
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/267A24046E7D11EAADB09659C4F9AE02.roa
File: 267A24046E7D11EAADB09659C4F9AE02.roa (raw, json)
Hash identifier: Rc31mOjrd8TQ2Wg72zaALLhrVFIwej72vnE0huDI83E=
Subject key identifier: CE:D1:5E:AD:76:F9:06:2A:EF:10:4A:94:86:C5:F4:AE:FA:80:A8:C3
Certificate issuer: /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338
Certificate serial: 0AC0
Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/267A24046E7D11EAADB09659C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:28:55 +0000
ROA not before: Tue 06 May 2025 19:59:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56266
IP address blocks: 203.119.90.0/23 maxlen: 24
2001:dd8:10::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl
rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2752 (0xac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338
Validity
Not Before: May 6 19:59:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a406d6-50b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8a:3e:9d:f7:aa:f2:b0:f8:91:53:de:02:08:
d5:5d:d6:10:2e:29:7c:a8:3b:79:a6:82:eb:06:16:
f4:89:8e:b5:aa:b9:75:9b:c0:ca:72:bd:0c:0e:7a:
ac:3b:60:58:b6:99:13:e4:2c:22:4b:69:66:54:2a:
de:31:4e:cc:56:72:82:83:c4:48:c3:7e:f4:fa:5b:
36:52:8d:fc:f9:1b:e5:f2:f2:1c:0f:5b:41:bf:25:
31:51:ee:5e:80:9e:7e:4c:50:be:e5:50:d2:63:9a:
3d:94:a5:01:8a:26:1a:70:ad:1a:2c:32:c3:e0:a5:
07:85:7f:6f:4f:50:8c:1d:ce:19:0d:23:2a:de:ae:
71:cf:53:16:40:8c:47:dd:cf:22:ac:d3:14:b8:02:
84:0a:d2:22:df:6c:b4:ef:30:c2:93:c7:ce:af:4a:
7a:1f:74:c0:0a:73:97:a1:b0:64:e2:1f:da:e4:d0:
06:68:49:7a:cf:50:e9:77:39:59:0b:1a:e5:ed:8c:
c7:cd:ba:23:95:19:0b:8e:03:51:13:43:f7:fb:90:
9d:d1:78:0b:da:53:96:b2:49:ca:db:5b:c8:47:f2:
5c:5d:f9:3d:1b:96:97:e6:c5:7f:fe:a1:7e:04:17:
41:97:eb:ba:09:86:4e:d6:2f:ef:9b:40:f5:5f:83:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D1:5E:AD:76:F9:06:2A:EF:10:4A:94:86:C5:F4:AE:FA:80:A8:C3
X509v3 Authority Key Identifier:
keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/267A24046E7D11EAADB09659C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.119.90.0/23
IPv6:
2001:dd8:10::/47
Signature Algorithm: sha256WithRSAEncryption
89:dc:c2:ca:66:8d:71:f7:47:74:5e:fe:04:f3:1f:e4:ae:e8:
01:b8:d8:21:29:51:bb:99:c5:d0:26:cc:2a:e7:78:85:46:e5:
2c:70:ca:14:b3:bc:ff:77:22:c2:04:dd:5a:f9:4e:f9:1a:ca:
94:fa:06:8e:4b:7d:60:29:92:1d:99:1a:d3:ba:1a:67:ef:b1:
a3:d4:cc:15:e8:9c:98:b6:0e:ab:15:89:e0:66:fd:32:3e:0a:
9b:73:49:64:22:f0:33:b7:39:2e:41:11:64:e9:1d:70:ee:ee:
a4:e6:a7:16:8a:1c:d1:95:40:91:7d:1f:e5:fd:57:6e:4f:db:
c5:03:59:0f:8e:96:9c:b7:d1:b0:bd:d9:66:de:9d:27:99:0e:
d4:36:29:16:2d:e9:22:ba:cc:97:07:a2:41:59:dd:cf:77:c8:
06:b3:1d:1d:7c:2e:0a:2d:49:fd:32:84:47:a3:c2:0d:7a:34:
9c:b3:13:6b:98:35:67:71:eb:61:62:83:20:b5:39:29:05:11:
00:30:ef:b4:3d:09:eb:50:d8:28:90:fb:96:ef:ad:94:a2:76:
79:35:84:f2:2c:58:8f:03:6f:84:ee:66:e3:15:a6:6a:ac:b9:
a9:5b:e5:96:d8:f9:7c:91:0a:4b:b3:63:f0:9c:88:02:a2:d7:
b3:08:cc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:05 2026 by rpki-client