
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C163E3D6170C11F1997E579B043D8C67.roa
File: C163E3D6170C11F1997E579B043D8C67.roa (raw, json)
Hash identifier: +bMsiCqkQRPGuAsovwzV+Jwx1b0r6sOT2iZqA0KUI2o=
Subject key identifier: 14:D0:8F:07:AC:DE:6B:D3:30:9C:BD:84:7A:08:C2:4D:9A:D7:08:92
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 02AB
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C163E3D6170C11F1997E579B043D8C67.roa
Signing time: Tue 03 Mar 2026 14:24:58 +0000
ROA not before: Tue 03 Mar 2026 14:24:58 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 394695
IP address blocks: 65.254.64.0/19 maxlen: 19
66.116.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 01:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683 (0x2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: Mar 3 14:24:58 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a6ef3a-b2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:cc:d2:23:89:c0:a8:e9:46:f8:d7:61:e6:
08:f8:88:d2:6e:05:e0:b9:89:d0:ed:50:8f:01:f4:
81:da:61:af:90:44:a6:e4:6a:f1:23:86:53:2c:d2:
4d:ab:d9:85:53:65:98:36:8b:a5:4a:36:4d:e4:ad:
75:69:17:30:73:1c:88:6d:69:41:cb:0e:9c:7a:36:
99:36:84:82:99:1a:3f:92:df:50:d2:1b:c0:f7:a0:
91:0c:f5:b9:9d:5c:09:a4:07:23:f1:68:74:e5:66:
5d:c3:5d:8d:fc:59:4a:93:35:c7:8d:dc:31:36:73:
fd:e4:2c:a4:b5:94:43:2c:ab:fe:1f:8c:7b:14:d7:
5f:66:7b:41:d5:16:41:54:57:52:a6:aa:1c:ce:f6:
58:72:43:4c:a2:e3:36:a2:ef:00:85:5f:c2:f2:4a:
5e:00:d3:da:e8:8f:df:02:27:5b:74:8b:e9:e5:3e:
a2:8a:10:1a:5e:03:ba:a7:23:fb:bc:75:5f:a8:d7:
90:03:47:fc:65:97:66:fe:83:04:12:19:61:64:77:
06:f4:cd:16:1a:73:56:e8:d8:65:f7:b7:e1:1d:5c:
34:e4:c3:6a:65:23:13:5f:2c:94:c8:e4:a7:79:7d:
92:40:3c:6b:ef:83:f6:bf:38:c4:e7:32:fb:f3:94:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D0:8F:07:AC:DE:6B:D3:30:9C:BD:84:7A:08:C2:4D:9A:D7:08:92
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C163E3D6170C11F1997E579B043D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
65.254.64.0/19
66.116.128.0/17
Signature Algorithm: sha256WithRSAEncryption
85:cb:56:3e:86:1f:c0:3a:49:6d:ff:95:d4:2e:0f:a4:76:6b:
a0:f3:ba:d4:2c:e6:35:8c:1e:30:2e:ca:ba:28:ba:25:1a:db:
0c:11:bf:d6:82:1f:87:0f:96:35:f3:c8:3c:2a:7c:0f:2b:7d:
96:55:bb:8c:e7:a0:ae:87:e1:41:be:c8:cf:87:16:ce:26:13:
96:78:46:d5:43:07:9b:5c:5c:3d:68:ef:bf:97:81:00:35:17:
90:1c:e6:39:28:d4:fc:6a:cf:b9:c1:56:14:c5:1b:1b:bf:e5:
e0:0c:dd:b2:35:9e:b8:22:f5:fb:5a:b9:07:42:91:ac:b9:a1:
b8:90:6f:df:30:88:27:a5:81:ce:81:91:e4:59:29:3c:24:ba:
46:fd:a5:cc:f6:0a:4c:f6:d2:fd:9c:aa:1d:9c:77:21:a0:45:
72:10:bd:7d:d5:4c:ca:93:62:14:14:69:07:65:54:4f:2e:8f:
78:71:f2:fb:32:a6:16:01:00:59:d9:7e:51:47:6f:29:1f:d1:
f3:8d:bb:22:29:3a:21:f7:d9:ed:4b:50:14:c5:97:af:02:80:
64:5b:bb:e8:55:46:25:8c:6a:11:11:e3:fc:0b:78:79:72:25:
fc:71:04:5c:44:81:76:ab:be:54:2a:9c:10:94:fb:e1:8a:b6:
b2:d2:49:b2
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB
RTdEQ0M3NjEwHhcNMjYwMzAzMTQyNDU4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2ZWYzYS1iMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzkLM0iOJwKjpRvjXYeYI+IjSbgXguYnQ7VCPAfSB2mGvkESm5GrxI4ZTLNJN
q9mFU2WYNoulSjZN5K11aRcwcxyIbWlByw6cejaZNoSCmRo/kt9Q0hvA96CRDPW5
nVwJpAcj8Wh05WZdw12N/FlKkzXHjdwxNnP95CyktZRDLKv+H4x7FNdfZntB1RZB
VFdSpqoczvZYckNMouM2ou8AhV/C8kpeANPa6I/fAidbdIvp5T6iihAaXgO6pyP7
vHVfqNeQA0f8ZZdm/oMEEhlhZHcG9M0WGnNW6Nhl97fhHVw05MNqZSMTXyyUyOSn
eX2SQDxr74P2vzjE5zL785TENwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBTQjwes
3mvTMJy9hHoIwk2a1wiSMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG
QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvQzE2M0UzRDYx
NzBDMTFGMTk5N0U1NzlCMDQzRDhDNjcucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQFQf5AAwQHQnSAMA0GCSqGSIb3DQEBCwUAA4IBAQCFy1Y+hh/AOklt
/5XULg+kdmug87rULOY1jB4wLsq6KLolGtsMEb/Wgh+HD5Y188g8KnwPK32WVbuM
56Cuh+FBvsjPhxbOJhOWeEbVQwebXFw9aO+/l4EANReQHOY5KNT8as+5wVYUxRsb
v+XgDN2yNZ64IvX7WrkHQpGsuaG4kG/fMIgnpYHOgZHkWSk8JLpG/aXM9gpM9tL9
nKodnHchoEVyEL191UzKk2IUFGkHZVRPLo94cfL7MqYWAQBZ2X5RR28pH9Hzjbsi
KToh99ntS1AUxZevAoBkW7voVUYljGoREeP8C3h5ciX8cQRcRIF2q75UKpwQlPvh
iray0kmy
-----END CERTIFICATE-----
Generated at Sun Mar 22 14:52:32 2026 by rpki-client