
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8068BF600E9711EB9A6C2B3CC4F9AE02.roa
File: 8068BF600E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier: G5p/j+Iz5urbmVn/3Zvh7rlgms1JVRVsFtuoDTKUJVA=
Subject key identifier: 87:89:CA:B4:9D:B4:10:D8:29:F1:7D:6C:67:66:F1:08:31:67:F4:3F
Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial: 0864
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8068BF600E9711EB9A6C2B3CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:02:50 +0000
ROA not before: Wed 16 Apr 2025 21:31:41 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 131245
IP address blocks: 202.92.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Validity
Not Before: Apr 16 21:31:41 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47f49-cf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:fb:dd:e1:a7:74:57:1b:3e:24:99:f9:88:
fd:b6:69:97:04:93:0b:67:77:0a:d7:f5:6f:af:2d:
cd:5a:82:45:c3:05:41:5e:30:69:2a:c1:aa:ec:f5:
02:b8:7c:36:ca:f9:4c:59:6d:f1:5a:a7:b3:0e:c1:
1b:2a:14:07:ae:37:ab:cd:1a:ed:6c:ca:f8:44:13:
02:94:69:4e:ba:c2:27:00:47:9c:b7:41:e7:a8:3e:
d5:e3:f5:74:46:f7:0a:93:f3:24:ce:93:ea:19:a2:
ae:8e:9a:7b:08:6f:96:ca:a8:ed:ba:b5:71:46:05:
59:6f:27:e6:9b:27:28:d4:98:8b:7d:0f:dd:db:b6:
08:aa:bf:67:4a:cf:83:8d:a3:96:9a:b9:23:1e:0e:
54:1a:13:a8:53:7c:49:c6:fd:1b:9e:d6:9f:ec:d0:
2a:bd:b1:b6:d1:f7:e0:0e:77:25:e4:46:ee:f3:9f:
e2:38:48:44:ce:2c:d2:27:35:08:1e:dd:7b:87:3f:
93:61:53:c7:c3:ef:e0:26:a2:84:82:88:98:11:08:
4c:47:ea:46:1d:b4:de:95:77:36:d4:b6:09:15:ad:
d6:a1:c8:87:a6:e1:b8:1b:11:57:f6:73:e0:09:63:
9d:02:42:02:f1:11:43:01:af:02:3e:8c:60:de:bc:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:CA:B4:9D:B4:10:D8:29:F1:7D:6C:67:66:F1:08:31:67:F4:3F
X509v3 Authority Key Identifier:
keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8068BF600E9711EB9A6C2B3CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.92.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4e:74:8a:6b:3f:11:54:ca:2f:ab:6c:f6:a8:d3:25:29:ba:
d4:99:5b:51:17:ad:49:f2:24:f6:b2:3d:5f:0c:0a:e8:05:61:
44:cb:83:bc:79:ee:d9:88:55:87:e0:90:2c:b5:09:06:75:69:
c0:ae:b9:63:b9:09:e6:11:2a:51:17:28:30:b2:f4:51:2c:61:
3a:c7:d5:bb:e3:0e:bd:33:3c:8e:5f:2a:07:98:fe:f1:b0:1e:
49:01:75:3b:43:bf:e5:45:be:19:ad:7c:22:8b:7c:36:d0:7a:
b3:0c:c8:a7:a3:e8:24:f3:04:54:6a:5b:68:c3:91:0e:71:ce:
1f:8b:ac:b4:f1:ff:40:b3:00:6d:bd:9f:e9:b6:6a:86:9f:b3:
b1:4f:fc:48:99:45:e9:d7:07:cd:1b:99:38:ae:15:81:24:d6:
eb:5a:2e:18:c3:a9:b2:20:30:fa:41:49:cd:4e:11:96:bf:8b:
a3:4c:0a:cf:3c:6c:1b:dd:ea:40:52:4a:b5:09:08:bb:ff:1c:
44:b3:81:e7:db:66:be:dd:23:36:8c:67:a1:c5:c6:e1:92:6b:
0b:4d:43:28:06:b3:c5:fb:89:0c:c4:05:62:2a:c4:3d:2e:12:
20:cd:48:ee:a5:b6:7d:6e:a2:e8:f2:90:ac:4d:c3:f5:db:54:
e1:b2:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:54 2026 by rpki-client