
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/6766DBA8C15D11F185786ADD5611F970.roa
File: 6766DBA8C15D11F185786ADD5611F970.roa (raw, json)
Hash identifier: trzocbq9ads7mVznRO58n0d8kHsK2xk+BizG9LbXroo=
Subject key identifier: 38:4B:A7:5A:A4:CB:2D:0A:E9:7A:6D:4D:59:81:DE:F6:00:A1:D6:09
Certificate issuer: /CN=A918A331/serialNumber=F55CAEE9FC440B73F451CB167F1EC5B4D96B3244
Certificate serial: 5D
Authority key identifier: F5:5C:AE:E9:FC:44:0B:73:F4:51:CB:16:7F:1E:C5:B4:D9:6B:32:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/6766DBA8C15D11F185786ADD5611F970.roa
Signing time: Tue 06 Oct 2026 08:27:27 +0000
ROA not before: Tue 06 Oct 2026 08:27:27 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9328
IP address blocks: 202.14.101.0/24 maxlen: 24
203.9.52.0/22 maxlen: 22
203.14.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.crl
rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A331, serialNumber=F55CAEE9FC440B73F451CB167F1EC5B4D96B3244
Validity
Not Before: Oct 6 08:27:27 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6ac4b0ef-006b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:76:e1:48:07:f3:c0:f5:ff:07:38:c1:05:
8e:ae:80:2e:d7:16:76:ab:e4:05:f0:b4:e5:0b:05:
e0:20:62:34:b2:3a:ee:99:21:a5:ee:25:b2:9f:2d:
3d:77:25:46:13:cb:55:76:67:f5:39:27:74:70:66:
72:d8:a5:83:d8:a1:d8:f0:83:99:2a:94:b9:5e:8a:
05:09:12:83:9a:a5:8c:1b:cf:8e:e3:b6:a6:d5:09:
a1:8a:27:df:6e:95:19:6e:e7:1f:4a:a2:f3:f8:68:
aa:41:e9:fa:89:e5:7a:c0:53:dd:d1:b9:d2:01:2c:
3a:92:9b:77:8b:a4:31:bc:c2:4f:87:66:a6:a0:b7:
56:4b:c0:78:49:05:34:a2:54:12:b2:99:75:58:d8:
77:4d:fc:4b:5f:88:50:2d:f0:97:55:7c:2f:64:21:
f2:dc:0f:b1:85:e0:5a:b6:b6:1f:de:2d:23:e5:e3:
0d:6e:86:23:b1:51:66:9d:1f:b5:cc:cd:36:e3:90:
dd:a9:5d:6a:95:a3:d7:e9:a6:ea:1f:14:da:03:7c:
f9:5e:03:ea:c1:1e:53:e7:1e:e9:61:9e:9c:f4:ef:
79:43:af:f7:61:72:f1:8a:5f:15:7a:d0:25:e3:2f:
96:d6:df:b4:c7:5a:26:ef:e7:cf:b8:0c:64:5f:bc:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4B:A7:5A:A4:CB:2D:0A:E9:7A:6D:4D:59:81:DE:F6:00:A1:D6:09
X509v3 Authority Key Identifier:
keyid:F5:5C:AE:E9:FC:44:0B:73:F4:51:CB:16:7F:1E:C5:B4:D9:6B:32:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/6766DBA8C15D11F185786ADD5611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.14.101.0/24
203.9.52.0/22
203.14.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:4c:00:a0:8c:4e:0b:70:62:70:6e:4b:90:ed:52:03:18:7f:
6d:24:0c:34:50:79:c2:92:66:36:79:a3:8d:75:89:c0:f4:9d:
d5:fb:67:86:41:82:24:93:98:52:a7:63:d3:cd:ae:18:80:9d:
5b:69:1b:74:23:2b:74:31:2b:0b:ea:5d:c0:38:c7:b8:15:fd:
90:56:b8:15:ba:c1:48:43:a0:c7:db:96:c3:08:77:99:b3:bb:
49:01:51:b4:cb:50:85:f7:ec:19:92:4b:1a:89:20:d6:7b:a9:
64:32:e7:d8:18:f2:14:a5:fe:4f:02:f6:b4:93:7f:64:f5:23:
b9:84:bb:ad:54:70:3e:9f:96:aa:82:4b:33:ee:82:36:60:53:
87:87:13:6e:2e:91:a4:60:88:72:5f:d0:72:e4:f3:ff:4d:e9:
c1:e8:33:a4:37:e5:9c:7d:d3:79:04:43:6b:24:a7:e1:16:19:
1e:e7:64:6b:92:0d:cb:a1:44:f4:36:33:9c:d5:b9:32:e6:67:
ec:12:bd:b1:e3:19:ca:f9:22:df:6a:b2:f7:f4:63:e1:65:e1:
0a:7e:da:1d:85:41:6f:fe:8c:7c:a2:9d:ce:db:a6:1e:43:49:
56:a6:8b:36:5a:a7:12:0d:8e:15:71:ad:97:50:d7:0f:44:64:
44:05:f7:bd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QTMzMTExMC8GA1UEBRMoRjU1Q0FFRTlGQzQ0MEI3M0Y0NTFDQjE2N0YxRUM1QjRE
OTZCMzI0NDAeFw0yNjEwMDYwODI3MjdaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYzRiMGVmLTAwNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQi3bhSAfzwPX/BzjBBY6ugC7XFnar5AXwtOULBeAgYjSyOu6ZIaXuJbKfLT13
JUYTy1V2Z/U5J3RwZnLYpYPYodjwg5kqlLleigUJEoOapYwbz47jtqbVCaGKJ99u
lRlu5x9KovP4aKpB6fqJ5XrAU93RudIBLDqSm3eLpDG8wk+HZqagt1ZLwHhJBTSi
VBKymXVY2HdN/EtfiFAt8JdVfC9kIfLcD7GF4Fq2th/eLSPl4w1uhiOxUWadH7XM
zTbjkN2pXWqVo9fppuofFNoDfPleA+rBHlPnHulhnpz073lDr/dhcvGKXxV60CXj
L5bW37THWibv58+4DGRfvCKvAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUOEunWqTL
LQrpem1NWYHe9gCh1gkwHwYDVR0jBBgwFoAU9Vyu6fxEC3P0UcsWfx7FtNlrMkQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMzMxL0M5Njg3OEVFM0ZB
NzExRjE5NTczQURGMkJFODMzNzczLzlWeXU2ZnhFQzNQMFVjc1dmeDdGdE5sck1r
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOVZ5dTZmeEVDM1AwVWNzV2Z4N0Z0TmxyTWtRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTMzMS9DOTY4NzhFRTNGQTcxMUYxOTU3M0FERjJCRTgzMzc3My82NzY2REJBOEMx
NUQxMUYxODU3ODZBREQ1NjExRjk3MC5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE
AgABMBIDBADKDmUDBALLCTQDBALLDvAwDQYJKoZIhvcNAQELBQADggEBAMpMAKCM
TgtwYnBuS5DtUgMYf20kDDRQecKSZjZ5o411icD0ndX7Z4ZBgiSTmFKnY9PNrhiA
nVtpG3QjK3QxKwvqXcA4x7gV/ZBWuBW6wUhDoMfblsMId5mzu0kBUbTLUIX37BmS
SxqJINZ7qWQy59gY8hSl/k8C9rSTf2T1I7mEu61UcD6flqqCSzPugjZgU4eHE24u
kaRgiHJf0HLk8/9N6cHoM6Q35Zx903kEQ2skp+EWGR7nZGuSDcuhRPQ2M5zVuTLm
Z+wSvbHjGcr5It9qsvf0Y+Fl4Qp+2h2FQW/+jHyinc7bph5DSVamizZapxINjhVx
rZdQ1w9EZEQF970=
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:55:22 2026 by rpki-client