
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7D164B822A2811F0819D8C13C4F9AE02.roa
File: 7D164B822A2811F0819D8C13C4F9AE02.roa (raw, json)
Hash identifier: U0yLO5Ev3zOcE/jWxDek+PewuFrsGyucjJ2jYS/L358=
Subject key identifier: 82:5B:F4:DE:D6:10:B8:C6:18:0B:6E:E9:E6:39:5E:C2:FD:0F:CC:4E
Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial: 030A
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7D164B822A2811F0819D8C13C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:19:33 +0000
ROA not before: Tue 05 Aug 2025 02:40:33 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 203.4.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Validity
Not Before: Aug 5 02:40:33 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a59c75-baa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:cb:63:a4:91:7d:82:51:78:11:ee:85:45:
92:ea:cc:29:79:f2:fd:21:32:78:72:eb:bd:22:a2:
59:da:26:fb:f9:2c:3d:35:d8:e1:3a:d0:20:4c:16:
67:e2:2a:c3:e7:a5:4c:69:49:f0:54:c2:41:a5:eb:
0f:80:e9:33:4b:cd:c1:6f:eb:74:19:b7:cf:a1:2d:
53:1a:6b:4c:dc:05:2d:0a:06:6e:de:68:fe:cc:4a:
35:e1:b3:a8:08:83:d9:3e:be:e1:3b:ca:30:7c:50:
c8:f0:91:17:17:52:05:82:5c:a1:fc:ea:f5:4b:0b:
6f:e1:18:22:ef:f4:a0:61:c5:10:45:06:46:c5:c1:
7f:49:3c:d3:22:c9:07:d5:a3:8e:11:a2:91:5f:3c:
be:91:8d:15:21:e8:40:fe:3a:e1:fb:89:f2:f1:31:
a4:eb:d0:b0:b8:65:e7:76:72:47:7b:86:07:7a:b1:
91:51:e6:40:a3:02:47:3c:1e:d9:ee:a8:80:31:0c:
17:2c:74:8d:1e:90:9f:b8:77:1b:cb:04:2d:d6:ad:
c4:c7:4d:25:08:e7:bc:37:cb:dd:68:56:32:3b:fc:
a4:a1:5a:d6:ee:b1:1e:68:a6:77:9a:a1:90:c8:11:
21:b6:c8:66:9b:90:ad:63:39:77:3f:7d:7f:0a:13:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5B:F4:DE:D6:10:B8:C6:18:0B:6E:E9:E6:39:5E:C2:FD:0F:CC:4E
X509v3 Authority Key Identifier:
keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7D164B822A2811F0819D8C13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.4.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a0:bd:50:09:c6:d6:ea:d0:56:b2:5e:49:65:62:81:6b:df:
31:26:80:d1:3b:6d:53:3e:51:a9:b4:af:63:bf:84:74:02:30:
4c:0f:a9:d3:b8:70:0a:e6:ff:3a:0a:70:e4:4b:51:ff:26:66:
61:bd:21:a0:b1:c9:2c:71:51:29:bd:ff:3d:c3:0b:9a:8c:9e:
d9:70:38:85:df:e2:c7:64:96:93:b2:82:88:80:ca:cc:8f:6b:
79:6b:2c:c0:6f:c0:c7:bb:13:8f:90:86:16:c1:cf:97:80:74:
1c:ae:e7:70:3b:0a:32:7f:c3:ad:4d:51:f8:81:8c:5d:64:7c:
72:5e:cb:07:8d:10:73:7b:7b:96:8d:19:be:57:20:f9:60:e6:
42:17:11:8d:8a:b6:7f:6d:f2:d9:c5:2b:bd:ec:6c:c8:4c:41:
32:d3:05:63:fc:60:08:27:ce:14:00:2d:4c:55:a8:f8:85:3d:
d0:8d:46:1c:c8:09:f4:e6:ef:b9:a0:81:c3:40:b1:35:84:ec:
e4:b2:45:90:85:45:20:ab:47:cf:46:00:ba:0a:5c:32:20:51:
f9:cd:09:8c:93:c6:bf:93:2a:9f:93:08:9e:69:a3:ec:a2:db:
f8:33:9c:42:e8:b6:ab:6c:df:32:30:a2:aa:d2:42:2f:b2:4c:
26:4b:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:18 2026 by rpki-client