
$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
File: 2F43497CA16711EFBB0B733EC4F9AE02.roa (raw, json)
Hash identifier: d0DrwtBLPlNbHT1ondF9pbn7O3K+iP2daTNxBgfDMdE=
Subject key identifier: F4:2B:68:C7:2D:45:21:29:E9:AA:0D:6C:91:8A:26:05:0F:84:90:9F
Certificate issuer: /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial: 028F
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
Signing time: Fri 05 Jun 2026 02:32:07 +0000
ROA not before: Fri 05 Jun 2026 02:32:07 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135060
IP address blocks: 203.34.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Validity
Not Before: Jun 5 02:32:07 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a223527-db9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:7d:e5:67:37:b5:f2:85:1d:ce:32:41:a3:
fa:f0:6d:a9:33:8f:ce:30:0f:56:b8:69:06:38:90:
0a:ed:7b:3b:2e:bd:4b:4f:34:30:bb:75:68:00:bb:
94:cd:3d:54:1b:36:b9:87:49:8a:65:60:2d:50:73:
bb:39:e3:30:1b:b1:41:de:dc:d3:7c:49:01:59:d3:
51:98:77:90:10:f7:9b:fe:78:e5:15:97:01:87:9e:
0c:56:6a:b0:a5:39:a2:ee:44:c9:b0:72:95:fe:fe:
1a:37:42:0f:ea:d8:bc:1c:d5:fc:89:9e:79:c8:4b:
65:64:79:8a:f6:4b:cc:72:0f:27:5a:06:a5:f0:05:
8e:85:ad:5c:db:81:9d:9b:f6:90:da:b2:f1:04:ff:
2b:b0:ac:b5:8a:fb:19:28:c6:94:b1:1e:50:c6:c8:
fb:60:b9:4f:20:e2:3f:d0:65:42:55:b4:e5:5f:bf:
6b:98:52:43:32:a7:fa:4e:1b:1e:76:d6:7c:14:9e:
cf:39:81:ea:66:17:65:48:de:73:08:30:83:4e:85:
a8:35:aa:dc:e8:f4:00:29:15:24:e4:76:96:94:4a:
72:6a:0c:96:f1:14:32:92:88:36:5d:b1:7e:ee:24:
31:f2:11:f1:b9:04:bf:d1:18:1c:9b:13:19:36:91:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2B:68:C7:2D:45:21:29:E9:AA:0D:6C:91:8A:26:05:0F:84:90:9F
X509v3 Authority Key Identifier:
keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.34.177.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ff:26:83:8d:e9:51:2f:e7:ab:38:dc:ce:03:5d:40:20:39:
66:0a:df:d8:7c:fd:56:ad:dc:cf:4d:78:4a:e1:aa:31:c9:f8:
1e:fd:26:35:01:db:4d:48:69:3c:3e:7a:c0:c8:d2:2f:45:2e:
46:2a:7a:c2:bf:70:43:30:72:3e:2a:6a:ba:32:b9:70:72:0f:
67:ae:18:58:1e:21:03:0c:7c:5d:df:ea:ae:27:9d:f2:26:3c:
33:d2:2b:8e:73:a8:d4:13:34:e9:cc:44:f5:e4:aa:33:11:6a:
1d:ce:53:5d:c2:8f:25:cd:db:e5:81:ba:87:14:08:77:f2:c9:
43:d4:86:1a:7a:81:cc:bb:fe:d2:3a:db:ec:d7:74:6d:c9:a4:
c4:18:02:12:58:87:d3:8e:e5:4f:88:7b:86:49:ee:db:6a:16:
c7:3f:07:5e:1f:f2:9f:12:ac:58:94:7e:77:19:a4:eb:d4:79:
70:83:2f:4c:bc:53:30:84:79:a1:ca:3d:7f:f1:e7:17:12:88:
7b:87:4c:6e:d6:2a:79:b9:e6:e0:23:a4:99:ad:70:bf:30:b5:
dd:96:63:50:fd:a5:82:bf:ed:52:df:7e:88:3c:01:21:b0:3d:
c7:6a:31:fd:b1:20:37:47:04:f8:3a:60:37:8f:81:4e:2d:3c:
23:d8:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:46:14 2026 by rpki-client