
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa
File: 8D052914404911F0A4BD357BC4F9AE02.roa (raw, json)
Hash identifier: kWEbwqMhawzo5pvwyLI3t/LIgp3qWDc0SWaSisMHGJg=
Subject key identifier: 05:CC:46:50:B3:B4:02:B8:8B:66:33:3F:BF:1F:BF:1F:09:BE:CD:11
Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial: 0115
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa
Signing time: Tue 03 Nov 2026 07:53:20 +0000
ROA not before: Tue 03 Nov 2026 07:53:20 +0000
ROA not after: Mon 01 Mar 2027 00:00:00 +0000
asID: 151062
IP address blocks: 165.99.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 07:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Validity
Not Before: Nov 3 07:53:20 2026 GMT
Not After : Mar 1 00:00:00 2027 GMT
Subject: CN=6ae992f0-5474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:48:f5:69:5f:d0:ef:3f:3b:92:37:30:01:
42:6a:df:b0:a6:93:89:52:fb:6c:aa:7f:85:1f:8c:
04:fa:de:1a:64:b3:15:5a:f9:36:39:a0:26:11:df:
70:c5:3b:70:51:46:56:fe:cb:79:26:14:df:a8:f7:
a1:6e:ac:1d:5b:f4:f4:8a:4e:a9:6a:12:d2:75:6a:
80:db:4f:3b:a5:94:2e:09:16:77:ed:96:ef:22:1c:
5b:f3:7f:01:82:af:31:47:23:46:79:e3:10:11:39:
49:3b:a5:d7:62:65:fc:89:06:71:84:dc:e0:70:c6:
87:99:cd:48:63:f7:33:26:0b:e8:97:1b:b9:11:f3:
7d:43:4a:45:04:a2:5a:43:c7:1c:11:09:ca:27:b2:
c1:fa:c4:19:4c:f4:e2:48:22:4f:52:bd:e4:ac:4f:
46:7b:f2:47:d7:ca:22:17:d5:8f:7d:a0:4d:ab:b3:
64:5e:2b:70:ab:ea:aa:94:cb:9c:fe:46:35:ba:d5:
9a:13:93:0b:67:57:9d:76:ea:fd:dd:b0:26:52:fc:
b1:44:6d:0a:3e:33:97:b5:e6:07:65:b4:95:27:e8:
83:3b:24:3d:31:50:b4:92:37:6e:e1:e3:dd:69:0f:
ff:13:32:22:90:ce:40:15:91:fc:1a:ca:6f:07:7b:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:46:50:B3:B4:02:B8:8B:66:33:3F:BF:1F:BF:1F:09:BE:CD:11
X509v3 Authority Key Identifier:
keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:4b:03:b9:ab:3b:0a:60:60:d5:72:3e:84:9e:33:5c:cd:d3:
62:5b:0b:2c:cb:c4:86:f4:37:f0:bc:5b:9b:9d:ef:e8:28:3a:
6e:8c:0e:93:44:c2:9b:e8:89:0b:b3:17:90:e1:f4:6c:21:70:
b0:56:b9:bb:b8:39:94:49:52:3e:37:df:81:d2:07:91:27:a7:
5b:03:e2:f6:35:fd:ca:90:74:56:90:f7:e6:b3:2d:d3:bf:11:
d6:f8:0e:ab:ae:c8:89:e4:af:ee:20:4c:45:2d:af:eb:0f:e0:
2c:c7:cf:f4:e4:69:27:d6:af:4d:5f:76:35:02:d7:86:a7:42:
9d:bb:3f:bb:4a:84:90:94:a0:84:fd:f7:3e:5b:f5:b1:07:a4:
dc:cf:37:22:c8:6c:4f:5e:af:4e:53:b4:5c:a8:b8:cb:f9:d7:
c7:d3:b2:6c:57:30:b6:30:2d:87:bb:de:01:5b:1d:a8:09:d2:
2a:78:28:d7:57:98:2d:d8:0b:7e:0b:78:cc:2b:d8:9a:7d:60:
1d:d9:ab:47:79:6e:1c:0c:81:24:8b:af:ca:47:0f:d5:f0:a7:
c8:eb:5f:3a:8c:cb:b3:3c:60:48:57:94:aa:c3:33:61:8d:e5:
6d:30:76:33:78:53:10:91:be:6c:04:58:c7:3e:36:7b:88:b7:
b4:b0:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:39:12 2026 by rpki-client