
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/DC857BE8843111F09719836AC4F9AE02.roa
File: DC857BE8843111F09719836AC4F9AE02.roa (raw, json)
Hash identifier: 1BOEDBKActw8l6HJnt44UOYL/MfVfznTCP7GMz9bjtk=
Subject key identifier: 0F:D0:7C:07:11:08:85:44:24:60:52:50:4C:41:80:5A:AA:68:02:A5
Certificate issuer: /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
Certificate serial: 019C
Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/DC857BE8843111F09719836AC4F9AE02.roa
Signing time: Wed 29 Jul 2026 05:55:12 +0000
ROA not before: Wed 29 Jul 2026 05:55:12 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 152898
IP address blocks: 160.22.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl
rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167CB5, serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
Validity
Not Before: Jul 29 05:55:12 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6995c0-8ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fa:ac:f7:35:e5:a8:df:b1:2c:31:ad:f4:c8:
74:91:74:da:24:6b:e6:46:ad:df:9b:c7:87:9c:80:
19:1f:06:5b:cc:14:5c:17:af:e3:91:c0:4e:a6:26:
e0:5c:c8:09:f9:d2:59:70:21:17:07:e4:26:ad:32:
f3:df:c5:b0:e4:d0:e8:93:d9:f7:36:af:35:f3:a5:
a8:83:71:f6:78:78:6c:12:57:19:bb:2f:94:93:f5:
87:f0:12:1a:95:87:8f:82:84:3b:2d:53:ba:17:a4:
9b:67:7f:3c:f5:f5:1c:5e:21:b2:d7:82:63:55:09:
cf:3d:0d:a0:47:7d:35:0d:05:d5:76:b5:98:a0:91:
1e:02:08:f1:a6:c5:92:78:77:f7:2b:09:a8:4e:e5:
6b:62:f3:3a:09:ff:8c:1b:6c:b8:5e:59:21:22:85:
40:37:50:af:d4:d2:df:df:42:84:42:a0:cc:ea:9e:
49:a8:7b:c1:82:a4:7f:7c:74:a0:ce:f8:c4:73:38:
e3:fe:c0:65:65:47:bd:c2:63:c5:7a:2c:9b:37:9b:
d5:11:c2:61:6d:d5:9e:4b:f3:90:ba:66:8b:26:b9:
d6:e7:45:df:1d:93:e7:98:d2:05:96:f1:bf:b5:c2:
8c:3d:5f:38:f9:bb:e2:b0:c9:c0:f8:97:97:70:a4:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D0:7C:07:11:08:85:44:24:60:52:50:4C:41:80:5A:AA:68:02:A5
X509v3 Authority Key Identifier:
keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/DC857BE8843111F09719836AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.50.0/23
Signature Algorithm: sha256WithRSAEncryption
91:88:b7:96:30:a2:c5:5c:77:a2:bc:8c:e7:d8:5a:77:11:53:
e3:e0:bc:d4:83:03:a5:8f:6d:8d:73:67:6d:13:d5:be:a0:7e:
43:4d:0b:8f:7c:1f:fe:d9:d7:7c:a7:5b:49:bb:d9:91:75:e3:
6e:81:82:38:bc:f1:24:28:a2:2f:64:50:e5:20:ff:6a:0c:0a:
ad:c8:cd:71:67:5e:fb:87:9a:0e:c4:bc:06:53:28:42:c1:0c:
a9:51:5c:2d:4a:9c:31:17:00:91:41:9e:c4:1a:6c:a4:f5:8a:
f3:46:8d:1e:b7:98:86:1c:95:5b:3d:a2:2a:7a:19:1c:cc:86:
44:6c:af:4e:71:e3:9e:10:bc:9c:43:e6:9c:71:5b:69:bc:a3:
fa:7d:9e:e2:7f:6a:51:99:e2:84:77:c6:6e:39:c9:3f:bf:ff:
b1:e1:07:47:94:84:a4:13:f6:49:51:be:6b:16:d4:7e:aa:37:
84:9a:05:89:2c:84:e4:ea:68:1f:74:5c:b1:f8:61:7b:a4:5a:
49:33:4a:32:f2:15:0f:bc:0b:73:0d:83:18:af:5a:2a:70:4a:
b7:71:74:e0:df:dd:d2:45:d3:2f:f8:a2:f9:e2:43:10:1f:31:
b8:bc:4d:11:5d:cd:33:74:c2:1c:17:bf:ea:f9:7e:64:ab:ba:
b8:9e:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:53:19 2026 by rpki-client