
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/A90FC92A4D9A11F1BFB1418A8AEE528E.roa
File: A90FC92A4D9A11F1BFB1418A8AEE528E.roa (raw, json)
Hash identifier: C7lfq/IxaaO5Q2N8DmKDpl1a8In/8ViB+2k2kr59lLA=
Subject key identifier: 5A:E5:4D:C4:9A:1C:3D:C3:02:24:A9:06:2B:44:F0:A9:52:93:AF:FE
Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Certificate serial: 0194
Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/A90FC92A4D9A11F1BFB1418A8AEE528E.roa
Signing time: Tue 12 May 2026 00:36:48 +0000
ROA not before: Tue 12 May 2026 00:36:48 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 151847
IP address blocks: 103.168.172.0/24 maxlen: 24
202.12.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Validity
Not Before: May 12 00:36:48 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a027620-fc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:e8:56:8f:c0:ef:c1:49:bf:27:ac:89:20:
36:d8:61:2b:59:cb:cf:84:cf:43:52:3a:ba:6c:11:
39:57:1c:86:41:50:81:c4:67:cd:cf:63:17:43:75:
a1:d5:f6:73:86:50:f4:ca:79:4c:64:47:72:cd:b1:
c4:d4:89:74:5c:18:a7:ab:dc:ce:be:36:e7:a5:38:
fa:73:7a:b6:bb:98:1a:24:2a:d1:11:86:06:02:2d:
86:93:a9:04:10:62:3e:a8:d5:25:1e:0d:47:17:6d:
89:39:68:07:04:b8:1b:3f:04:a9:78:43:51:6c:74:
d4:98:f8:23:f6:15:45:4b:44:35:5f:4f:01:45:16:
e1:4c:18:25:c5:f1:d4:8e:c9:25:d5:30:be:b4:77:
9f:7a:e4:41:8a:e0:90:d5:17:b5:7c:95:fc:5f:0c:
1d:fa:e4:59:73:d1:de:7e:5c:08:57:bd:f3:0a:05:
b5:af:9c:80:8f:d1:4f:cc:ac:85:82:c7:98:0a:2c:
2b:15:bb:20:79:40:69:10:80:51:15:6c:e6:b4:cc:
e9:d8:16:d6:db:18:f3:29:2a:9b:8b:8a:d6:c4:bb:
ec:3d:a7:0f:7f:fb:3d:fa:09:4b:c4:e4:f2:26:42:
4a:ab:20:85:3c:23:b9:4b:c0:fd:42:74:79:7d:3c:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:4D:C4:9A:1C:3D:C3:02:24:A9:06:2B:44:F0:A9:52:93:AF:FE
X509v3 Authority Key Identifier:
keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/A90FC92A4D9A11F1BFB1418A8AEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.172.0/24
202.12.124.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:6a:8e:ae:a3:2e:c6:cc:01:2d:43:74:d3:0f:8c:67:b7:18:
f6:9e:24:6b:c7:41:ba:43:4c:6f:f6:6b:81:01:d4:4a:24:80:
10:d0:aa:b4:6d:3c:aa:4d:44:08:4d:1e:d4:f1:a3:5e:79:70:
47:18:11:c8:dd:c3:70:64:df:9f:97:97:5d:ad:f2:80:9f:28:
ee:65:bb:70:53:43:ea:fb:f4:50:d7:30:e0:64:f3:05:d1:d9:
21:33:fc:5c:64:ec:69:d2:f2:c0:6e:5c:b0:7a:74:a4:75:80:
5d:f7:1f:8c:98:cd:f7:4e:ac:6e:41:c7:7e:8f:f0:a2:cc:44:
13:0c:e8:53:4b:5d:57:05:30:5a:9b:91:ab:71:47:22:10:33:
cb:48:df:e5:37:2d:2f:9b:04:2f:25:d9:4b:8d:20:12:00:04:
41:17:6a:81:20:53:cf:5b:6a:2a:58:dc:30:05:c7:42:0d:4a:
59:3f:ba:fe:c3:da:44:a4:de:6e:a4:20:f4:aa:3f:04:ac:b9:
52:2a:61:61:15:9d:70:fb:e6:60:22:a1:32:cb:e6:48:cc:08:
09:e1:9c:b9:ce:51:e6:ae:fd:97:55:12:36:14:b0:9f:91:a0:
7e:b9:9b:a0:f0:aa:de:03:7d:12:15:af:76:43:99:7b:27:9a:
cb:61:ea:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:27 2026 by rpki-client