
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa
File: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (raw, json)
Hash identifier: RdQ8Kg8V0X5jAt/5w0/SSXdPPMNEPgNn/sfLhen4wYo=
Subject key identifier: E4:3B:16:1E:5A:F1:B4:97:01:B8:31:B6:F1:34:14:1C:4F:E5:9F:82
Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial: 0120
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:25:20 +0000
ROA not before: Thu 11 Sep 2025 06:45:58 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132372
IP address blocks: 160.187.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Validity
Not Before: Sep 11 06:45:58 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a59dd0-743a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:77:13:ae:8d:4b:20:03:dd:ba:c0:21:ae:
ce:79:0c:7c:9e:10:f8:27:7b:c8:81:1d:6c:f5:ee:
77:d1:13:7f:41:b4:4b:92:d8:73:32:de:6d:4d:76:
5a:cb:12:dd:2e:b8:f6:8b:0f:01:40:33:64:9e:f9:
ba:dc:c0:d5:e7:08:ab:72:b7:06:49:20:cc:c9:a8:
ce:3f:5e:58:74:17:16:a9:bb:fb:d1:41:95:75:a4:
7b:e3:31:e3:8b:15:a5:27:e3:77:ab:8a:1c:05:1e:
07:78:ff:dc:44:96:a2:65:6e:b1:ab:dc:d3:26:3f:
95:77:c0:61:4d:b2:08:61:7c:ad:06:55:cd:c5:57:
63:a4:37:6b:13:b3:88:c6:47:d9:11:b5:56:82:60:
a6:f3:0a:63:78:d9:4f:68:5a:2d:0e:11:ec:e4:ea:
df:0c:86:5c:e9:fb:93:92:23:99:3e:fe:51:de:3c:
12:79:a6:f9:d7:ba:4f:75:bc:58:ec:54:c4:e2:6b:
59:58:03:28:eb:25:13:d8:3b:4f:b6:3c:45:cd:f1:
40:2d:29:d4:a9:2b:11:8f:78:eb:a3:8c:d9:d8:9c:
fe:36:f8:d0:ec:7f:73:ce:df:3d:f1:27:99:07:cf:
10:41:67:73:d8:24:2f:8c:57:31:8a:b4:d3:0c:cd:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3B:16:1E:5A:F1:B4:97:01:B8:31:B6:F1:34:14:1C:4F:E5:9F:82
X509v3 Authority Key Identifier:
keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.97.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c2:21:2f:57:d4:d4:b0:58:1c:86:12:0e:51:21:4d:b6:0b:
ec:b8:ec:5c:00:24:e1:79:d8:f1:c3:44:92:7d:72:e1:21:7e:
65:54:b7:c9:3d:f9:b6:6e:fd:6a:63:ea:e8:c6:30:67:56:a2:
e5:aa:5d:77:bb:12:33:00:cc:c9:3d:4b:8f:c9:00:ea:ce:c4:
41:04:7a:b3:84:09:2f:b9:57:57:95:36:53:58:6e:70:e3:fa:
c3:15:cb:b0:76:e4:cc:83:0b:7f:0a:d4:39:a8:d0:0e:9a:1f:
cd:45:8f:da:c6:be:fd:d9:69:d3:18:04:ec:3f:c5:4a:cf:77:
fd:97:70:db:f0:ea:f4:05:b3:64:f1:52:16:8f:4f:99:93:e0:
4a:aa:db:a5:5e:a5:03:d9:9f:4d:eb:db:cd:1c:e2:2f:ec:56:
3c:d2:a4:fb:b8:75:02:cc:f6:dc:14:5e:16:8c:00:50:30:fb:
71:c1:99:2c:cd:93:e2:98:e1:12:06:02:ee:6a:1b:be:1a:2e:
bb:aa:7c:38:5a:e1:fb:30:58:25:eb:47:b3:3a:33:73:16:da:
f7:f9:ae:d9:e8:2c:46:cb:85:06:c5:da:7d:98:9d:32:5e:d0:
3a:db:99:45:1a:1a:d8:bc:b3:d9:8f:20:ab:01:ca:fa:11:6f:
d4:48:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:44 2026 by rpki-client