
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/F91ECAD6571B11F093AD0C10C4F9AE02.roa
File: F91ECAD6571B11F093AD0C10C4F9AE02.roa (raw, json)
Hash identifier: 8AGZO85cQ0zve4907lQJt8AAdjmdYVHacVOojhqCgwM=
Subject key identifier: 5B:9D:7E:65:08:5D:44:28:9F:29:BA:60:97:02:98:CC:F7:F4:EC:B5
Certificate issuer: /CN=A9170DA5/serialNumber=D4256EDC2BC11C845DB507B7C0A89354462EB63D
Certificate serial: D3
Authority key identifier: D4:25:6E:DC:2B:C1:1C:84:5D:B5:07:B7:C0:A8:93:54:46:2E:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/F91ECAD6571B11F093AD0C10C4F9AE02.roa
Signing time: Fri 07 Aug 2026 06:56:37 +0000
ROA not before: Fri 07 Aug 2026 06:56:37 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154002
IP address blocks: 165.101.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.crl
rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170DA5, serialNumber=D4256EDC2BC11C845DB507B7C0A89354462EB63D
Validity
Not Before: Aug 7 06:56:37 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7581a5-875b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:df:d7:1c:fd:48:bb:fc:33:31:bc:c0:ee:
6b:f1:0d:e2:c3:60:96:6b:cd:c5:22:13:77:17:e5:
61:61:51:95:ca:d2:a1:80:b3:14:cf:7e:95:b7:77:
90:be:63:bb:4c:3e:84:bc:6b:b9:c0:dc:a1:d6:eb:
d8:7b:15:cb:c1:50:e5:28:00:d0:c4:01:7f:eb:85:
72:97:ed:7c:91:e4:02:c7:e1:9b:95:8d:f8:b1:75:
6b:bd:b2:5d:40:85:31:d8:f3:3e:94:70:0e:e5:00:
fd:67:b1:e6:cc:2e:69:0c:79:48:b3:f0:f4:e8:70:
a6:1f:75:c9:8d:84:24:10:9c:ad:da:25:7d:09:8b:
3a:03:98:81:a8:0e:e6:cc:d3:eb:83:64:6e:e7:69:
f5:1c:f5:7a:fb:cb:98:82:68:c8:e6:b4:3a:e5:4b:
26:f1:d2:a7:be:66:7a:bc:85:a8:4f:38:ca:bc:4c:
f1:6c:d5:5f:c5:08:7a:c3:c2:d0:66:8c:a9:6b:a3:
dd:f3:3e:a4:6d:f3:63:ef:77:db:50:42:93:05:23:
65:cc:1b:37:ad:86:42:1d:b2:b1:21:71:e6:3a:83:
f3:db:e6:a2:66:b1:1e:d7:e9:d7:f7:92:21:98:ec:
da:00:3b:49:b3:57:c1:07:24:8d:a4:e6:b6:e1:57:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9D:7E:65:08:5D:44:28:9F:29:BA:60:97:02:98:CC:F7:F4:EC:B5
X509v3 Authority Key Identifier:
keyid:D4:25:6E:DC:2B:C1:1C:84:5D:B5:07:B7:C0:A8:93:54:46:2E:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/F91ECAD6571B11F093AD0C10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.102.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fe:1f:18:9c:d6:ae:ad:d0:a3:1c:e4:a9:8c:51:a8:94:bc:
45:5c:5c:6b:00:0a:67:1c:97:89:55:4e:b9:3e:db:2e:48:2c:
1c:15:91:15:05:fb:a0:87:2f:bb:5f:02:a6:26:43:4e:1d:ab:
5b:2a:55:ad:de:85:89:14:bb:40:0c:d2:90:b5:c8:d1:45:ad:
60:60:83:21:f4:a2:04:f0:91:94:e8:43:d5:ac:0d:24:fb:81:
56:65:36:81:4f:69:19:86:a0:d6:27:b2:77:9f:d1:6c:61:dd:
ed:1b:be:e0:ab:09:31:b3:e5:b7:53:80:63:8a:98:cf:3c:f1:
28:bb:ab:93:32:69:53:18:8e:c8:33:c4:91:4a:4d:87:ef:8c:
36:2c:87:27:63:f6:54:bc:10:84:2e:b6:65:98:58:dd:43:d7:
22:ea:50:77:8f:68:88:12:b8:06:e1:e7:9f:b4:1e:c9:e0:03:
02:13:7a:06:83:b6:d1:14:1e:02:9c:85:a8:68:a8:01:ba:80:
2b:e7:41:43:04:15:58:c8:50:0f:24:5a:c9:7e:f7:9f:4c:02:
35:55:85:f0:56:27:73:8c:f7:e4:e8:3f:d3:1c:9c:21:cb:4c:
55:e9:7a:e1:a5:13:ae:c5:54:70:30:29:8d:5d:cb:4f:3d:f3:
e5:9e:99:92
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBEQTUxMTAvBgNVBAUTKEQ0MjU2RURDMkJDMTFDODQ1REI1MDdCN0MwQTg5MzU0
NDYyRUI2M0QwHhcNMjYwODA3MDY1NjM3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc1ODFhNS04NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzqDf1xz9SLv8MzG8wO5r8Q3iw2CWa83FIhN3F+VhYVGVytKhgLMUz36Vt3eQ
vmO7TD6EvGu5wNyh1uvYexXLwVDlKADQxAF/64Vyl+18keQCx+GblY34sXVrvbJd
QIUx2PM+lHAO5QD9Z7HmzC5pDHlIs/D06HCmH3XJjYQkEJyt2iV9CYs6A5iBqA7m
zNPrg2Ru52n1HPV6+8uYgmjI5rQ65Usm8dKnvmZ6vIWoTzjKvEzxbNVfxQh6w8LQ
Zoypa6Pd8z6kbfNj73fbUEKTBSNlzBs3rYZCHbKxIXHmOoPz2+aiZrEe1+nX95Ih
mOzaADtJs1fBBySNpOa24VcZwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFudfmUI
XUQonym6YJcCmMz39Oy1MB8GA1UdIwQYMBaAFNQlbtwrwRyEXbUHt8Cok1RGLrY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MERBNS9DNTU5NDI0QTU3
MUExMUYwQjg1MDczNDFDNEY5QUUwMi8xQ1Z1M0N2QkhJUmR0UWUzd0tpVFZFWXV0
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFDVnUzQ3ZCSElSZHRRZTN3S2lUVkVZdXRqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzBEQTUvQzU1OTQyNEE1NzFBMTFGMEI4NTA3MzQxQzRGOUFFMDIvRjkxRUNBRDY1
NzFCMTFGMDkzQUQwQzEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWVmMA0GCSqGSIb3DQEBCwUAA4IBAQBV/h8YnNaurdCjHOSpjFGo
lLxFXFxrAApnHJeJVU65PtsuSCwcFZEVBfughy+7XwKmJkNOHatbKlWt3oWJFLtA
DNKQtcjRRa1gYIMh9KIE8JGU6EPVrA0k+4FWZTaBT2kZhqDWJ7J3n9FsYd3tG77g
qwkxs+W3U4BjipjPPPEou6uTMmlTGI7IM8SRSk2H74w2LIcnY/ZUvBCELrZlmFjd
Q9ci6lB3j2iIErgG4eeftB7J4AMCE3oGg7bRFB4CnIWoaKgBuoAr50FDBBVYyFAP
JFrJfvefTAI1VYXwVidzjPfk6D/THJwhy0xV6XrhpROuxVRwMCmNXctPPfPlnpmS
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:28:44 2026 by rpki-client