
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/C6AA8F5A8B4911F197B84AD94811F970.roa
File: C6AA8F5A8B4911F197B84AD94811F970.roa (raw, json)
Hash identifier: 6f9AemjvikwIDiSVjQqJdYW43pPx37pnnb/gCf4hzkQ=
Subject key identifier: A3:AD:5A:3A:E6:85:48:4E:E5:47:1D:32:F2:2B:B2:A4:0C:DC:FF:FE
Certificate issuer: /CN=A9181292/serialNumber=194C38762FD9D794FADB8308F52B9C4F1983EA1C
Certificate serial: 0E
Authority key identifier: 19:4C:38:76:2F:D9:D7:94:FA:DB:83:08:F5:2B:9C:4F:19:83:EA:1C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GUw4di_Z15T624MI9SucTxmD6hw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/C6AA8F5A8B4911F197B84AD94811F970.roa
Signing time: Sun 16 Aug 2026 07:45:38 +0000
ROA not before: Sun 16 Aug 2026 07:45:38 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 134382
IP address blocks: 160.236.118.0/23 maxlen: 23
160.236.118.0/24 maxlen: 24
160.236.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.crl
rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GUw4di_Z15T624MI9SucTxmD6hw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181292, serialNumber=194C38762FD9D794FADB8308F52B9C4F1983EA1C
Validity
Not Before: Aug 16 07:45:38 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a816aa2-9fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:28:0b:5b:eb:c7:c9:9e:75:04:10:6f:c1:
11:5e:b5:51:43:d2:07:7d:c1:e3:7e:8b:fa:6e:65:
83:3a:20:39:48:f1:c5:6f:67:80:21:af:1d:f5:8c:
ea:98:70:52:d5:9c:a7:83:49:3d:96:ac:23:ed:9b:
82:a3:9c:cf:eb:61:67:72:72:cf:5c:3e:77:44:3d:
7b:97:e1:12:eb:bd:30:b7:59:a5:83:ef:af:6a:c5:
17:ce:1a:2d:6b:bd:ca:6b:90:26:e9:d5:9d:74:1e:
c4:1d:25:24:1b:80:d9:31:1b:4e:91:e0:d2:b2:e3:
eb:12:7e:ed:9b:6f:9e:71:0c:3b:1d:6b:47:e3:2a:
fd:84:9f:bf:31:15:16:21:fb:e4:1d:d8:cd:a1:9c:
d3:9b:f9:98:dc:ef:fb:e9:7a:44:8a:3c:ed:60:a4:
ae:e3:a9:6d:cf:fb:83:aa:56:76:c0:df:75:af:c1:
a5:28:97:81:ae:b3:39:d6:e9:71:a7:fd:fb:45:ed:
79:a6:49:54:60:1d:04:44:f5:42:fc:f2:6b:b3:6f:
e5:a2:42:42:46:f0:2e:03:7f:ce:3b:6f:0f:bb:72:
f3:81:38:21:e6:68:32:84:ac:93:d6:a3:bb:5c:1a:
d3:26:d2:12:37:68:fe:dd:35:4b:ce:29:10:21:2d:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:5A:3A:E6:85:48:4E:E5:47:1D:32:F2:2B:B2:A4:0C:DC:FF:FE
X509v3 Authority Key Identifier:
keyid:19:4C:38:76:2F:D9:D7:94:FA:DB:83:08:F5:2B:9C:4F:19:83:EA:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GUw4di_Z15T624MI9SucTxmD6hw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/C6AA8F5A8B4911F197B84AD94811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.118.0/23
Signature Algorithm: sha256WithRSAEncryption
23:5b:4d:09:c4:b9:a3:a1:b1:e4:b6:71:9e:0d:5c:2b:87:9d:
c9:ce:76:16:6d:26:85:e2:0c:fa:43:29:b9:b3:32:b5:04:51:
10:55:ab:a5:db:15:b3:8b:9e:03:ad:ed:ae:4e:d5:cf:43:79:
19:f7:e9:57:87:49:3f:c2:ac:db:8e:86:cf:5b:a3:ed:0c:24:
c9:a1:ca:b6:4b:7f:73:0a:3a:e7:60:14:f5:95:23:1d:7d:d1:
c4:10:66:bd:da:b8:37:d7:60:a6:12:52:2c:4f:00:9c:7e:b1:
e0:ab:15:fc:8b:9f:40:d2:c7:41:a1:42:b6:78:68:a9:29:54:
83:60:3b:d8:8f:33:bb:4f:2c:73:bd:ba:9c:6f:78:a6:7c:0e:
3f:1e:e8:46:91:bc:0e:61:39:33:3a:6d:cc:e6:95:c6:3b:c5:
c2:39:47:64:5a:44:3f:7f:ec:77:7b:6a:e7:09:c7:1b:2f:ec:
90:ca:3e:b5:7b:3a:9a:48:b4:af:0b:03:74:23:83:58:1a:f1:
e1:84:c3:7c:30:f8:d8:4d:90:34:35:03:f5:ea:ff:9c:4d:d8:
73:e4:4b:21:ba:a8:be:52:6b:4c:a6:75:27:fb:b5:56:3c:14:
88:c5:44:b1:75:9d:a3:76:ec:91:b4:2d:00:38:ab:4a:20:64:
d5:ec:e6:bd
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTI5MjExMC8GA1UEBRMoMTk0QzM4NzYyRkQ5RDc5NEZBREI4MzA4RjUyQjlDNEYx
OTgzRUExQzAeFw0yNjA4MTYwNzQ1MzhaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhODE2YWEyLTlmYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCcKSgLW+vHyZ51BBBvwRFetVFD0gd9weN+i/puZYM6IDlI8cVvZ4Ahrx31jOqY
cFLVnKeDST2WrCPtm4KjnM/rYWdycs9cPndEPXuX4RLrvTC3WaWD769qxRfOGi1r
vcprkCbp1Z10HsQdJSQbgNkxG06R4NKy4+sSfu2bb55xDDsda0fjKv2En78xFRYh
++Qd2M2hnNOb+Zjc7/vpekSKPO1gpK7jqW3P+4OqVnbA33WvwaUol4GusznW6XGn
/ftF7XmmSVRgHQRE9UL88muzb+WiQkJG8C4Df847bw+7cvOBOCHmaDKErJPWo7tc
GtMm0hI3aP7dNUvOKRAhLaVbAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUo61aOuaF
SE7lRx0y8iuypAzc//4wHwYDVR0jBBgwFoAUGUw4di/Z15T624MI9SucTxmD6hww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMjkyLzQ4MkM5MDM2OEI0
NjExRjE5MkU3QTY0OTQ2MTFGOTcwL0dVdzRkaV9aMTVUNjI0TUk5U3VjVHhtRDZo
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR1V3NGRpX1oxNVQ2MjRNSTlTdWNUeG1ENmh3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTI5Mi80ODJDOTAzNjhCNDYxMUYxOTJFN0E2NDk0NjExRjk3MC9DNkFBOEY1QThC
NDkxMUYxOTdCODRBRDk0ODExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGg7HYwDQYJKoZIhvcNAQELBQADggEBACNbTQnEuaOhseS2cZ4NXCuH
ncnOdhZtJoXiDPpDKbmzMrUEURBVq6XbFbOLngOt7a5O1c9DeRn36VeHST/CrNuO
hs9bo+0MJMmhyrZLf3MKOudgFPWVIx190cQQZr3auDfXYKYSUixPAJx+seCrFfyL
n0DSx0GhQrZ4aKkpVINgO9iPM7tPLHO9upxveKZ8Dj8e6EaRvA5hOTM6bczmlcY7
xcI5R2RaRD9/7Hd7aucJxxsv7JDKPrV7OppItK8LA3Qjg1ga8eGEw3ww+NhNkDQ1
A/Xq/5xN2HPkSyG6qL5Sa0ymdSf7tVY8FIjFRLF1naN27JG0LQA4q0ogZNXs5r0=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:38 2026 by rpki-client