
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa
File: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (raw, json)
Hash identifier: RtPGThGqwF6Lt9ZojH+6P6/SywE8f7dpOmQASMjiD/k=
Subject key identifier: 9E:64:0D:62:3C:3B:84:11:F5:69:2A:60:E8:7A:67:BA:58:DB:73:B4
Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial: 09A6
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa
Signing time: Sun 30 Aug 2026 20:41:15 +0000
ROA not before: Sun 30 Aug 2026 20:41:15 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 31898
IP address blocks: 202.173.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470 (0x9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Validity
Not Before: Aug 30 20:41:15 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a94956b-0062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:06:12:89:5c:28:54:3b:b1:29:17:16:fd:
e6:d9:09:65:c2:99:91:d6:f2:91:a0:33:ad:09:bc:
b8:21:0d:c1:db:22:ff:8b:cb:93:27:bc:f9:3d:9d:
d3:18:01:35:03:30:d0:30:0c:4c:e5:12:16:cd:a2:
51:39:31:42:57:fd:f7:ee:21:c9:37:3f:24:03:bb:
11:d5:d8:32:e6:08:2f:0d:f4:7d:db:09:ae:c1:1f:
a9:83:0d:d2:31:7a:f6:d9:65:99:33:6a:4d:e0:54:
ee:07:50:16:0b:6a:97:ca:d6:16:d8:b6:2c:17:b2:
55:7d:be:3f:b0:47:39:02:51:df:1b:82:3d:cc:66:
57:75:e3:b9:c4:63:1d:26:fc:dd:72:10:10:2c:f9:
64:a5:48:48:a0:d8:18:1d:d8:9f:ec:a8:d1:0f:a5:
e9:81:47:a2:00:d8:02:36:1d:a1:bd:1b:95:c0:3a:
46:78:13:c9:b9:3e:93:af:8d:9e:8e:22:6e:fb:29:
46:3d:81:af:7d:3c:13:b1:57:15:e9:f9:7b:f3:d0:
e5:fc:21:2c:0c:0c:de:9a:6c:f3:00:13:e0:57:af:
8b:e6:b9:29:28:e4:53:2d:58:f0:71:33:cf:cc:25:
aa:c6:08:69:06:75:88:42:9f:be:95:05:ac:53:d8:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:64:0D:62:3C:3B:84:11:F5:69:2A:60:E8:7A:67:BA:58:DB:73:B4
X509v3 Authority Key Identifier:
keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.173.27.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2c:57:3f:b8:0b:92:e9:40:04:49:ba:cf:9d:e2:12:9d:50:
00:16:13:b3:39:38:f2:ed:cd:3a:58:ee:7c:31:4f:ea:4a:ae:
e0:78:74:8e:3a:57:86:79:07:09:d1:b5:02:35:4d:49:85:9d:
ec:f4:1d:59:2f:6a:24:2f:a6:20:93:fd:fe:dd:a4:25:d8:cc:
ea:41:de:2b:cd:a0:9e:b8:d5:b4:a5:0a:7a:aa:b7:d7:51:12:
cf:1c:03:5a:2a:5b:3b:1b:f3:4e:f5:eb:da:b7:85:e0:f7:93:
90:fd:21:e2:d1:21:b5:5e:00:46:78:86:e8:7f:4c:9b:55:e4:
0a:6c:ff:c8:da:ec:db:e0:66:3d:e2:d7:cc:a4:34:79:03:21:
b6:b0:f5:cc:75:2c:5d:15:fd:56:7d:3c:14:d5:7e:b2:13:9e:
73:4f:56:65:8f:e8:fe:d5:22:5c:8e:c8:b9:b4:8c:5d:a6:2d:
0a:99:60:3d:45:88:ae:02:fb:f3:95:c0:ed:66:01:96:c2:7d:
ef:12:ac:3c:39:d2:fc:a5:d1:2e:96:3b:ed:e0:34:c0:15:e0:
5e:6c:23:be:24:6f:7f:68:f8:2e:ba:ab:5f:8b:d0:67:f1:0d:
90:ed:fa:55:60:f2:84:0d:74:79:bf:7e:4e:81:8b:d8:6e:0c:
aa:11:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:44:53 2026 by rpki-client