
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa
File: B350B67E964611EDA10D8777C4F9AE02.roa (raw, json)
Hash identifier: aMRVpWtmZnwUR1mTSqb8jU7v8RNHSZIpMkATgGb8rEM=
Subject key identifier: 5E:E9:F4:24:F9:A2:A0:FF:77:B0:E7:F0:02:C1:0C:EE:83:DB:F3:98
Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial: 09F7
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa
Signing time: Wed 24 Jun 2026 20:24:27 +0000
ROA not before: Wed 24 Jun 2026 20:24:27 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 140951
IP address blocks: 45.116.8.0/24 maxlen: 24
45.116.9.0/24 maxlen: 24
45.116.10.0/24 maxlen: 24
45.116.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2551 (0x9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Validity
Not Before: Jun 24 20:24:27 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3c3cfb-8e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:cc:6c:f4:bc:93:d9:34:c8:65:11:0c:d7:
99:01:d7:5f:39:22:d9:24:c1:bc:bb:eb:14:1a:23:
ba:be:96:d4:46:8f:63:b2:3d:eb:ca:c2:2b:ef:83:
ad:c5:92:c9:b4:71:1f:cb:a8:06:17:a3:b3:53:61:
63:87:68:c1:fd:1e:d5:a9:0c:8d:d0:d7:6f:ab:9a:
15:7d:4b:2f:00:1a:2c:dd:75:dc:64:6a:c3:14:70:
02:45:c0:5b:2f:f9:78:e9:65:49:40:49:68:93:8c:
da:25:b2:79:db:8e:e0:53:c2:bb:02:95:4e:e6:bd:
9d:b3:89:a0:94:15:63:5d:c0:68:48:36:49:31:51:
b3:24:26:e5:46:08:4c:d5:2d:19:c3:e4:d6:64:2a:
d2:b6:6e:29:b5:e9:77:d0:ac:f5:53:e0:91:d4:f1:
e5:d3:86:3a:b8:c9:1a:7f:2e:25:17:96:d5:51:d4:
63:56:7d:36:e0:e0:4a:00:ea:33:9a:94:a9:f3:ea:
b5:51:ad:b5:89:6e:0d:20:7a:82:2f:2d:e1:8d:32:
ee:f5:72:47:68:30:78:f3:1f:a5:ef:06:72:78:ac:
e7:e0:57:bd:d3:ca:4f:e8:96:a5:f3:fa:cd:14:4e:
f3:20:e1:b6:1f:c1:f2:c5:ad:78:5f:54:3b:a7:31:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E9:F4:24:F9:A2:A0:FF:77:B0:E7:F0:02:C1:0C:EE:83:DB:F3:98
X509v3 Authority Key Identifier:
keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.116.8.0/22
Signature Algorithm: sha256WithRSAEncryption
11:b9:8e:e2:d5:bc:e8:5e:28:1c:6e:e4:dd:07:f2:cb:fa:dd:
e6:2a:49:66:33:d6:2a:ad:87:3b:33:42:44:48:81:bd:32:7e:
ae:b7:4c:2a:02:76:a2:a9:1a:33:7e:50:75:7a:0d:03:fd:f7:
03:3d:8c:87:27:7f:f6:92:c0:e6:bf:cb:89:65:62:61:71:28:
01:6d:6d:3e:7a:f8:57:3e:fe:62:c2:94:16:12:0d:01:1d:6e:
04:d9:71:db:4e:54:22:62:ba:2b:ac:53:3f:12:8a:e7:13:94:
e2:ef:46:0f:e2:f3:bb:ca:17:4b:f3:0c:ef:3f:72:61:0a:25:
b4:a0:fd:f7:71:5e:b6:95:50:ae:89:09:e2:50:5e:36:f6:4d:
c1:15:dd:bd:5a:dd:32:83:05:95:21:0e:24:c3:a3:e6:62:d7:
3c:e4:d6:5a:84:59:b3:67:08:23:1c:16:47:e1:6f:c6:7a:4f:
b9:73:93:6a:f5:61:67:13:53:ce:a4:80:4d:fd:e0:35:80:3f:
fc:31:1b:3d:de:82:f5:24:c4:06:a8:9e:d8:08:b2:87:f6:4d:
7a:91:14:f9:bb:44:06:fd:36:a8:0b:d1:c4:75:82:72:37:00:
f9:b7:f5:36:7d:31:c7:5a:db:c6:f4:7e:27:f7:32:c5:a8:48:
a9:45:03:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2
REQzQ0I2QzgwHhcNMjYwNjI0MjAyNDI3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNjM2NmYi04ZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsrbMbPS8k9k0yGURDNeZAddfOSLZJMG8u+sUGiO6vpbURo9jsj3rysIr74Ot
xZLJtHEfy6gGF6OzU2Fjh2jB/R7VqQyN0Ndvq5oVfUsvABos3XXcZGrDFHACRcBb
L/l46WVJQElok4zaJbJ5247gU8K7ApVO5r2ds4mglBVjXcBoSDZJMVGzJCblRghM
1S0Zw+TWZCrStm4ptel30Kz1U+CR1PHl04Y6uMkafy4lF5bVUdRjVn024OBKAOoz
mpSp8+q1Ua21iW4NIHqCLy3hjTLu9XJHaDB48x+l7wZyeKzn4Fe908pP6Jal8/rN
FE7zIOG2H8Hyxa14X1Q7pzGTTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF7p9CT5
oqD/d7Dn8ALBDO6D2/OYMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3
RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjFBNTgvQjM4OTMwNEVBN0VDMTFFQTgwNDg1ODY0QzRGOUFFMDIvQjM1MEI2N0U5
NjQ2MTFFREExMEQ4Nzc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLXQIMA0GCSqGSIb3DQEBCwUAA4IBAQARuY7i1bzoXigcbuTdB/LL
+t3mKklmM9YqrYc7M0JESIG9Mn6ut0wqAnaiqRozflB1eg0D/fcDPYyHJ3/2ksDm
v8uJZWJhcSgBbW0+evhXPv5iwpQWEg0BHW4E2XHbTlQiYrorrFM/EornE5Ti70YP
4vO7yhdL8wzvP3JhCiW0oP33cV62lVCuiQniUF429k3BFd29Wt0ygwWVIQ4kw6Pm
Ytc85NZahFmzZwgjHBZH4W/Gek+5c5Nq9WFnE1POpIBN/eA1gD/8MRs93oL1JMQG
qJ7YCLKH9k16kRT5u0QG/TaoC9HEdYJyNwD5t/U2fTHHWtvG9H4n9zLFqEipRQP4
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:29 2026 by rpki-client