
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/E225E68E397411EC8120D135C4F9AE02.roa
File: E225E68E397411EC8120D135C4F9AE02.roa (raw, json)
Hash identifier: 7te+cPgcfpvpCMVkthOWObu0R1Pa/2uNM+7VktoCVs4=
Subject key identifier: 84:DF:06:69:C6:A8:51:42:8F:27:22:87:B4:99:42:EF:EC:28:29:3E
Certificate issuer: /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
Certificate serial: 052A
Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/E225E68E397411EC8120D135C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:44:35 +0000
ROA not before: Sat 06 Dec 2025 22:36:42 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 148974
IP address blocks: 103.175.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl
rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F45, serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
Validity
Not Before: Dec 6 22:36:42 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a434b3-f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:74:77:1a:c2:ac:7b:14:52:9e:80:e0:4c:
e5:a7:77:ec:a0:75:0f:4b:28:49:52:41:81:40:6b:
d1:15:05:9d:d5:50:bf:e0:08:e1:fe:9e:df:29:ef:
53:2a:c9:bf:a6:4a:aa:37:ba:c0:ed:65:18:1b:b2:
3c:a5:82:06:b3:88:9a:df:99:8c:e3:96:4d:78:2f:
37:1f:0f:5e:4f:d2:20:49:05:09:76:61:26:72:0e:
48:23:2d:62:80:e2:b1:ef:94:6a:65:1b:9f:5d:a3:
0f:87:9f:da:6c:11:ff:ae:00:cd:31:31:b3:75:18:
c4:2c:0e:38:5c:26:b5:b8:b0:9a:85:a7:0d:1c:76:
d0:6b:00:19:9b:2e:60:06:2b:81:da:a6:6f:8d:17:
bf:0a:29:46:14:12:a4:00:3a:5d:97:cf:74:b6:a2:
d6:8c:5a:b1:86:69:e1:b0:a4:14:d4:3c:80:b0:59:
69:e6:88:72:0d:8a:12:3a:a3:84:1a:5c:1d:41:ca:
4a:ee:fe:08:6b:38:d4:a7:36:a8:cf:c6:a6:7a:dc:
54:34:b0:07:02:74:33:55:15:f0:88:08:34:47:2a:
0f:e2:35:a6:17:5a:a7:52:8e:07:a0:44:80:c3:7c:
62:12:81:09:37:f6:77:9a:9e:75:29:06:80:50:cd:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DF:06:69:C6:A8:51:42:8F:27:22:87:B4:99:42:EF:EC:28:29:3E
X509v3 Authority Key Identifier:
keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/E225E68E397411EC8120D135C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.175.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2b:fb:4e:0b:ba:ea:10:d3:7f:7b:0a:dd:2b:7c:d6:ff:38:
05:0e:f4:b8:18:94:2b:e7:de:1f:55:61:ae:ad:c5:f5:b9:0c:
12:5b:a4:e2:5c:11:45:fc:e3:bc:cb:c4:70:80:9a:87:5d:86:
24:ef:a8:a0:c8:c7:1b:f8:13:b1:c1:93:c8:64:03:ef:36:3a:
51:2b:77:a2:65:68:32:af:56:61:04:77:60:24:68:ef:43:bb:
5a:c1:0e:3c:20:0b:55:43:9c:f0:e2:23:e5:05:9d:2e:4a:e0:
13:94:7b:e8:e9:53:47:c4:4c:2a:e7:ca:05:0d:d1:87:4d:97:
0a:64:78:87:7d:1e:7d:29:89:d6:c0:1c:43:50:8f:1a:50:59:
61:8e:17:b2:31:05:58:9d:7a:f4:95:0a:d3:1e:67:ac:1d:3d:
75:01:d6:90:8b:4e:57:0b:65:d5:0c:25:df:f4:46:8b:6c:00:
bf:17:72:60:c4:88:19:e1:56:5d:01:33:0d:62:65:1c:7f:ea:
6e:3c:7a:4d:7f:93:37:7a:3a:ad:cd:e9:4b:85:54:cd:a7:c0:
ea:bf:30:1d:0c:d8:a2:48:0f:c2:6e:d4:40:ef:1c:ef:dc:74:
70:c7:3d:01:00:97:6b:90:3d:1a:d0:7a:10:ce:74:e1:76:b1:
30:82:45:ac
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRGNDUxMTAvBgNVBAUTKDYwMTBCQ0M2NUNCOUNDRjAyQ0Y3RUQyOUVDNzVFNEQ2
MjJCREYzRjAwHhcNMjUxMjA2MjIzNjQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzRiMy1mMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAndt0dxrCrHsUUp6A4Ezlp3fsoHUPSyhJUkGBQGvRFQWd1VC/4Ajh/p7fKe9T
Ksm/pkqqN7rA7WUYG7I8pYIGs4ia35mM45ZNeC83Hw9eT9IgSQUJdmEmcg5IIy1i
gOKx75RqZRufXaMPh5/abBH/rgDNMTGzdRjELA44XCa1uLCahacNHHbQawAZmy5g
BiuB2qZvjRe/CilGFBKkADpdl890tqLWjFqxhmnhsKQU1DyAsFlp5ohyDYoSOqOE
GlwdQcpK7v4IazjUpzaoz8ametxUNLAHAnQzVRXwiAg0RyoP4jWmF1qnUo4HoESA
w3xiEoEJN/Z3mp51KQaAUM3zTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFITfBmnG
qFFCjycih7SZQu/sKCk+MB8GA1UdIwQYMBaAFGAQvMZcuczwLPftKex15NYivfPw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY0NS9ENzZGRjA0NDM5
NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQQXM5LTBwN0hYazFpSzk4
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lCQzh4bHk1elBBczktMHA3SFhrMWlLOThfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDRGNDUvRDc2RkYwNDQzOTcwMTFFQzlCNjVCQTE2QzRGOUFFMDIvRTIyNUU2OEUz
OTc0MTFFQzgxMjBEMTM1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ68RMA0GCSqGSIb3DQEBCwUAA4IBAQBKK/tOC7rqENN/ewrdK3zW
/zgFDvS4GJQr594fVWGurcX1uQwSW6TiXBFF/OO8y8RwgJqHXYYk76igyMcb+BOx
wZPIZAPvNjpRK3eiZWgyr1ZhBHdgJGjvQ7tawQ48IAtVQ5zw4iPlBZ0uSuATlHvo
6VNHxEwq58oFDdGHTZcKZHiHfR59KYnWwBxDUI8aUFlhjheyMQVYnXr0lQrTHmes
HT11AdaQi05XC2XVDCXf9EaLbAC/F3JgxIgZ4VZdATMNYmUcf+puPHpNf5M3ejqt
zelLhVTNp8DqvzAdDNiiSA/CbtRA7xzv3HRwxz0BAJdrkD0a0HoQznThdrEwgkWs
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:19 2026 by rpki-client