
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/D64176D81B9911ECAB0E1678C4F9AE02.roa
File: D64176D81B9911ECAB0E1678C4F9AE02.roa (raw, json)
Hash identifier: NApQDfsxt7jjKOoha5lUsKRVPKureaiiyrSOLJMc2s4=
Subject key identifier: 66:38:76:62:02:9E:4B:4E:DC:F1:01:01:CC:E2:55:9B:FE:25:29:27
Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial: 08D5
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/D64176D81B9911ECAB0E1678C4F9AE02.roa
Signing time: Sat 08 Aug 2026 15:10:04 +0000
ROA not before: Sat 08 Aug 2026 15:10:04 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 4758
IP address blocks: 164.100.0.0/16 maxlen: 16
164.100.0.0/17 maxlen: 17
164.100.0.0/18 maxlen: 24
164.100.64.0/19 maxlen: 24
164.100.96.0/19 maxlen: 19
164.100.96.0/20 maxlen: 20
164.100.96.0/23 maxlen: 24
164.100.98.0/24 maxlen: 24
164.100.99.0/24 maxlen: 24
164.100.100.0/22 maxlen: 24
164.100.104.0/21 maxlen: 24
164.100.112.0/20 maxlen: 24
164.100.128.0/17 maxlen: 23
164.100.128.0/19 maxlen: 24
164.100.160.0/20 maxlen: 24
164.100.176.0/21 maxlen: 24
164.100.184.0/22 maxlen: 24
164.100.188.0/24 maxlen: 24
164.100.190.0/23 maxlen: 24
164.100.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Validity
Not Before: Aug 8 15:10:04 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a7746cc-8af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:90:68:cc:e8:ef:f1:37:3f:69:ec:5e:ad:
20:6c:fa:77:20:57:27:0b:ad:a2:9a:3f:29:69:5e:
22:46:26:ba:e6:d3:0b:96:02:ce:fd:ad:cc:af:0b:
7a:d3:86:a0:c3:77:bb:c0:fa:41:bd:54:8f:41:22:
2f:ab:d1:13:d1:68:b1:09:bf:97:bc:99:bb:b7:73:
28:27:71:3e:d6:2e:92:b2:12:48:d8:d2:63:e9:d7:
e9:b7:c7:b4:49:49:88:12:50:10:e2:bc:fd:b4:3b:
26:9e:71:b7:88:dc:9d:57:41:7a:4f:66:89:e9:59:
79:e4:ae:3f:7f:1a:33:3b:68:2c:0f:ab:f2:8d:c9:
8e:26:ba:49:cf:f0:0f:f4:ea:e4:40:1a:d2:bb:15:
77:07:de:b8:74:08:79:d8:c3:27:a6:7d:c1:d7:27:
5e:f4:2f:2b:7b:d9:d2:18:e6:f3:6c:92:aa:e2:d3:
23:87:d1:a4:79:8b:59:ef:05:46:7b:2f:05:bd:a4:
21:03:3b:42:67:4e:d8:31:72:1b:3b:87:bb:33:02:
41:77:30:5f:9a:88:2c:ec:47:9e:59:07:c0:17:99:
9e:dc:5b:8d:be:09:bc:95:d1:df:7d:5e:69:e0:d2:
f7:5f:0a:1d:04:0e:bc:c6:0c:cb:b9:0a:dd:3a:12:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:38:76:62:02:9E:4B:4E:DC:F1:01:01:CC:E2:55:9B:FE:25:29:27
X509v3 Authority Key Identifier:
keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/D64176D81B9911ECAB0E1678C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
164.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:81:2f:8b:cb:55:5a:d2:c7:80:4a:7e:6e:c7:d9:c3:cd:70:
03:3e:48:40:9b:73:80:64:45:c9:1e:2d:25:e1:e3:e0:9e:5d:
d5:ba:7e:1f:a1:b5:76:6f:2d:57:c9:da:77:69:82:8f:56:35:
16:31:fa:61:ce:b6:f2:57:1a:7a:ab:00:01:22:98:a8:a2:50:
ae:ac:f0:bf:ea:50:dd:2f:0c:6e:1e:47:af:60:6a:5a:aa:da:
35:fb:15:81:8a:64:cb:9d:10:82:18:e9:f2:e5:2a:27:b0:bb:
da:d5:7f:49:97:76:90:0e:35:90:8c:59:00:94:c6:86:89:ca:
a1:41:14:89:4b:a0:30:05:d1:44:5f:ab:a0:0a:8c:6f:5c:df:
27:09:bd:69:ce:6a:78:c0:b3:7d:4f:e2:55:4c:ea:34:38:af:
21:f1:4f:fb:e5:8d:30:80:17:0a:61:46:6a:16:de:9c:e7:b1:
20:55:ee:d2:b2:cc:92:2c:bb:45:46:3b:f0:18:32:87:c2:2e:
0e:1b:37:9e:a3:3f:f3:af:ab:99:46:a8:d0:59:d9:1c:f1:48:
be:a5:f3:37:39:1f:31:d3:33:5f:d3:59:3d:2a:52:3a:77:1f:
ee:c4:1f:08:4c:7c:60:9b:43:b6:9b:65:d7:86:88:81:90:94:
91:08:5c:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:33:33 2026 by rpki-client