
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa
File: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (raw, json)
Hash identifier: XVc+aVqsZrUvoSa/+ZFOV2eizsxNMGesLkH68+TxEOA=
Subject key identifier: 35:81:E8:74:02:C4:0F:48:AD:A2:B7:77:1B:A6:41:E4:C9:38:06:C5
Certificate issuer: /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Certificate serial: E9
Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa
Signing time: Thu 01 Oct 2026 07:55:00 +0000
ROA not before: Thu 01 Oct 2026 07:55:00 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135310
IP address blocks: 165.101.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 07:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Validity
Not Before: Oct 1 07:55:00 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6abe11d4-e02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:fc:bc:8c:77:bf:b7:58:a1:11:b7:d4:2e:
3c:38:23:ea:90:53:ae:3a:59:60:38:60:68:86:44:
7e:ae:2e:d8:09:ec:18:04:1b:87:93:6d:23:f7:8f:
d5:01:2b:77:74:4e:f6:4e:07:cf:b7:5b:9c:b5:3d:
c7:5d:71:d9:28:42:28:0c:86:26:dc:34:41:2c:32:
82:3b:80:8b:03:51:39:99:cd:bb:80:f0:e9:05:fa:
f5:d4:74:56:ae:a6:74:97:f5:7d:07:3b:b7:92:1b:
76:08:ed:29:c2:ac:ec:99:00:15:2f:6e:9a:5f:1c:
ca:46:d9:ec:ea:53:81:ed:b5:7d:4a:f6:e5:2e:85:
9f:1a:13:d6:7c:4b:d3:cb:08:9e:ce:93:9d:a0:4c:
b3:a5:35:9a:6d:da:06:5a:26:67:58:6a:f9:57:94:
fb:6e:f3:3f:79:dd:46:6c:3b:61:f1:76:a6:6c:35:
4e:69:b3:06:35:bd:80:96:77:3a:b2:15:dc:fa:85:
c7:52:b4:11:f7:ad:fe:ed:2d:de:89:73:41:b5:d4:
d7:ab:68:2c:1c:6a:24:49:68:2f:11:e7:ce:e7:da:
bc:28:c6:cd:d7:36:a3:d1:53:f0:b9:57:ee:7e:db:
26:f8:c0:65:5b:20:d7:00:e1:96:9c:f1:b0:33:cb:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:81:E8:74:02:C4:0F:48:AD:A2:B7:77:1B:A6:41:E4:C9:38:06:C5
X509v3 Authority Key Identifier:
keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.176.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:4e:80:69:b8:dc:fd:61:53:06:06:a7:e9:f1:9e:d5:95:ab:
74:4a:96:dd:81:64:d6:2d:b3:a7:f0:e5:5f:27:3d:aa:5d:1d:
27:9b:e1:36:e0:e9:4b:b8:89:01:71:e1:ec:0b:65:39:c2:70:
75:c7:b1:26:bd:fd:a9:dc:8b:e2:c7:20:84:1f:6f:82:8e:dc:
6f:39:2b:ce:2d:43:81:0e:e0:8a:45:cc:b2:59:22:97:b3:58:
16:d6:8b:38:32:40:9c:e0:fb:b3:36:81:73:a4:7a:8f:4f:e5:
4b:90:ab:e2:62:33:4c:13:9e:00:08:b4:f1:e8:8a:f9:4c:71:
a7:52:07:3e:57:ca:8e:75:3a:0f:97:b7:45:ea:22:06:f9:96:
c6:62:65:15:e1:6a:29:cb:74:7e:1d:6e:49:35:a9:ee:ce:27:
36:a9:7b:84:5b:9d:c0:a2:05:35:0b:76:0d:6b:e3:5e:66:fc:
14:c5:ce:a5:cb:fc:df:82:06:8d:79:98:31:88:88:c5:b8:20:
81:c3:d2:df:b3:eb:64:f5:b1:49:61:67:83:f2:fb:07:f9:58:
ae:fa:61:dc:4b:56:b0:d7:54:81:bb:99:fa:3b:ce:5f:a2:b0:
e8:b8:2e:c1:fe:c2:1d:d5:50:99:87:23:60:66:2b:ce:7b:4d:
e0:ce:68:54
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM0NzMxMTAvBgNVBAUTKDgyNkFBODNCQkUwMjQwRDEzOTA2QUJBQjQ2NDMxN0U5
RTdBQjcwRUYwHhcNMjYxMDAxMDc1NTAwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJlMTFkNC1lMDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Iv8vIx3v7dYoRG31C48OCPqkFOuOllgOGBohkR+ri7YCewYBBuHk20j94/V
ASt3dE72TgfPt1uctT3HXXHZKEIoDIYm3DRBLDKCO4CLA1E5mc27gPDpBfr11HRW
rqZ0l/V9Bzu3kht2CO0pwqzsmQAVL26aXxzKRtns6lOB7bV9SvblLoWfGhPWfEvT
ywiezpOdoEyzpTWabdoGWiZnWGr5V5T7bvM/ed1GbDth8XambDVOabMGNb2Alnc6
shXc+oXHUrQR963+7S3eiXNBtdTXq2gsHGokSWgvEefO59q8KMbN1zaj0VPwuVfu
ftsm+MBlWyDXAOGWnPGwM8vs5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDWB6HQC
xA9IraK3dxumQeTJOAbFMB8GA1UdIwQYMBaAFIJqqDu+AkDROQarq0ZDF+nnq3Dv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzQ3My9GNTdEMjMzMDVE
REYxMUYwQTVCRkQ2NkZDNEY5QUUwMi9nbXFvTzc0Q1FORTVCcXVyUmtNWDZlZXJj
TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dtcW9PNzRDUU5FNUJxdXJSa01YNmVlcmNPOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM0NzMvRjU3RDIzMzA1RERGMTFGMEE1QkZENjZGQzRGOUFFMDIvREE5OEJBNEM1
REUwMTFGMEIxQ0Q0Qzc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWWwMA0GCSqGSIb3DQEBCwUAA4IBAQBdToBpuNz9YVMGBqfp8Z7V
lat0SpbdgWTWLbOn8OVfJz2qXR0nm+E24OlLuIkBceHsC2U5wnB1x7Emvf2p3Ivi
xyCEH2+CjtxvOSvOLUOBDuCKRcyyWSKXs1gW1os4MkCc4PuzNoFzpHqPT+VLkKvi
YjNME54ACLTx6Ir5THGnUgc+V8qOdToPl7dF6iIG+ZbGYmUV4Wopy3R+HW5JNanu
zic2qXuEW53AogU1C3YNa+NeZvwUxc6ly/zfggaNeZgxiIjFuCCBw9Lfs+tk9bFJ
YWeD8vsH+Viu+mHcS1aw11SBu5n6O85forDouC7B/sId1VCZhyNgZivOe03gzmhU
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:03:09 2026 by rpki-client