
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/38BDA87E3D0A11EF9EEE4439C4F9AE02.roa
File: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (raw, json)
Hash identifier: e7uP2Q15Y7+PdXnvPFnRHiamG3196fJe6Q0lPV/VwQQ=
Subject key identifier: 9B:D2:EA:C9:3A:D7:82:63:FD:9D:42:71:CD:77:8B:4D:14:A9:F8:AE
Certificate issuer: /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Certificate serial: 0147
Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/38BDA87E3D0A11EF9EEE4439C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:51:16 +0000
ROA not before: Fri 27 Jun 2025 05:46:01 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 141677
IP address blocks: 160.22.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Validity
Not Before: Jun 27 05:46:01 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a595d4-0399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:e1:99:db:ef:83:dd:fb:ca:19:d7:27:26:
1c:13:45:c4:44:a0:c4:74:26:70:5c:50:dc:5c:b1:
c7:b4:f3:67:3f:16:2f:67:12:a3:65:11:40:c4:18:
b8:fe:d9:de:b2:28:ec:ca:0f:10:d5:53:3a:3f:51:
6b:df:7b:46:31:cd:c7:01:c1:2b:0f:5b:14:08:61:
73:17:0a:42:c7:49:d0:5e:99:b2:60:58:a0:d9:90:
84:dd:64:eb:a6:4a:10:fd:b3:89:7c:d6:b1:7f:07:
17:fc:7a:e0:c6:2b:03:72:96:1a:c8:27:2f:48:39:
7b:c0:18:28:fd:0f:b4:e4:25:58:27:76:51:49:0f:
9f:7a:e5:55:72:2d:c5:9e:78:34:71:95:6a:57:20:
c6:b8:6f:d9:fc:e8:82:0c:d0:2d:08:0f:17:45:96:
7f:56:18:a9:c8:82:a2:cb:88:dd:8f:bc:c8:24:38:
ed:f4:15:a7:ac:64:46:a4:d9:84:d4:1c:ad:14:95:
a1:3d:89:04:a5:1d:f2:41:39:1f:6b:f7:ad:0e:b9:
aa:81:d2:c1:0b:c5:33:ad:5b:59:4f:27:55:c6:b6:
a5:42:2c:5b:35:78:29:6c:d5:d3:a0:c9:8b:f1:31:
75:bd:af:9d:b6:96:a6:96:2a:06:b3:62:ad:bb:49:
07:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:EA:C9:3A:D7:82:63:FD:9D:42:71:CD:77:8B:4D:14:A9:F8:AE
X509v3 Authority Key Identifier:
keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/38BDA87E3D0A11EF9EEE4439C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.182.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:e2:85:3c:f2:e6:e5:2d:93:61:74:93:e9:46:67:ad:51:b6:
7a:e4:80:ce:5c:c9:08:ed:92:04:bd:4e:bb:d7:69:eb:e3:ac:
04:6c:fb:b5:d9:be:5f:b3:f4:bc:77:06:47:34:3d:f5:70:08:
4a:3c:6d:c4:46:20:41:7e:ca:7f:6c:9f:50:2f:43:31:1f:ed:
26:d6:9d:53:f3:b3:df:65:e2:69:d0:89:93:2d:99:a2:da:60:
27:31:dc:e1:2e:be:9b:07:e7:6b:f7:21:b9:6a:47:cc:74:34:
94:58:af:61:e1:1a:22:95:31:af:49:0b:26:d6:84:5f:e2:b5:
66:82:19:64:75:98:aa:ae:fd:32:07:88:d3:de:b3:c6:93:85:
c3:22:7a:0e:85:30:a8:4e:af:35:d5:50:08:21:ef:df:d5:6e:
54:55:f9:41:1e:4f:6e:65:aa:31:7a:7d:19:6d:2a:3a:0c:a2:
93:26:92:c7:d7:26:14:a8:b3:03:f8:d3:4f:4b:98:1e:99:a9:
63:c2:02:d0:a5:05:55:32:88:f8:d0:f9:10:18:1f:29:6a:3a:
06:37:95:66:40:e3:28:1f:c3:7c:55:0e:30:02:77:65:fd:57:
ec:11:76:04:47:a2:02:6f:42:ed:ae:df:fb:02:ff:1b:6a:e7:
d2:d8:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:57 2026 by rpki-client