0:68:54:b2:3a:
70:a4:bc:8d:86:ae:89:70:86:24:71:8c:3e:d1:18:
7b:1f:ce:02:bf:e4:fd:f8:7b:ef:fa:c5:9f:8b:7b:
e9:be:c0:82:21:ce:3e:18:16:0d:22:92:3f:d9:bc:
ad:b3:21:da:ad:30:5d:90:db:fa:80:16:72:af:b8:
ba:8c:7c:75:b3:16:7e:6b:ba:da:55:98:50:c0:a1:
e6:17:01:e8:90:80:aa:d7:46:d4:c8:97:c7:c1:e1:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:5D:AE:D6:6A:24:46:1F:98:15:C4:76:97:A5:53:3A:DB:27:15
X509v3 Authority Key Identifier:
keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7D164B822A2811F0819D8C13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.4.146.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b2:d6:87:9d:f0:70:07:e0:e7:91:a0:df:48:05:66:f5:1c:
8b:43:9a:a7:9b:51:39:28:17:91:f5:88:dc:dc:f9:fb:90:94:
8c:c0:a6:06:a3:41:f1:ae:f9:16:33:bf:89:69:92:b8:d1:f7:
b3:b5:64:69:a5:4b:d2:40:ca:f2:13:b4:39:25:c7:88:88:45:
07:5b:be:30:e7:ee:1b:43:d8:d7:72:13:e6:12:58:af:d3:b3:
f7:5c:e3:cc:37:bb:41:aa:42:9e:01:f1:8e:2c:d4:c1:5f:74:
9a:85:04:02:f1:b9:e3:41:61:f3:99:f9:55:f2:02:b2:94:fc:
0c:db:23:4e:7f:33:32:21:52:ec:8f:02:99:76:e7:3f:63:d4:
0e:ac:3c:4f:52:5a:03:f0:e1:fa:b5:90:be:c6:10:f2:a6:6b:
c4:64:03:01:0f:ae:2a:79:3a:0b:1a:d7:ae:0e:ac:73:36:69:
7c:59:f7:b8:0d:30:1c:ec:2c:1d:bb:06:bb:bb:3f:c5:fd:a8:
8e:5b:4d:3d:5b:79:da:84:3d:1d:98:e6:92:55:48:24:2e:82:
bc:28:ab:41:8a:8a:2e:39:b8:a7:50:be:42:cd:39:07:cb:82:
be:63:b3:7b:b5:b2:71:87:58:7e:cf:73:9f:1f:fc:50:3b:c1:
66:6b:03:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:12:42 2026 by rpki-client