
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/8CCD4284ECEB11F08F189C11746F56BC.roa
File: 8CCD4284ECEB11F08F189C11746F56BC.roa (raw, json)
Hash identifier: B9wwelihVNbWqG3EWwGK+ZW8jF7M6pX43MoH5Y0lk+Y=
Subject key identifier: 59:C6:EF:03:0E:DD:60:86:31:0E:86:E0:54:2D:3E:AD:06:90:3A:1E
Certificate issuer: /CN=A9147A12/serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Certificate serial: 20
Authority key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/8CCD4284ECEB11F08F189C11746F56BC.roa
Signing time: Sun 01 Mar 2026 05:46:42 +0000
ROA not before: Thu 08 Jan 2026 23:41:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 192.43.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Validity
Not Before: Jan 8 23:41:27 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3d2c1-0d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:db:44:36:2e:1d:37:f9:f7:e0:95:cc:cb:22:
08:fe:7c:b2:0e:5d:e0:ac:10:b4:0d:7e:81:82:b5:
c1:4e:c0:6e:a3:bb:cc:a4:e3:75:70:cd:07:04:a0:
f6:6b:6c:59:4d:00:dd:60:4f:61:da:b7:d3:3d:8e:
1c:90:00:01:49:4a:0e:1d:a2:d2:02:01:cf:cd:ef:
e6:b1:d6:ab:62:9f:30:91:dd:d9:d9:cd:a9:1f:ec:
0c:86:5e:47:f6:62:7a:b5:4c:7e:61:60:21:97:0f:
24:bc:8d:f7:ab:9d:af:87:a7:8c:6a:25:7e:20:00:
d9:ab:62:57:07:3a:b7:15:a3:f1:95:1e:11:48:5e:
c7:92:a8:17:e4:cf:2e:6b:3d:61:fc:cb:4a:2f:47:
e1:91:22:fe:4f:e2:9e:b9:ee:d9:55:bb:83:8c:3b:
9e:f8:da:83:ed:70:cb:f3:6a:63:2d:d0:43:00:ea:
91:f8:06:40:55:b9:1b:3e:9b:8a:bb:bd:dd:7d:cc:
e0:0b:1a:c7:17:31:a9:e3:7f:8a:b5:7e:29:d8:1b:
27:d4:36:53:8a:8e:24:1c:96:1f:98:e7:1d:18:85:
75:b2:62:6c:e0:86:e2:97:ae:22:37:43:01:ae:b0:
ef:2a:a3:c5:0a:9c:94:96:87:e6:0a:ae:6e:31:37:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C6:EF:03:0E:DD:60:86:31:0E:86:E0:54:2D:3E:AD:06:90:3A:1E
X509v3 Authority Key Identifier:
keyid:62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/8CCD4284ECEB11F08F189C11746F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
192.43.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:8c:15:29:66:d2:7f:60:13:14:77:df:88:e1:f0:94:d1:c2:
12:08:88:14:52:9f:1c:97:b6:ed:2d:8b:14:18:58:94:d1:b8:
87:38:d9:ed:57:e1:03:c0:ed:93:89:4b:4f:04:e1:b3:0a:be:
8f:1b:ac:b6:c2:d4:9a:e0:38:c0:7b:37:6f:09:b3:77:e6:d1:
2c:28:b5:de:11:10:16:41:ce:ea:66:18:c9:24:be:d3:8a:bc:
bb:fb:1d:97:8d:55:a0:8e:cf:9f:3f:85:4a:e9:ec:df:fe:24:
85:b9:b8:8d:d8:00:82:59:63:89:78:93:ef:23:0d:28:61:f8:
08:96:c8:a6:aa:f0:15:c9:0f:7d:e1:ec:54:b0:ed:40:7e:fd:
6b:a2:f7:51:9f:dc:06:6d:43:43:82:4d:23:80:2d:d2:78:a4:
d9:75:bb:fd:fe:ac:f6:bc:34:86:e8:b6:46:ae:55:15:06:a2:
1d:ab:45:de:e4:1b:a6:bd:49:36:46:04:2a:91:bf:33:43:35:
1a:3c:6e:79:58:28:0a:8b:1a:df:c4:77:0b:60:2f:e5:a5:b0:
9e:e5:c0:35:98:ef:19:f9:3c:dc:15:8c:e6:66:22:5d:b4:8e:
8f:8f:48:67:49:f7:89:8f:53:5a:14:e1:d1:fa:40:a0:13:e0:
4c:a6:59:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:52 2026 by rpki-client