
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa
File: AF75682A101911F09363D44DC4F9AE02.roa (raw, json)
Hash identifier: Yc/a5kzN1S+i861++mE7mShXzSmH/he0caVJdxP2DHc=
Subject key identifier: F5:03:67:7A:CB:65:02:5F:04:5D:96:A3:3C:1C:27:27:4A:72:1E:25
Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial: F8
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa
Signing time: Tue 21 Jul 2026 08:34:02 +0000
ROA not before: Tue 21 Jul 2026 08:34:02 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139645
IP address blocks: 160.187.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Validity
Not Before: Jul 21 08:34:02 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5f2ef9-ae50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:9f:ec:f5:a5:eb:61:3c:04:b6:30:2c:fd:
80:a3:09:f2:b9:88:fb:12:69:2d:62:be:19:57:70:
5c:6e:b0:28:b9:a5:6d:2f:a0:b7:4d:de:81:8b:f3:
ab:91:bc:19:1a:80:72:9a:2d:8f:7d:7a:a2:5e:bd:
17:40:bf:bc:51:8b:fa:bd:0d:49:66:47:5b:e2:d5:
88:5c:9c:1f:12:b2:eb:70:f2:0f:34:52:76:41:2e:
41:e4:49:ac:47:d3:e1:ec:29:40:1f:8a:af:0f:74:
c9:73:39:d3:71:63:e1:0b:e9:3e:9e:51:4f:bc:8e:
84:b6:1c:5a:34:f0:f2:62:13:82:ac:81:4f:19:9e:
03:e5:27:73:35:52:f2:9c:27:b4:60:68:a8:12:33:
89:67:97:4d:67:f8:a7:79:3d:68:2c:60:96:22:6f:
8c:85:94:21:99:71:c4:8c:90:21:96:01:ca:2d:a0:
7f:0b:75:2a:b1:88:07:1d:54:1f:33:4d:27:39:40:
af:7e:8f:6c:ad:f4:a7:2d:55:90:c1:56:e7:82:00:
5d:b0:b6:ca:01:50:c0:9f:e6:b2:f3:a8:c9:ab:e9:
e1:50:45:0e:9a:4b:a2:32:63:c9:a9:c5:4b:1c:30:
55:da:c4:04:b7:94:06:4e:8f:3d:94:c9:3a:21:94:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:03:67:7A:CB:65:02:5F:04:5D:96:A3:3C:1C:27:27:4A:72:1E:25
X509v3 Authority Key Identifier:
keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:7a:8a:30:b1:81:1b:27:0c:9c:a8:e7:cc:61:62:e8:3e:0e:
41:5e:18:a8:ce:c6:75:e6:bd:32:b8:e0:77:c3:9b:0e:f4:a7:
d0:19:d8:d8:43:e1:f0:bf:54:95:70:02:d7:36:21:0d:18:c7:
89:a6:1c:35:84:39:0e:80:10:e8:73:80:22:2f:68:ec:09:8a:
ea:00:75:69:e9:1e:ab:85:34:99:de:02:51:f2:38:fd:1c:01:
c1:92:c7:91:47:d1:ce:3e:78:1c:54:87:e2:f9:a5:3c:bf:ae:
77:71:12:ea:1a:4a:67:fa:e3:37:4f:8a:e9:ad:c0:e1:27:02:
f2:0d:fa:2c:c4:c5:b2:f4:96:c4:56:73:00:79:d6:fe:42:87:
4a:c8:45:30:a8:51:27:a7:29:29:17:7f:61:85:d4:cb:80:df:
f2:9b:ea:b0:a9:9f:b4:d3:4b:ba:3a:65:35:26:79:77:9d:71:
13:86:cd:07:f6:13:3d:51:89:81:05:84:35:cb:47:ad:fd:73:
ce:d3:51:e9:42:42:60:25:35:92:1e:2c:dc:43:e5:b8:03:93:
3b:ea:8e:ec:4d:a6:78:1b:a1:ba:28:74:40:42:76:67:4a:c0:
eb:21:95:87:51:45:ff:98:cf:8c:17:cd:2a:9a:72:f6:87:0c:
b1:08:de:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:37 2026 by rpki-client