
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/06C74C74B16D11F1982CDC5A5E11F970.roa
File: 06C74C74B16D11F1982CDC5A5E11F970.roa (raw, json)
Hash identifier: DOn65wm7uj5dn8bLTzIlGEQNtTqyZGzRv8v2via5ipE=
Subject key identifier: 99:B1:B5:1B:63:4E:CE:62:40:3A:56:92:8D:7E:71:92:1B:01:7B:2F
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2CED
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/06C74C74B16D11F1982CDC5A5E11F970.roa
Signing time: Wed 16 Sep 2026 01:29:41 +0000
ROA not before: Wed 16 Sep 2026 01:29:41 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55451
IP address blocks: 110.164.167.0/24 maxlen: 24
2403:6200:792c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 15:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11501 (0x2ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Sep 16 01:29:41 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6aa9f105-731b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:15:7a:00:a7:e7:8e:2a:ba:95:bc:08:1a:17:
6d:05:bf:1b:11:dd:51:93:2b:e1:1d:e0:8f:82:b2:
2e:64:a6:35:23:e6:bb:f8:50:73:49:b4:7a:f4:7e:
ea:c5:01:ba:c8:ae:55:57:ed:64:b1:e7:3b:27:18:
e6:c4:c2:d8:26:c3:95:6a:85:b1:4e:70:bd:29:17:
08:1e:4e:b7:fd:f7:67:da:e4:05:38:45:ff:8d:83:
b1:a7:98:43:45:9e:3a:96:c1:aa:83:b5:11:fd:e5:
13:35:38:4e:34:99:81:0d:56:68:19:aa:d1:23:d5:
bf:a8:0d:97:b8:75:85:37:46:53:09:d3:e7:c0:f4:
e5:1c:5b:30:83:15:21:05:95:5c:de:6c:36:7a:28:
67:01:99:7d:6c:38:63:cb:f1:f3:f5:1a:37:a9:40:
fa:b0:af:17:06:d6:f2:38:6a:65:52:c8:d7:5f:aa:
02:54:0f:5f:5d:cb:bd:53:c3:16:21:ba:29:83:26:
10:8f:ab:51:2c:48:a1:64:86:12:6d:c6:df:84:76:
b0:ea:d5:ff:fa:6a:d9:54:49:73:fb:b9:32:78:b9:
66:76:4b:d6:b2:2b:21:2e:97:eb:46:b0:79:dc:1e:
18:3c:a4:44:38:fc:13:5e:a8:9b:d3:53:98:c5:6e:
f8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B1:B5:1B:63:4E:CE:62:40:3A:56:92:8D:7E:71:92:1B:01:7B:2F
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/06C74C74B16D11F1982CDC5A5E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
110.164.167.0/24
IPv6:
2403:6200:792c::/48
Signature Algorithm: sha256WithRSAEncryption
a6:24:83:25:cb:c1:28:09:aa:17:14:6b:d9:d6:75:62:16:d7:
ad:ff:29:0f:0b:a1:85:4f:7c:36:10:56:ce:13:99:93:28:dd:
38:12:9e:90:6d:5a:48:6c:7f:6c:54:13:ee:31:8f:9a:b3:fd:
67:10:b8:c6:5a:03:99:2a:46:b2:76:6c:e7:4a:70:3e:0d:88:
d4:e9:e0:6b:3d:3a:ec:60:ac:c4:bc:f0:67:32:2d:ff:d9:42:
c4:f0:a5:9b:e9:af:03:8b:11:80:04:fd:e1:70:65:24:08:21:
fc:da:7e:a3:24:01:05:89:6b:81:93:9d:a8:1e:1a:8b:4b:08:
0a:d2:c2:f8:f3:9c:19:ff:a2:84:15:2b:0f:d5:1c:28:f0:25:
f8:f1:90:f1:78:c5:ab:e0:82:b5:a9:2e:08:2b:c3:b7:90:2a:
62:6c:3a:21:73:d1:4b:e1:c4:67:c8:81:31:df:5c:63:42:df:
4e:6f:ee:ad:e7:a1:46:3c:a6:5f:91:5d:c9:6e:08:d4:e4:52:
49:b3:8c:2e:13:5d:b7:b3:73:59:45:ca:9d:85:db:7e:d5:50:
67:c0:24:48:aa:b6:1f:b8:8f:d8:74:f7:51:9f:a1:30:2f:88:
c7:b6:80:d4:88:89:d7:f0:ee:eb:01:39:6b:58:3e:fe:8d:71:
b7:66:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 19:28:26 2026 by rpki-client