
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/248A4FFE478F11EEABD3353BC4F9AE02.roa
File: 248A4FFE478F11EEABD3353BC4F9AE02.roa (raw, json)
Hash identifier: CMpAtUweVr+EqAuGahhTVQ09EFxzxXQiaIMB3NuVn84=
Subject key identifier: 0E:97:2D:E8:97:EA:4A:EA:A2:FB:B1:A0:2E:47:7A:DC:CF:DF:65:B1
Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Certificate serial: 01DD
Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/248A4FFE478F11EEABD3353BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:37:23 +0000
ROA not before: Sun 29 Jun 2025 03:31:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 17721
IP address blocks: 202.123.48.0/20 maxlen: 20
2404:9800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Validity
Not Before: Jun 29 03:31:55 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3ecb2-1f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:22:72:8a:ba:16:da:82:e5:1d:be:be:94:
9d:0a:2f:fa:fa:c5:d8:3b:02:14:e6:76:1a:53:71:
36:84:d0:eb:3b:65:53:ff:96:75:fc:fc:39:84:0a:
76:49:aa:3b:11:a6:5f:c4:93:60:b5:4d:e7:84:12:
53:f5:83:a7:4c:68:ae:28:70:76:05:b3:58:a4:7a:
31:97:44:de:17:f3:39:8a:b3:77:36:c5:8d:45:86:
36:5f:05:ed:4e:98:f3:49:33:9b:8b:fb:21:01:66:
88:78:c7:51:c0:2f:88:4a:e6:d9:80:8d:f7:6c:57:
23:61:3b:f2:03:80:12:55:fc:33:6b:62:ad:7c:f2:
2e:56:67:e5:c5:f1:4e:47:b0:00:dc:c1:a9:cf:c2:
6f:48:96:07:7a:d2:2e:9b:7f:5f:95:2d:28:36:7e:
fe:78:66:72:4b:09:93:b9:1d:61:28:41:7c:17:b1:
61:aa:d9:7c:68:36:c7:20:85:0e:ae:eb:6b:69:8b:
5e:ec:c0:b0:d4:39:35:57:f9:9f:04:f4:5e:49:fe:
41:ef:8e:3e:00:5e:17:6b:b5:df:81:90:62:91:0f:
8a:4c:fd:0a:55:e3:a7:fc:f8:e4:7f:4c:e2:0a:0c:
4b:80:20:c5:81:b6:cb:74:57:e7:95:55:2d:36:af:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:97:2D:E8:97:EA:4A:EA:A2:FB:B1:A0:2E:47:7A:DC:CF:DF:65:B1
X509v3 Authority Key Identifier:
keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/248A4FFE478F11EEABD3353BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.123.48.0/20
IPv6:
2404:9800::/32
Signature Algorithm: sha256WithRSAEncryption
42:59:b9:63:13:d1:a3:5d:b4:ce:b9:68:36:49:f7:de:e4:d8:
c8:ba:7b:0b:66:e8:ac:9a:e8:96:9b:7c:a5:f1:15:c3:bd:dd:
f3:cf:0f:9d:51:72:5a:64:e4:93:d6:51:69:63:f3:28:51:fa:
58:e6:a6:60:da:49:25:b1:45:7e:c5:71:5d:25:d4:4e:9d:f0:
72:19:7e:e1:75:cb:bc:d7:4e:28:bf:69:86:92:fe:c1:ce:65:
cb:ab:d8:50:13:ba:e2:69:1a:fd:68:73:0c:0e:70:5a:d1:72:
19:45:8d:11:f3:72:cb:5a:ce:eb:94:17:62:5d:47:72:d3:42:
3e:90:29:bd:7d:1e:b4:f5:ef:ff:4b:71:42:1b:5d:97:bf:3b:
79:78:a6:16:59:7c:f8:8c:ff:01:ed:b3:a4:d0:55:48:d7:95:
49:b4:d8:28:c8:fe:9c:a5:51:0f:9d:58:e8:b7:74:52:63:be:
e0:24:e5:8b:4f:eb:7c:f8:ec:bc:7d:61:f8:86:0c:22:1d:54:
0b:c4:e5:b0:df:83:01:03:92:70:32:9d:9f:5a:e3:ba:d4:df:
1a:82:ca:8a:d0:13:0f:93:2d:45:33:9f:3e:fe:d0:dd:0b:80:
5a:23:ef:41:01:80:f0:ac:ce:b5:24:89:ee:c2:e5:15:86:8f:
55:e9:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:54 2026 by rpki-client