
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa
File: 8D052914404911F0A4BD357BC4F9AE02.roa (raw, json)
Hash identifier: MvcG4U91ksg21bFQHUycofyC3j8v7/vCU+cxxJzP/x8=
Subject key identifier: 48:05:D9:ED:EB:EC:23:C0:D2:E1:40:D4:50:18:C5:87:E4:29:BA:0C
Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial: E1
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa
Signing time: Sat 01 Aug 2026 08:57:28 +0000
ROA not before: Sat 01 Aug 2026 08:57:28 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 151062
IP address blocks: 165.99.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Validity
Not Before: Aug 1 08:57:28 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a6db4f8-b70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:6c:41:d8:b0:de:26:0b:8f:a7:40:98:c1:
66:18:fc:00:70:f3:cb:0d:d8:c8:32:54:f1:21:2c:
c4:c1:8b:79:4c:b8:32:71:68:49:e3:9e:fa:f2:94:
c5:7d:b3:f1:a3:ce:eb:9f:91:00:f3:ea:20:4b:b9:
1a:59:a9:e8:e3:42:80:82:5f:ec:15:e9:41:24:f4:
25:6d:ce:7f:33:bf:09:8d:68:99:81:e9:66:e8:13:
aa:53:8a:30:c1:be:35:84:bb:da:a2:3e:28:49:62:
59:5c:76:e6:ad:b6:2e:0e:ef:5f:43:9d:0c:0d:53:
16:02:ce:d0:4c:6d:d9:00:3c:70:92:e7:33:4b:ce:
b7:bb:12:c1:97:7e:5d:3e:e2:aa:e8:12:92:40:d3:
f0:64:3c:32:db:06:92:d7:f2:1e:88:c7:a1:13:fe:
ed:a0:88:6f:cb:4b:16:5a:8d:35:35:f3:dd:e8:00:
c5:85:76:88:9d:c6:ac:d8:8d:85:12:56:23:bd:e4:
a9:92:5a:05:57:10:b9:5a:41:b0:b9:14:53:ec:14:
75:d6:5a:1c:88:dc:37:9a:52:90:5c:35:a3:10:e2:
dd:ee:13:9d:91:5f:b0:e3:4a:fc:d4:15:50:7a:cd:
c8:22:9b:ed:1f:68:6e:4f:99:f3:93:b4:4b:d1:cf:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:05:D9:ED:EB:EC:23:C0:D2:E1:40:D4:50:18:C5:87:E4:29:BA:0C
X509v3 Authority Key Identifier:
keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.188.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ab:55:4f:0e:a5:e2:0b:6d:5b:64:24:e7:ae:9b:85:73:e1:
d8:9b:69:99:4f:19:b5:be:a1:22:53:df:3a:e4:49:ae:87:09:
3e:8f:9c:64:4f:d2:7e:21:ee:26:65:bf:0e:25:81:b4:96:6d:
99:fa:69:aa:40:19:1f:07:90:3c:45:43:6e:ff:29:da:8b:36:
cc:48:ac:49:86:63:ab:f9:c0:3a:93:13:e7:7d:5d:ff:13:f2:
50:6f:37:b9:78:4d:a0:6e:89:bf:9a:f4:0a:c5:79:69:9e:49:
1c:36:d9:97:7f:44:59:4d:66:20:f0:a7:55:5b:3d:7c:f2:b5:
61:d4:23:37:bf:ec:a3:95:c9:e4:db:03:3a:ba:bc:a8:06:1b:
bc:d7:af:30:ce:43:f0:3a:dd:fa:10:ef:ad:5a:30:89:3b:f4:
18:0b:3c:74:0c:45:05:5d:a3:69:52:ae:2c:2b:af:09:fe:ae:
1e:24:71:e5:40:78:17:0c:cd:62:d1:8e:63:59:3d:c3:df:20:
b4:c1:0e:ca:01:15:c8:31:09:fa:c2:1b:f8:c3:bd:d3:e8:60:
01:e2:6a:fa:1b:35:be:bf:e9:0f:e3:56:f3:96:b3:0e:4e:6c:
19:74:f6:a7:0b:0d:d1:a8:71:93:78:fc:d2:e9:90:f2:57:69:
e6:28:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:15 2026 by rpki-client