
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/927AA46C549211EFB6D69465C4F9AE02.roa
File: 927AA46C549211EFB6D69465C4F9AE02.roa (raw, json)
Hash identifier: HLjD7Dlj4QNO0JkX6mdLipIuyOmY6BPG8xeaEhp4ZP8=
Subject key identifier: 39:C9:D2:9F:6A:D0:79:0E:66:CB:AF:3F:1A:D7:65:82:7D:58:23:86
Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial: 047B
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/927AA46C549211EFB6D69465C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:30:45 +0000
ROA not before: Thu 11 Sep 2025 01:08:27 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 1221
IP address blocks: 202.36.14.0/24 maxlen: 24
203.16.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147 (0x47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Validity
Not Before: Sep 11 01:08:27 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a477c5-9f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:49:0b:e0:5a:49:db:2f:84:89:22:9f:cf:
58:58:b9:22:a9:83:b7:44:b2:c5:b6:0d:00:a7:a2:
85:bd:d1:b2:86:e5:96:c2:20:00:33:dc:7d:c5:9a:
95:71:4a:ca:e0:13:b7:b5:9f:ee:d6:6f:8b:22:70:
52:e4:4e:d9:50:5d:d3:6a:39:e7:a0:4a:91:13:83:
5c:0f:95:38:87:17:1e:ee:56:13:d2:8e:3a:aa:06:
74:8b:c8:7f:80:f4:8f:90:fa:87:a7:34:40:94:5e:
aa:dd:3d:b0:27:76:d4:60:8b:2c:b5:c2:6a:9e:77:
12:98:2a:ee:7d:f4:8a:a8:b2:8b:9b:29:3f:2c:64:
ed:d7:28:53:1e:3b:bf:53:f5:db:e6:89:27:16:2d:
e6:46:f9:52:9c:27:ec:b6:a9:25:fc:72:ca:67:17:
30:8c:a7:70:d7:99:3c:6e:06:3e:d7:c0:7d:5c:58:
00:d9:09:b7:2d:e1:0c:6f:38:be:74:f3:3a:41:53:
d5:85:ae:24:fc:13:40:8a:4b:01:59:03:89:a8:18:
35:da:a1:67:58:96:ee:56:24:85:09:35:45:19:ad:
66:c1:f2:8c:b4:fb:5d:4d:ff:3b:44:c9:32:48:c7:
a4:19:d0:4a:0d:2b:18:0a:ac:06:2d:35:f1:86:b3:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C9:D2:9F:6A:D0:79:0E:66:CB:AF:3F:1A:D7:65:82:7D:58:23:86
X509v3 Authority Key Identifier:
keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/927AA46C549211EFB6D69465C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.36.14.0/24
203.16.140.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b6:67:22:c7:55:e0:e0:79:c1:73:3f:18:d0:2a:17:37:76:
bf:85:c1:50:cb:82:58:a3:3b:8d:f2:28:30:a5:09:ee:38:ea:
9a:36:8f:56:10:f9:f8:7c:21:e1:15:10:31:76:8a:7e:0c:32:
fb:e9:7d:21:55:26:e0:0a:a8:e8:12:9d:fd:6c:71:76:de:2c:
5e:85:5d:83:55:d0:26:5a:4a:93:df:e2:93:57:49:af:3f:4c:
c6:48:37:b5:36:58:fb:17:85:bb:8e:c3:7b:9d:34:60:d6:89:
c4:71:31:db:66:d5:31:4a:19:ca:6b:18:8c:2b:47:6e:08:c2:
af:87:ed:1e:72:36:30:03:f7:66:48:05:76:ee:94:76:55:88:
9b:3b:1e:ce:f8:57:ed:05:ad:40:7d:04:03:4d:35:38:de:89:
c2:d7:77:2d:a3:0d:57:2b:e3:b5:de:fe:79:dd:ed:9a:b7:41:
07:ab:14:40:1c:bd:0e:ef:27:9d:0d:f8:7a:0f:4e:82:2c:2e:
33:dd:f8:60:e2:6b:b8:31:bc:79:db:f6:13:23:20:a0:ec:ef:
13:a2:84:69:6c:4b:5f:3f:65:b4:62:fe:09:1a:fb:f2:20:23:
e0:95:51:af:c3:3a:bc:17:fa:68:2c:5d:06:0f:3f:81:e8:b6:
e4:b1:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:09 2026 by rpki-client