
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/D737BB744B4111ECACAF3B6FC4F9AE02.roa
File: D737BB744B4111ECACAF3B6FC4F9AE02.roa (raw, json)
Hash identifier: oTkyMx+qLAKRpEl4XRW6uGf8eqQTbCo0c4vnp7v/6xY=
Subject key identifier: A3:E4:AE:7D:30:4A:87:D8:5D:B4:95:48:E7:51:5B:2E:6B:DF:F0:08
Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Certificate serial: 0685
Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/D737BB744B4111ECACAF3B6FC4F9AE02.roa
Signing time: Tue 18 Aug 2026 23:43:42 +0000
ROA not before: Tue 18 Aug 2026 23:43:42 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 55521
IP address blocks: 180.92.216.0/21 maxlen: 21
180.92.216.0/24 maxlen: 24
180.92.217.0/24 maxlen: 24
180.92.218.0/24 maxlen: 24
180.92.219.0/24 maxlen: 24
180.92.220.0/24 maxlen: 24
180.92.221.0/24 maxlen: 24
180.92.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl
rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1669 (0x685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Validity
Not Before: Aug 18 23:43:42 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a84ee2e-54eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:34:9b:de:cf:df:5d:f5:84:02:73:ce:22:
01:b2:a9:b4:99:30:9b:ec:d0:62:b5:9a:38:1a:da:
5f:3c:3c:36:d4:ae:09:5c:85:99:7e:46:16:79:a1:
9b:08:45:cc:4a:2f:cf:ff:e7:95:07:0b:d6:b6:c3:
f3:42:fa:41:9b:3d:de:7f:41:e6:5c:4a:92:6d:e1:
65:7a:4e:88:68:fa:52:3a:47:e4:83:19:07:a3:2b:
ef:b7:d6:63:d9:e2:d6:99:4e:72:4b:27:ee:aa:54:
c4:f9:26:f7:1d:7c:fa:a2:b3:75:72:85:53:a5:3b:
53:14:db:6e:91:90:0a:4f:4f:c3:43:77:24:81:44:
01:8d:73:e8:b2:fd:71:7a:de:a4:90:b6:0a:90:d0:
07:ca:ee:db:c3:da:05:5a:65:aa:55:e9:65:6e:0e:
82:6f:6b:c5:16:5d:6c:d7:53:97:47:ac:85:db:86:
91:1a:fc:cb:77:66:f3:d6:3b:7c:74:e0:c4:17:ae:
c2:36:25:90:2b:3a:f4:9f:a2:1f:0a:f8:de:0a:e3:
06:e8:d1:c3:26:97:49:a2:51:af:d2:a9:c5:f6:84:
c9:d1:f4:da:01:c1:16:39:bd:ff:36:db:dd:a9:d8:
ae:b0:4b:f9:a6:0c:ac:a8:14:25:26:12:74:e9:bf:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E4:AE:7D:30:4A:87:D8:5D:B4:95:48:E7:51:5B:2E:6B:DF:F0:08
X509v3 Authority Key Identifier:
keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/D737BB744B4111ECACAF3B6FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
180.92.216.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:7f:6a:9b:88:8c:95:3b:da:2b:2f:a2:27:aa:7e:b9:96:95:
5a:15:44:9c:e4:3f:1e:8c:6c:93:77:94:86:37:29:9d:20:be:
f5:e0:35:a7:93:5f:6f:5e:68:59:e6:7b:9d:0f:11:92:67:db:
2b:d7:d4:ed:fd:ef:11:66:c7:8d:f7:91:a2:fa:79:03:84:5a:
7f:f0:55:52:55:8f:35:11:ad:cf:1d:16:5c:d3:cd:15:cc:e6:
4e:6f:85:57:38:be:14:8c:4e:7d:50:04:20:be:c1:94:2c:e3:
69:f0:e3:c4:6a:16:3b:db:85:ef:dc:74:6b:54:e7:a7:cd:a7:
4c:df:3d:52:98:37:4f:32:79:9b:a2:76:20:8e:ab:27:4c:1c:
00:3d:7a:98:62:3a:21:63:b8:e0:ca:d6:ec:d8:18:e0:52:81:
b9:65:55:45:93:ce:87:1a:a6:fc:95:4b:2b:bd:93:db:db:5e:
54:0b:10:7e:a8:50:51:96:e6:3c:4d:bb:03:6a:7b:2d:a7:a8:
e8:12:77:32:30:c3:1c:f8:2a:7d:21:35:b5:14:de:8e:46:f1:
7c:66:02:7b:88:57:63:48:27:fc:05:84:9c:11:7e:04:2d:94:
74:6b:b3:9e:7a:b1:f3:a6:8a:53:64:d5:e1:66:5c:8d:b9:6e:
6c:90:90:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:04 2026 by rpki-client