
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/2B42D1D8F9B611EFB3AB154BC4F9AE02.roa
File: 2B42D1D8F9B611EFB3AB154BC4F9AE02.roa (raw, json)
Hash identifier: EILeiHdgRS5T+00CqE1QLUGZWDX5PLvwuDPP5GaU2OM=
Subject key identifier: BC:B1:88:55:A9:8F:87:45:68:09:F2:B0:97:22:60:17:BF:34:92:F5
Certificate issuer: /CN=A9169F49/serialNumber=717198CD1A4679AD9D452EE1DB02D0012A4374EC
Certificate serial: B9
Authority key identifier: 71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/2B42D1D8F9B611EFB3AB154BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:00:20 +0000
ROA not before: Wed 05 Mar 2025 11:37:08 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 38718
IP address blocks: 163.61.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.crl
rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169F49, serialNumber=717198CD1A4679AD9D452EE1DB02D0012A4374EC
Validity
Not Before: Mar 5 11:37:08 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3e403-3af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:21:62:d2:6d:ec:9d:69:4b:9e:e6:4d:13:1d:
7d:45:e4:bc:ca:9f:4a:86:be:5a:1b:20:5b:d6:00:
79:3f:22:b7:bd:d3:b3:e7:11:8d:2c:50:c2:46:f1:
78:41:95:90:5c:45:82:e0:02:26:f1:15:4a:1c:b9:
4b:26:ae:25:b8:56:d8:47:b5:df:ed:77:4e:3a:d1:
c2:c1:75:58:21:00:1f:24:00:b0:b1:06:3a:42:da:
fc:3d:53:33:cc:d7:3b:1f:f4:b8:5a:9b:a7:60:eb:
c5:ee:29:17:cf:a1:01:08:16:9a:cd:51:55:4c:5a:
f1:4b:cf:8a:a2:58:fb:ac:7d:e2:88:2c:4c:68:89:
77:b6:38:fb:29:aa:49:cd:5b:a6:a2:1d:a7:60:12:
71:3c:9e:03:04:ef:e7:7f:98:c8:af:7d:59:1a:83:
91:12:cf:93:14:8f:30:1b:4d:b0:14:dd:95:1d:72:
43:ec:2b:07:f8:49:fc:75:2a:96:15:1b:6e:f2:e0:
87:2d:a1:db:5f:5e:60:f7:c6:80:4b:cc:75:21:51:
6f:3d:5f:5b:91:33:c8:0e:cd:2c:d8:f6:13:10:f7:
c6:84:b2:92:58:65:4c:10:2b:5a:7a:2b:72:50:12:
c5:d8:c7:95:fa:63:d3:0d:1e:03:31:8f:cb:f2:9a:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:88:55:A9:8F:87:45:68:09:F2:B0:97:22:60:17:BF:34:92:F5
X509v3 Authority Key Identifier:
keyid:71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/2B42D1D8F9B611EFB3AB154BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5e:9d:31:9a:e5:dc:6b:64:6c:f1:b9:33:9b:84:7b:02:75:
42:76:a1:de:20:fe:a0:0f:e6:8c:f5:13:21:0a:8c:3e:84:ce:
45:53:d4:80:7f:8a:01:69:77:48:33:5a:0c:73:d3:67:9e:9c:
4c:a7:77:bc:63:15:07:63:e5:7d:b6:11:c6:93:c8:5e:42:0f:
a9:c2:67:0f:fe:62:0c:a6:4d:f5:62:62:c3:f0:13:49:b6:af:
24:57:d8:64:de:ce:1d:7b:58:96:9c:3b:04:ad:99:de:70:3a:
3c:7a:b6:22:20:b1:3d:09:cb:9a:df:63:71:16:6e:17:6f:06:
b2:07:06:d8:96:d4:03:43:82:64:bc:50:9a:fd:da:12:d4:08:
c1:7a:c1:a8:fd:6e:d6:88:b4:29:03:34:0d:bd:eb:5f:3e:ac:
3f:ec:40:d8:5a:4e:c9:39:ef:ec:b5:90:93:09:93:d4:d1:99:
6b:fe:28:cc:64:d1:7c:79:57:b2:cd:e4:4e:d6:7b:c0:c3:29:
dc:80:23:6b:aa:af:33:5e:c7:6e:15:99:d2:e8:73:32:f8:09:
a8:83:66:df:76:b9:cc:97:d5:4e:fd:f8:a6:ef:2d:91:ee:ce:
35:9d:9f:c0:4f:f7:f5:b2:60:ce:ed:2b:8b:97:2b:94:ba:e9:
b2:c6:7f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:57 2026 by rpki-client