
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/24FDC2446F3211EDA3DCF033C4F9AE02.roa
File: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (raw, json)
Hash identifier: yctNWWiZhPVXhgLMblmsUERi9o24TYY6zYqQrUfyMsc=
Subject key identifier: 1B:0F:EF:2A:BE:62:49:20:64:04:2F:1E:EC:E9:8B:2B:3F:DE:12:0C
Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Certificate serial: 0277
Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/24FDC2446F3211EDA3DCF033C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:17:34 +0000
ROA not before: Thu 19 Jun 2025 02:39:30 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 16509
IP address blocks: 203.55.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Validity
Not Before: Jun 19 02:39:30 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4588e-36e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:c1:ae:47:0a:51:2f:f6:0c:f5:de:6b:63:
e2:1c:db:dc:db:46:78:39:65:cf:1e:82:9c:f2:90:
8c:d6:98:f8:0b:5a:10:de:ed:89:e4:9a:39:2a:19:
e1:bc:f7:79:b1:c9:96:96:80:c7:f8:2f:5c:e3:13:
0d:22:1c:29:d8:65:74:7e:e6:0d:9d:88:63:ff:df:
20:78:bc:17:21:fe:9f:43:ec:df:f1:da:d9:36:22:
c3:35:00:59:c0:79:8c:42:3a:cb:f1:62:2b:e0:3d:
fd:60:3f:a6:96:54:7e:c7:5b:cf:fb:ec:24:2f:cc:
42:c8:b7:82:da:1e:cb:2a:62:02:ae:14:22:a3:bc:
e3:4c:1b:f7:c5:53:64:b2:1e:85:f7:e1:2e:f3:9a:
a7:9a:11:0d:eb:cb:41:75:80:41:ec:cf:25:35:42:
24:3f:16:6d:be:40:66:be:04:8d:ba:f0:b0:6f:21:
6a:11:19:30:eb:bf:4a:83:f0:d7:41:ab:c8:87:d6:
79:c6:91:74:59:86:2e:6e:06:da:16:cc:77:b8:ac:
88:5e:fb:e2:bd:e9:d7:c1:a1:58:ba:f5:45:a4:9d:
1a:66:8a:23:e0:3a:30:6c:65:6a:34:29:29:04:4c:
e9:96:43:b6:4e:81:70:82:2c:4b:d4:05:31:f0:93:
ee:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0F:EF:2A:BE:62:49:20:64:04:2F:1E:EC:E9:8B:2B:3F:DE:12:0C
X509v3 Authority Key Identifier:
keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/24FDC2446F3211EDA3DCF033C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.55.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:3a:db:01:22:68:e9:79:b2:78:e3:09:63:ab:de:62:15:a8:
8e:8a:d5:ba:cb:40:b6:a1:ba:ca:b2:80:81:cf:d3:aa:09:1b:
a7:08:45:e8:dd:56:05:3b:33:2e:04:27:25:73:44:d9:ad:09:
76:ca:cd:81:b3:ae:23:74:8b:da:df:bb:51:50:69:87:38:bc:
f0:5a:f8:42:21:4c:e6:ff:ed:a2:5a:5e:b0:64:5f:a7:9d:67:
82:64:7a:9c:6a:2d:95:83:42:c5:3c:3a:1b:ec:1c:7a:53:f7:
3c:4e:6d:d3:58:60:61:5b:86:3c:d8:99:65:9b:f1:a8:a2:c6:
db:5e:a0:43:2f:ee:1a:13:f0:2d:4f:93:04:b6:94:24:c9:5f:
4e:4f:d7:b0:74:4f:54:88:7f:b3:ab:d8:34:f0:ed:5f:cb:86:
fa:e5:46:f8:af:b2:9f:95:85:45:26:87:49:41:ee:4c:b2:c8:
c6:48:c9:68:5f:98:89:5c:26:82:56:87:1b:4b:f3:f8:40:b7:
e6:70:ce:2e:11:0b:dc:38:9c:32:c4:0c:52:21:d0:45:62:68:
00:a0:54:ab:fd:0f:78:59:dd:a4:10:df:d9:95:f2:f1:88:54:
15:e7:c6:01:99:6f:d1:a3:16:99:1f:17:c7:d5:85:6c:7a:7f:
a5:df:02:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:09:25 2026 by rpki-client