
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/D8EC2D84C6FF11EDA93A1D43C4F9AE02.roa
File: D8EC2D84C6FF11EDA93A1D43C4F9AE02.roa (raw, json)
Hash identifier: cFTNjWmWAl/Ioxhdrn8peplOv2/LEeZJ3Jpud6hMyaA=
Subject key identifier: 01:37:D8:E1:62:B5:67:82:58:DC:A5:25:6D:13:88:82:38:9D:30:D7
Certificate issuer: /CN=A9168C73/serialNumber=0A6152834E1299C11CF6E07865F765B238656389
Certificate serial: 0253
Authority key identifier: 0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/D8EC2D84C6FF11EDA93A1D43C4F9AE02.roa
Signing time: Sun 03 May 2026 02:34:45 +0000
ROA not before: Sun 03 May 2026 02:34:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38829
IP address blocks: 118.127.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl
rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168C73, serialNumber=0A6152834E1299C11CF6E07865F765B238656389
Validity
Not Before: May 3 02:34:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f6b445-91d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:1e:66:e4:6e:23:78:fc:37:2d:52:72:04:
1d:b4:32:1e:00:0a:60:1d:e2:eb:1f:46:49:e5:3a:
95:41:98:0d:9d:92:6b:3b:c6:7a:72:85:3f:88:b1:
65:01:dd:0e:d9:20:10:33:ef:25:2f:73:18:88:38:
e3:24:e3:d1:bb:03:a1:2e:44:8b:10:d2:8e:ab:39:
64:14:b1:c6:ef:7b:ae:d5:88:79:8e:69:a5:36:31:
b2:5d:46:19:e5:8c:43:02:8d:a6:eb:51:33:bc:f0:
ad:7b:3d:77:34:7f:45:3e:0e:06:04:11:9c:53:c5:
02:b2:7e:7f:0c:08:30:a9:25:67:fa:9e:66:4a:cc:
bc:07:d5:dd:ca:6d:2f:e2:6a:f0:59:3b:a8:f7:42:
69:ff:2c:b7:d0:cf:cd:cd:cc:1d:d5:cc:71:7c:44:
c3:7e:96:82:62:e0:93:9c:f2:f1:50:b5:bd:97:b6:
71:f2:af:df:18:9d:8a:1c:06:12:13:ab:3b:ed:b4:
a8:d3:32:cf:8a:fa:bc:15:15:c8:8f:dc:9f:1e:4c:
a6:d0:f9:4d:8d:42:14:a8:65:96:35:de:0b:92:0a:
b6:2c:0e:e9:40:bc:24:14:c5:8f:94:85:14:24:28:
bf:9b:64:f6:e8:c4:d3:92:4b:22:f3:c4:6e:e1:68:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:37:D8:E1:62:B5:67:82:58:DC:A5:25:6D:13:88:82:38:9D:30:D7
X509v3 Authority Key Identifier:
keyid:0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/D8EC2D84C6FF11EDA93A1D43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
118.127.160.0/21
Signature Algorithm: sha256WithRSAEncryption
24:11:dd:f5:23:87:06:8d:a7:1d:b6:df:59:d6:5e:63:6a:80:
bd:3b:94:39:2a:95:cc:ce:9b:91:6f:36:6e:c6:ee:0a:77:b5:
d7:07:91:bc:c0:b5:10:f5:3a:5f:0b:95:5b:3a:26:91:da:75:
09:3f:23:59:52:a3:03:b9:93:6e:5f:63:75:30:1e:2e:08:28:
d2:2c:b3:18:eb:59:ae:14:ce:e3:5f:1d:36:1f:60:cf:03:0b:
6b:11:9e:33:cd:bb:34:6d:08:f3:15:b1:c1:35:e6:5f:33:09:
5b:a7:57:be:cb:ab:6d:df:4c:15:13:bb:98:e8:b6:23:04:aa:
be:eb:69:f9:94:0c:41:91:f2:e1:0c:69:5b:1f:4b:21:fa:3e:
39:ab:94:a9:2e:6c:d1:b2:34:78:18:fb:57:12:57:f1:d5:1d:
f7:b7:f3:63:00:91:82:30:89:23:4e:6c:4d:7d:f9:e1:a6:07:
6e:dc:bf:5a:6c:9d:6d:a4:26:92:28:b6:36:44:22:2a:6f:44:
aa:f9:da:f6:8d:0e:38:c0:24:0c:84:6e:b1:bb:39:75:fe:04:
b5:5c:59:57:5d:56:5b:6c:9d:6c:13:40:73:c1:31:49:88:c3:
a3:08:e1:39:06:07:0f:3e:01:70:c7:74:63:9b:e1:b1:60:17:
30:71:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:53 2026 by rpki-client