
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/18498E84AA4911F0909AC335C4F9AE02.roa
File: 18498E84AA4911F0909AC335C4F9AE02.roa (raw, json)
Hash identifier: tL8r7ZwrA8G9Ow3+rgRwQ7tcji7gVdiRGZltZQ0+9g4=
Subject key identifier: A4:50:A8:A7:85:FB:59:12:41:D5:F3:75:0D:88:CB:00:AA:F8:8F:19
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 0294
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/18498E84AA4911F0909AC335C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:44:57 +0000
ROA not before: Sun 07 Dec 2025 00:40:07 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137474
IP address blocks: 203.214.173.0/24 maxlen: 24
203.214.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Dec 7 00:40:07 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47b19-692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:58:56:96:47:c1:0a:48:34:fb:32:09:c9:
14:c5:cc:ab:6a:bc:4c:8e:89:35:65:be:da:ae:ed:
5d:31:16:86:cb:6c:05:b1:93:d5:c9:83:23:00:9a:
ad:2d:21:be:b9:fa:31:df:bd:99:a9:bf:23:d1:8a:
80:3d:40:13:7f:71:58:33:89:06:73:fd:c4:8c:c5:
14:c5:6e:d7:91:ec:33:2f:4a:9b:9f:eb:96:28:e9:
e6:86:5f:e3:73:e5:5e:71:91:a9:69:4f:ab:96:8b:
e3:27:a3:a2:95:b7:46:77:19:41:ec:00:b4:5f:9a:
6a:3f:7d:69:d4:78:d8:c9:55:00:1b:22:c7:5c:c5:
01:d9:bd:ac:66:1a:11:2f:65:5a:54:44:2b:7d:f6:
86:94:1c:8c:1e:35:f9:05:83:82:85:38:f1:63:c2:
32:71:1c:28:36:c0:3b:47:b8:54:92:2f:81:90:b7:
cc:14:eb:0a:6b:11:98:6b:f6:f8:f3:ed:4f:1e:70:
e2:d7:b2:ec:3f:7a:6a:ee:05:e7:09:5a:64:a1:63:
15:7b:6c:be:a4:27:e0:79:77:72:e8:2b:84:1f:5c:
b2:8b:6f:81:95:37:94:a1:b8:cf:d9:16:4b:3a:f3:
9f:76:5e:2d:77:25:a9:b9:13:5c:55:56:0b:b2:aa:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:50:A8:A7:85:FB:59:12:41:D5:F3:75:0D:88:CB:00:AA:F8:8F:19
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/18498E84AA4911F0909AC335C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.214.173.0/24
203.214.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:42:fe:06:f1:45:ee:ff:aa:ad:f5:bd:8a:3d:1b:c2:65:45:
9e:03:3a:06:a9:7d:ac:94:a6:33:fd:2b:db:79:8b:c3:aa:8b:
6c:18:d0:7b:d3:c4:9b:d1:c3:41:97:c3:a9:7f:64:0c:a9:42:
93:cb:84:e2:59:43:54:6e:b6:cd:53:0f:df:bb:5e:69:5f:f2:
4e:fa:34:74:c8:69:5c:32:10:d8:b0:b6:97:c7:bf:23:04:b8:
29:9c:6e:db:c9:23:7c:ff:ee:02:6f:de:5e:61:23:61:7f:25:
b5:f6:a7:35:1e:5f:7b:65:1c:a3:bb:f7:08:9b:6e:4d:7f:bb:
e8:ed:d4:d0:80:c5:b5:2d:b8:21:7b:1d:e4:5a:dd:27:22:01:
31:32:d6:a6:85:71:6a:7b:2a:c7:71:bc:ba:f0:b6:94:7a:f7:
c2:96:49:4d:54:9c:72:5e:87:c2:a8:cf:db:4d:51:81:c6:00:
c5:7e:cb:6d:2b:1b:9c:93:e9:38:e5:98:20:0d:33:3b:84:1c:
49:d8:16:75:97:3c:ef:6d:26:3b:5f:6a:48:88:38:26:f1:5f:
30:01:94:a2:0f:69:fe:a4:8e:ff:0c:5f:2e:ad:ef:b8:57:e1:
87:12:2e:0b:5f:47:82:e0:76:91:52:49:a6:ad:dc:15:82:33:
1c:27:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:03 2026 by rpki-client