
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/0029F6EAD41F11F0B1A47183C4F9AE02.roa
File: 0029F6EAD41F11F0B1A47183C4F9AE02.roa (raw, json)
Hash identifier: F5fxp0etukBOn3CKrqqukvD42srMqVoYQvkoxd9V4Hk=
Subject key identifier: 81:76:79:5F:BC:6E:8F:C4:B1:9E:AB:A1:43:79:14:2E:6E:0F:EF:9F
Certificate issuer: /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
Certificate serial: 0113
Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/0029F6EAD41F11F0B1A47183C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:51:01 +0000
ROA not before: Tue 09 Dec 2025 04:13:05 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137449
IP address blocks: 160.191.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl
rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
Validity
Not Before: Dec 9 04:13:05 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a595c5-6a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:ec:27:4c:18:c8:74:44:0d:db:07:e0:ac:
45:f8:4f:4e:50:62:90:82:cb:0f:c8:79:0f:f2:a3:
d4:1c:ec:1e:a0:da:d4:93:fd:ef:6a:1b:6d:26:6b:
80:88:74:f5:50:33:ae:6e:c6:16:34:25:fb:2a:e0:
ef:1c:62:8f:15:c8:d8:0c:ba:d2:33:27:ee:dd:aa:
96:05:1c:ce:c8:f8:67:f6:c5:2a:fa:c7:e3:53:a0:
b7:ff:ce:52:93:80:18:7a:a8:b1:52:e8:f9:05:25:
56:53:b3:4a:e6:14:56:f0:a1:22:30:df:66:fa:6a:
e8:4d:4b:ab:b1:6d:05:b0:43:9b:73:ea:f0:cd:5a:
f9:25:b2:ff:b5:77:89:1f:78:0b:ce:ed:f8:77:64:
f4:72:9d:0d:f9:47:86:f4:12:d2:a5:f5:3d:43:4a:
7e:1e:4d:a2:74:6b:4b:41:39:ac:3c:4f:9e:8a:af:
37:ed:64:7a:63:50:79:cb:a6:66:06:26:2d:80:c5:
53:20:44:37:a4:52:05:40:e6:42:ed:6d:b4:05:bd:
65:9b:61:8c:fb:9d:d2:34:a6:e1:88:27:24:ff:ef:
d0:23:35:8d:7c:44:4d:85:80:b8:90:48:fe:27:1b:
7c:38:80:47:ac:58:89:e9:a5:db:07:70:a0:00:fc:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:76:79:5F:BC:6E:8F:C4:B1:9E:AB:A1:43:79:14:2E:6E:0F:EF:9F
X509v3 Authority Key Identifier:
keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/0029F6EAD41F11F0B1A47183C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.149.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e5:a7:ce:58:04:59:4d:2a:6a:ff:e3:cf:b3:99:bc:f6:53:
43:0f:77:c6:b5:8c:b6:b8:2f:09:9c:6f:81:49:af:82:17:df:
66:ca:31:eb:f1:ef:7d:21:57:04:4e:ee:f7:7d:81:26:09:56:
76:2d:4e:f2:60:dc:fb:df:4f:7f:f5:90:43:66:11:a9:8a:d4:
06:b8:54:25:33:81:9c:22:88:44:21:f9:94:0b:24:6a:f5:86:
4e:90:01:4a:d5:01:dd:b0:54:87:e1:42:b1:5b:fc:07:56:18:
4b:15:1e:12:3c:08:d1:37:fb:d6:b8:25:79:4d:b3:ee:ec:c6:
c7:2a:a2:31:55:49:19:91:ba:d3:41:40:0a:28:58:b8:cf:ce:
5f:44:ba:71:3d:48:ef:08:a1:22:0f:8f:7d:85:12:af:89:70:
08:ef:89:d1:f0:6a:73:33:7a:03:8c:a0:ca:c8:59:d3:6d:67:
f7:28:e4:bd:1e:6c:7f:75:c6:a0:58:82:a3:7a:15:8d:ea:d7:
2e:2b:1b:b9:c1:cb:81:64:54:c8:2c:5f:4d:94:74:6b:c1:9e:
ad:e0:43:a8:e8:c8:b0:26:45:75:9d:2e:2c:cd:26:1b:47:8f:
61:10:8c:1a:0e:77:29:a9:e9:0d:6d:d7:ce:02:1e:f1:e2:65:
b6:c8:ea:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:31 2026 by rpki-client