
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/30612F364BE411F09B3BB887C4F9AE02.roa
File: 30612F364BE411F09B3BB887C4F9AE02.roa (raw, json)
Hash identifier: eopPOPwLkEVbi55WtWRB1v9qi25upZwX13O32WrQgWU=
Subject key identifier: A4:C7:44:A3:4B:32:D4:0F:FB:40:AE:6D:CC:FC:F0:B0:EF:CA:D0:7A
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0BC6
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/30612F364BE411F09B3BB887C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:00:59 +0000
ROA not before: Wed 18 Jun 2025 01:33:08 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17497
IP address blocks: 203.168.240.0/22 maxlen: 22
203.168.240.0/24 maxlen: 24
203.168.241.0/24 maxlen: 24
203.168.242.0/24 maxlen: 24
203.168.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3014 (0xbc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Jun 18 01:33:08 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a48ceb-7070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:fd:90:a8:d1:f3:c4:51:3b:6c:3d:3c:41:
b9:0f:0c:f9:03:23:f1:45:78:85:5e:91:ac:6b:5f:
68:3c:c5:60:e1:2f:b7:5d:60:4c:2a:47:b2:36:53:
cf:d6:d2:b6:ca:4e:fa:27:1c:c4:fa:08:1f:ab:b2:
dc:f2:78:15:7a:14:1d:57:fa:96:1c:fb:b1:93:5a:
87:dc:ff:ff:50:9a:1e:37:07:45:7f:33:8c:34:46:
ba:91:8e:04:9f:5d:92:42:1a:16:f6:fe:dc:6f:4f:
c3:f7:b9:5d:02:a6:a6:d7:c6:cf:89:a3:18:7a:7c:
5c:54:15:5f:9d:36:58:be:9f:0e:46:0d:92:00:53:
15:d7:44:0e:78:ef:7e:5b:bc:78:9b:57:dc:05:23:
96:d9:6a:7d:d2:fb:7e:d8:d3:38:84:75:a8:62:85:
ea:05:8e:37:2a:8a:a9:07:4d:3f:c4:3a:a8:66:c5:
78:24:55:aa:ed:bc:1c:97:56:f2:78:5c:92:24:6c:
df:1c:eb:4a:fd:82:8b:be:8d:8c:f6:a7:17:77:f9:
07:f9:b9:1e:b1:27:96:be:46:9c:4f:be:8a:85:10:
8b:57:21:82:05:38:1e:d1:82:35:77:bb:a4:76:43:
74:61:2c:e8:e8:62:69:d5:c5:bf:5f:2c:16:8b:aa:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C7:44:A3:4B:32:D4:0F:FB:40:AE:6D:CC:FC:F0:B0:EF:CA:D0:7A
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/30612F364BE411F09B3BB887C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.168.240.0/22
Signature Algorithm: sha256WithRSAEncryption
89:97:2f:a8:99:58:f3:5f:fd:ad:f7:7e:8e:8a:7c:84:24:19:
23:8f:6b:17:ae:f6:b3:d7:05:3a:6c:a4:94:66:80:4f:f8:cd:
1e:58:ae:ea:36:96:00:9f:2e:1b:0a:8a:a3:f1:f8:e9:7c:cb:
74:86:20:7e:e5:0f:26:ff:e3:57:98:52:1b:5b:9f:8a:e3:c4:
1c:7d:85:e4:ef:00:db:99:30:61:57:1b:73:ec:22:a0:03:b5:
ea:20:46:89:aa:a5:57:13:68:4b:e4:db:27:b7:b9:7f:cc:80:
52:de:e1:37:b2:24:83:6f:ed:c6:46:dc:32:f8:fa:4c:7f:29:
68:8c:90:fc:65:44:e1:08:92:d4:e6:05:d2:25:81:27:9e:d1:
d9:07:11:7f:9e:d3:16:f8:63:40:8d:17:a3:70:19:92:e9:57:
3d:09:02:c7:b8:67:57:80:ac:0a:82:67:dd:7a:71:37:70:ae:
fb:79:59:57:c3:19:d3:4d:87:be:f1:76:7b:61:04:11:38:34:
8d:da:87:bf:d2:e2:c0:55:d1:8e:55:e3:ec:59:a8:65:ed:1a:
df:62:84:e4:b0:f1:aa:d6:80:01:91:d4:63:7c:46:92:ad:ee:
bc:f0:1a:d8:e5:a0:66:ed:7e:15:8c:f1:d1:99:93:cd:7f:3a:
4e:95:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:06 2026 by rpki-client