
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/85C3AC9A39E511EF99FD7A11C4F9AE02.roa
File: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (raw, json)
Hash identifier: nz3PPCvZn62oE2uMjuHkN8vXygcZxrPBWu4zQKyueQc=
Subject key identifier: 4D:D7:62:D5:B2:B5:AC:69:D7:7F:18:65:FA:C4:52:A0:10:E0:DE:9A
Certificate issuer: /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial: 0193
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/85C3AC9A39E511EF99FD7A11C4F9AE02.roa
Signing time: Thu 23 Jul 2026 06:31:52 +0000
ROA not before: Thu 23 Jul 2026 06:31:52 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 10022
IP address blocks: 192.188.185.0/24 maxlen: 24
192.203.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Validity
Not Before: Jul 23 06:31:52 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a61b558-b36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:9f:65:2c:7b:0c:ac:3a:6c:f3:b2:6a:ad:
54:3d:87:e7:43:75:bd:78:7c:28:07:b5:3d:54:31:
11:3f:a7:07:93:2e:9f:2e:22:ea:24:86:b7:fc:5a:
e9:eb:df:5b:fb:30:2b:fc:d5:5d:9b:89:bf:bc:da:
d5:28:7d:45:46:10:ec:d1:15:92:93:8c:fa:23:f0:
f6:e9:72:5e:d8:27:e4:e6:d2:a2:b9:c2:db:fb:74:
ef:42:fd:7c:34:0a:5b:45:4b:20:d1:fa:c8:92:4b:
57:27:28:b6:8f:f7:09:fd:80:30:75:93:ad:e8:dc:
32:a4:6a:0f:2b:ca:8a:64:e6:19:3b:18:14:f8:1a:
f8:7d:31:05:7c:30:2c:66:65:eb:65:5c:ab:78:3e:
91:22:fb:5a:94:3b:00:1c:85:a0:8c:80:40:d7:a8:
64:ab:c3:3f:4c:8f:08:46:66:95:17:af:70:45:05:
37:8f:0c:31:a3:62:63:0b:4f:84:2a:c1:e0:25:fd:
33:24:ed:c9:53:af:3c:f1:ea:60:56:80:c1:7b:fe:
03:98:6e:4e:cf:c7:49:99:09:01:9b:a2:95:a8:9e:
54:58:e3:f5:9f:60:08:56:7f:cd:49:9b:dc:f7:42:
99:2d:74:e1:33:a4:10:e6:6e:53:0d:cb:0a:e9:ec:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D7:62:D5:B2:B5:AC:69:D7:7F:18:65:FA:C4:52:A0:10:E0:DE:9A
X509v3 Authority Key Identifier:
keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/85C3AC9A39E511EF99FD7A11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.188.185.0/24
192.203.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:bc:f6:79:6c:f3:1c:20:35:63:52:7e:28:61:39:28:50:09:
85:f2:0a:7d:33:0d:84:c8:b7:85:cd:97:7a:38:cf:1e:88:43:
85:f2:bd:bb:70:14:a8:9b:fd:d3:42:58:2b:83:97:04:4c:22:
3c:02:37:49:76:0b:81:90:3f:09:4e:ec:9e:a1:22:3b:7b:d2:
43:6f:af:2d:81:97:fb:c1:29:b8:5e:3a:cd:bc:c8:20:32:c1:
28:55:af:11:e0:80:2c:44:8c:d1:59:7c:a3:3f:c1:bd:67:e0:
c2:f4:68:57:11:a9:35:55:3f:0d:a3:15:01:30:ea:65:87:de:
4d:5c:20:aa:75:af:6f:60:70:31:47:4f:f3:28:30:48:23:55:
ae:08:9e:45:ed:dd:58:1d:a0:de:2f:d4:16:ba:fa:f8:31:ee:
7f:fc:76:6c:fb:57:55:15:7a:ef:1d:09:19:42:b5:10:bf:ff:
8e:9f:83:39:cb:24:f4:a6:7c:24:6f:ca:9e:58:96:be:34:f1:
e9:d1:14:0c:c0:fc:d6:5e:e6:d0:e2:75:b6:2a:de:ce:37:ff:
11:ee:85:7c:59:fa:58:6f:37:5e:85:9f:b9:19:b5:61:68:e1:
59:fe:bc:6f:33:cd:53:75:d2:4d:ee:9b:47:d6:4e:96:da:cb:
96:27:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:50 2026 by rpki-client