
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/90AE648CDA6011ED9BC6175FC4F9AE02.roa
File: 90AE648CDA6011ED9BC6175FC4F9AE02.roa (raw, json)
Hash identifier: lQyg0CLBudaLRB9B/RyMUEhoZRh1JikgjtZ3clTwdME=
Subject key identifier: A1:D6:62:0C:76:33:09:AB:79:83:72:EE:F2:6C:99:E1:1A:29:80:7C
Certificate issuer: /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Certificate serial: 0234
Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/90AE648CDA6011ED9BC6175FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:13:16 +0000
ROA not before: Wed 19 Mar 2025 03:19:18 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 135047
IP address blocks: 210.48.174.0/24 maxlen: 24
210.48.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Validity
Not Before: Mar 19 03:19:18 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4113c-b43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:3a:94:5f:94:0c:00:6b:47:85:99:99:cb:
a2:f1:78:e1:54:b9:0c:5b:e0:2b:fe:f7:7a:0a:41:
d9:5c:3d:f1:0d:58:74:0b:75:22:10:57:b9:4e:42:
39:a6:7b:2d:bf:88:8d:46:e3:c0:eb:e6:c4:1b:55:
7e:9e:27:25:43:65:38:cc:50:f3:83:ee:81:64:c2:
4c:f9:46:6d:38:3d:2d:0f:af:5e:e2:5b:b9:62:56:
c6:b9:96:05:65:b4:7c:a5:0a:9d:b6:cd:58:ba:0b:
d3:c1:90:ff:8b:6e:98:38:f1:0e:43:12:b0:7c:6f:
50:87:af:75:a1:b3:ad:7d:27:df:2b:dd:00:04:6f:
2e:eb:99:e7:53:d3:a6:59:b2:4f:71:cb:ca:1f:2d:
8c:c5:84:01:12:fa:5e:db:86:75:45:6d:2b:11:8e:
99:63:27:9f:72:75:eb:66:e3:63:4b:fd:a9:ce:fb:
cb:7d:4f:46:32:b3:9c:52:40:5d:48:94:1b:f7:15:
1f:3f:c7:42:87:63:d5:d0:88:15:2e:7b:d7:ed:b6:
43:bb:ed:8d:b3:b9:48:12:a6:2c:18:3b:be:ae:4d:
4c:98:ed:f4:9c:1f:64:74:39:8e:92:fb:2b:ce:91:
26:1e:5f:0f:68:f8:48:9e:5d:ce:d1:9d:9e:fd:96:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D6:62:0C:76:33:09:AB:79:83:72:EE:F2:6C:99:E1:1A:29:80:7C
X509v3 Authority Key Identifier:
keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/90AE648CDA6011ED9BC6175FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.48.174.0/23
Signature Algorithm: sha256WithRSAEncryption
49:91:b7:23:d6:96:a7:1b:ef:dd:80:bc:02:b7:3f:a5:ec:d0:
c0:9c:e8:b5:b0:ff:d6:4d:ac:32:1f:36:95:d2:49:d1:be:90:
23:95:73:44:91:c2:90:bd:be:1c:fc:11:4d:a4:dc:99:34:cf:
4a:3d:79:21:7a:4b:1e:6b:0f:31:ab:89:f8:0b:48:8d:9d:eb:
38:cd:9a:c2:e0:35:5e:9e:58:7e:b8:f1:cc:5b:76:84:1c:9b:
64:2b:20:ad:3f:98:7b:aa:5f:8a:7d:05:e9:bf:9f:c6:6f:53:
59:8b:6d:d6:6c:cd:ca:13:c9:77:1c:32:e5:82:bd:bf:a2:1d:
80:9d:ad:e0:5b:51:65:ba:a1:b6:51:27:3f:78:e0:ec:3a:24:
1c:7e:3c:15:80:cd:21:a0:a8:9c:7d:a4:b0:0a:c2:f3:4b:b1:
e3:60:e3:92:2b:01:c3:0c:1f:cc:0a:93:3d:ed:d8:53:37:54:
fd:08:ed:3c:21:9a:e4:f1:bd:c5:41:8b:54:ff:dd:d7:6f:42:
8d:a9:af:b6:f0:e2:a7:41:97:60:49:9c:a3:37:4b:c1:3b:1b:
15:14:c5:74:bf:af:b4:85:54:fe:b7:9a:4a:b5:da:ad:18:36:
e9:5a:54:25:74:d2:98:03:83:4f:f4:56:6f:cf:6e:c4:8e:1e:
8e:65:88:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:00 2026 by rpki-client