
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/CA226038692E11F0B07B731AC4F9AE02.roa
File: CA226038692E11F0B07B731AC4F9AE02.roa (raw, json)
Hash identifier: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=
Subject key identifier: 17:26:AD:CF:87:75:24:15:C9:46:2A:7D:90:3B:9B:2E:87:6E:D5:CA
Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial: 7F
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/CA226038692E11F0B07B731AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:44:26 +0000
ROA not before: Wed 03 Dec 2025 06:04:52 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55720
IP address blocks: 160.250.92.0/24 maxlen: 24
160.250.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Validity
Not Before: Dec 3 06:04:52 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a5862a-3b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:2b:e6:15:ce:eb:d0:df:1c:af:75:63:0d:
dc:28:25:fa:b4:30:fb:9f:23:4d:eb:6a:82:88:35:
80:5d:d3:d2:10:56:2b:1b:6e:19:7a:bd:7c:3c:82:
dc:0d:19:49:ba:1e:b9:09:cc:5c:27:a8:44:c1:63:
25:50:7d:4d:a7:0c:76:0d:cd:4d:6c:df:63:c4:6f:
a3:2d:b5:1e:55:9d:b3:f1:2e:b5:70:68:e4:f2:47:
0e:3e:c7:89:2f:13:f3:06:cc:f4:7c:cd:e3:2e:28:
f2:10:51:8c:ad:f5:24:48:6c:71:74:e1:ca:ac:13:
d0:e9:b0:0f:ab:0d:37:ff:61:22:82:71:2a:af:35:
86:1a:34:b2:d1:8d:ab:16:71:7f:d4:d4:57:9c:b0:
ec:22:a5:72:12:69:99:8a:11:47:a4:33:99:bc:4f:
19:7c:26:e7:14:e2:d2:39:0a:ec:ed:6d:37:87:1d:
04:a5:24:dc:a3:b2:0b:48:5e:a8:e7:6e:a1:e3:c9:
f0:89:9a:db:21:0b:3d:aa:75:45:c6:6e:24:ce:3e:
9b:d1:19:e0:e3:60:a0:ef:da:e5:3f:64:81:7b:5d:
c6:c6:7c:d0:ea:bc:4b:93:39:9a:27:04:f6:94:c2:
ec:bd:de:9b:f6:55:ad:e2:fb:3a:5c:16:84:47:da:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:AD:CF:87:75:24:15:C9:46:2A:7D:90:3B:9B:2E:87:6E:D5:CA
X509v3 Authority Key Identifier:
keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/CA226038692E11F0B07B731AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.92.0/23
Signature Algorithm: sha256WithRSAEncryption
11:12:f8:78:d2:08:4d:12:04:a5:c4:2b:a8:e6:29:38:ba:93:
ef:fb:29:f3:22:6f:45:18:9d:c1:3d:f7:ee:ef:ea:5d:8c:bb:
9d:50:34:79:18:35:d0:15:ad:5b:4f:bb:10:ba:0e:c1:32:c3:
69:d7:06:f3:73:d2:da:03:bb:ca:cb:a2:aa:cc:46:0d:77:ae:
9f:cf:f3:69:01:11:fc:c1:27:73:0a:3d:64:6a:0c:71:3c:91:
95:39:5b:8a:be:3c:a7:e4:81:ba:4a:48:70:1e:82:62:06:89:
b5:79:7a:0c:c5:71:50:96:bb:6c:79:41:a8:6b:bf:01:67:61:
f3:1a:c7:4d:7a:27:16:ec:98:94:93:03:03:ff:d2:34:da:8b:
83:30:c2:05:b8:7d:81:d4:1b:3a:4c:51:09:62:4d:32:7e:34:
b7:21:4e:da:ee:fb:83:4d:57:30:0d:93:c5:4f:74:eb:08:e3:
45:f8:ca:b6:5c:92:5a:1e:e9:15:9c:6e:ef:a5:c1:49:20:27:
1f:07:66:c3:76:0d:92:2e:0a:18:51:3a:67:38:84:1d:7c:b2:
e9:be:9c:5e:3c:21:c6:02:c3:e4:9d:cf:32:74:d9:d1:e4:42:
bd:ae:80:f5:2d:4c:b4:15:ca:d0:24:1f:d9:07:a6:52:39:60:
a0:6a:6b:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:43 2026 by rpki-client