
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/2E280FE4839511F0A13CF851C4F9AE02.roa
File: 2E280FE4839511F0A13CF851C4F9AE02.roa (raw, json)
Hash identifier: T6JxQ23nF6nu6igZiptqJrekrjIGNlEpDC+DdF+V8UE=
Subject key identifier: 66:A2:47:3B:40:FC:A2:C9:62:AA:17:57:E0:40:B8:6D:E7:74:F3:8F
Certificate issuer: /CN=A9134E06/serialNumber=B240BC7070F1BDD764AB00B2268B28975B351F81
Certificate serial: 6C
Authority key identifier: B2:40:BC:70:70:F1:BD:D7:64:AB:00:B2:26:8B:28:97:5B:35:1F:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/2E280FE4839511F0A13CF851C4F9AE02.roa
Signing time: Sun 01 Mar 2026 05:59:57 +0000
ROA not before: Thu 13 Nov 2025 05:53:05 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 8075
IP address blocks: 203.17.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.crl
rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134E06, serialNumber=B240BC7070F1BDD764AB00B2268B28975B351F81
Validity
Not Before: Nov 13 05:53:05 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d5dd-7c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:00:aa:15:37:7c:eb:19:cc:6e:cb:5f:26:
93:0f:75:e4:ab:3a:20:29:d2:2a:d2:78:a8:a9:4d:
b4:74:d4:23:47:44:c0:a0:69:28:77:1a:fe:67:f1:
ac:74:c5:67:bb:70:f4:9f:90:a5:12:e0:a6:21:49:
1b:ca:94:2e:7e:9d:54:a1:bb:50:c1:cc:b2:e0:52:
99:06:c1:f8:9f:48:12:7e:b7:2d:a0:59:2f:3e:a5:
5e:0d:e4:ea:b2:5d:05:da:a3:5d:75:c7:d4:75:51:
a2:66:fc:31:d2:f2:5c:87:aa:7d:03:94:57:cc:1f:
0e:4b:62:44:57:0a:50:8b:f0:86:0e:02:d7:89:3f:
a2:e6:99:4a:b9:23:0e:d2:2e:81:6b:ac:53:28:3a:
59:b9:f6:22:f2:96:5b:83:dd:bd:4a:85:e4:23:a9:
3d:e0:00:83:0b:24:f5:5f:3c:dd:78:52:4b:8a:dc:
73:82:0d:88:0f:01:10:86:45:fa:45:43:3c:61:98:
2f:88:a3:59:51:28:a0:83:e8:bb:ad:d3:42:3c:ba:
a9:6a:e9:2a:0b:a6:6e:18:7d:8c:f8:17:56:c8:fe:
06:5a:0e:a2:2d:ee:c7:bf:bd:36:1c:12:53:80:16:
e9:97:b3:9c:a4:03:c6:4d:fe:af:f6:77:16:cf:d8:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A2:47:3B:40:FC:A2:C9:62:AA:17:57:E0:40:B8:6D:E7:74:F3:8F
X509v3 Authority Key Identifier:
keyid:B2:40:BC:70:70:F1:BD:D7:64:AB:00:B2:26:8B:28:97:5B:35:1F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/2E280FE4839511F0A13CF851C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.17.220.0/23
Signature Algorithm: sha256WithRSAEncryption
86:a4:2e:f2:0b:07:63:7a:3c:f4:e5:60:b6:65:ea:1a:66:a2:
1d:a9:2a:26:a7:25:56:4a:cb:a1:f7:9a:e0:b4:0f:20:12:81:
5f:66:99:2b:8b:0a:e9:5c:1a:28:81:10:0c:b7:49:4a:30:31:
27:ce:fd:8b:65:3c:ed:5f:68:5e:e9:25:52:06:94:de:94:2f:
b7:97:da:12:05:05:46:23:df:b2:e7:10:78:47:f5:94:72:71:
03:37:ef:ac:fc:b7:90:66:4b:8e:e8:63:e1:be:b7:ee:74:31:
09:37:6a:63:37:b9:d3:29:14:6b:cb:5a:0d:70:50:2e:78:45:
10:de:10:72:57:31:a7:2a:96:27:ee:a2:db:29:df:d4:c8:df:
c9:55:89:6e:9b:60:a0:29:c7:b3:a8:c4:63:1f:f6:4e:65:93:
44:9c:f9:ba:08:15:58:cb:cd:0c:d1:51:7e:4a:88:8c:15:dc:
03:6f:29:7f:12:ff:fa:e7:36:4d:ad:95:98:47:b2:3c:3e:5b:
bd:43:0c:f6:c5:18:5d:e0:ff:72:06:2d:62:1f:1b:33:f8:22:
49:8c:9a:05:f3:69:3a:2f:d7:ff:dc:15:a1:21:ac:28:7b:03:
c0:fe:e9:f0:c9:97:1f:24:75:d6:a1:2a:d0:58:51:9d:1d:38:
e6:a1:3b:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:33 2026 by rpki-client