
$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa
File: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (raw, json)
Hash identifier: VkwFL/OI8A+B6vWC8BoIWVksESaaV5yZy0BJNLEHdwI=
Subject key identifier: 03:45:97:98:38:AC:9A:B3:B4:FF:B9:E7:34:9E:11:90:77:19:2E:BE
Certificate issuer: /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
Certificate serial: 0147
Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:01:34 +0000
ROA not before: Tue 29 Jul 2025 06:11:59 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55422
IP address blocks: 182.23.212.0/24 maxlen: 24
182.23.213.0/24 maxlen: 24
182.23.214.0/24 maxlen: 24
182.23.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl
rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
Validity
Not Before: Jul 29 06:11:59 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a5983e-8502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:cd:6c:29:4b:22:17:b4:53:4f:b5:f9:53:
ca:ba:d4:13:f9:42:e6:53:09:25:da:14:03:87:b9:
72:73:19:16:a8:38:a1:8c:3d:eb:44:8c:0a:2f:c6:
09:e3:66:dc:88:96:5b:85:ee:e8:7c:27:fd:16:c3:
c6:08:74:34:94:fd:7b:c8:07:60:15:87:64:8e:79:
23:5b:30:12:e0:6e:b7:3b:7e:ff:ab:6d:6c:d2:51:
90:73:d7:86:1d:46:da:aa:f1:f2:a4:99:2f:1b:d8:
33:b4:ab:71:0c:7b:99:ad:f7:4c:8f:d5:8f:b7:e3:
db:75:b6:1c:05:62:39:de:7c:e6:7f:6d:d9:58:8d:
ec:d7:99:92:c2:79:ec:8b:d3:6a:a4:58:25:ac:ac:
89:37:8d:ec:32:79:02:50:ed:c9:66:0e:66:4a:fe:
97:60:53:72:08:c2:b0:22:e1:a4:17:e6:34:1a:f1:
b2:ca:e9:51:f1:8d:e7:9f:be:2e:20:86:53:ff:a2:
c6:a7:cf:ed:97:63:19:90:b7:45:23:62:b4:d7:8c:
f9:1f:1d:89:b0:62:22:e1:62:fa:75:c9:80:2b:ab:
e5:b4:40:07:15:9b:69:44:75:ff:29:44:4d:20:5f:
1d:7b:3f:2e:b5:27:cf:2e:a5:4b:47:c2:45:15:aa:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:45:97:98:38:AC:9A:B3:B4:FF:B9:E7:34:9E:11:90:77:19:2E:BE
X509v3 Authority Key Identifier:
keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
182.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
07:96:84:f4:5f:18:08:64:1e:05:fc:62:9d:f9:7c:fb:de:eb:
29:f8:ff:a2:32:8b:b3:a8:12:54:f8:85:e1:d3:e5:1c:ee:d4:
a4:86:b6:02:ef:e7:a6:38:97:2d:d3:67:29:32:3a:06:e5:3c:
58:93:a7:df:75:0d:c5:30:67:3e:b0:3e:11:39:46:f1:16:08:
dc:8e:fd:52:1c:84:4b:5f:61:12:b3:1d:ec:e8:64:27:47:bb:
3a:6d:66:13:13:73:8b:d4:92:20:e5:c1:54:f2:65:97:9b:ed:
1e:4a:41:58:0c:b6:74:55:13:26:2d:2b:7a:10:58:e1:1a:bb:
24:1a:af:e2:b2:37:8e:98:cc:eb:d1:e7:a6:34:8a:0a:3d:f2:
3e:fe:59:9f:96:3c:b8:29:35:d9:46:54:2f:83:2f:23:04:3e:
f9:60:c8:24:1b:5b:31:b5:c5:34:26:4f:dc:c1:52:82:c8:86:
94:b0:39:82:3c:62:98:9d:c0:14:5f:60:bc:ec:5c:13:90:fb:
a4:5e:03:45:e2:b6:08:d5:cc:bb:75:69:c4:b6:ff:32:d6:b5:
ed:3a:43:ea:f2:86:e4:87:2c:e9:8f:99:bb:6f:e8:4f:b8:7b:
22:57:d6:6b:6f:ad:45:98:00:00:6c:f1:45:60:c6:a2:e3:3d:
75:b2:21:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:14:04 2026 by rpki-client