
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/97F15FD8068D11EF839A3054C4F9AE02.roa
File: 97F15FD8068D11EF839A3054C4F9AE02.roa (raw, json)
Hash identifier: ZR91Xkb9WqCmTw6bc0Cn1+z+jAwWu9sevUXMNk3wUeg=
Subject key identifier: 57:B6:9B:EB:27:77:37:DA:43:88:ED:57:99:92:E6:65:2B:F6:72:1F
Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
Certificate serial: 019B
Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/97F15FD8068D11EF839A3054C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:42:15 +0000
ROA not before: Sat 31 May 2025 05:15:48 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 45442
IP address blocks: 202.14.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl
rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
Validity
Not Before: May 31 05:15:48 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3edd7-918f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:ec:07:7e:76:80:e4:14:bd:56:ce:4f:7a:
38:a1:f5:6b:bd:ba:f4:11:a0:e6:76:5d:a8:c6:90:
71:1e:3d:99:0d:e8:74:28:76:a4:2c:de:df:56:e5:
03:aa:b7:64:f4:f9:57:a6:41:8f:e5:04:23:2a:23:
61:2c:aa:56:f0:a3:71:4b:bd:85:b2:d2:40:c5:a8:
5e:57:18:1e:60:8c:8a:d1:bf:ce:79:e4:e6:bc:cf:
3f:17:8d:70:19:f5:6c:e8:21:48:81:d9:f8:0c:66:
6e:3a:14:4e:51:1d:f9:e2:a6:16:94:a2:87:0e:8e:
1f:5b:e9:6c:cc:1c:ed:14:d1:db:56:19:59:3a:1b:
ab:4a:c7:6c:88:4a:2e:ba:af:27:b0:52:92:15:e1:
70:1d:7a:a9:22:45:35:40:03:2a:7d:88:6f:7e:c4:
3d:79:6a:af:4e:da:8e:43:8a:42:4f:75:56:43:56:
de:bd:36:d8:40:4a:44:e7:b8:7c:1e:62:f3:2c:61:
60:f7:99:0b:97:f7:5d:85:41:91:b4:a9:21:b4:91:
99:93:d2:a6:de:d4:82:c8:e5:a5:52:23:d8:b6:70:
87:3e:8a:b9:c0:3d:2a:93:f5:af:bd:a5:9c:7c:e1:
c4:00:04:d0:b1:77:4d:1a:b5:3b:74:2e:e7:4b:e0:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B6:9B:EB:27:77:37:DA:43:88:ED:57:99:92:E6:65:2B:F6:72:1F
X509v3 Authority Key Identifier:
keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/97F15FD8068D11EF839A3054C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.14.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:4d:2a:1a:29:41:8d:d1:fc:7e:6d:9c:f2:d7:7f:8b:dc:92:
63:86:1c:10:2a:6b:a6:e1:dc:d7:9b:2a:e0:9e:91:ba:54:71:
63:ba:34:d8:48:cd:4f:d3:ff:a2:a3:a4:76:75:c0:84:a4:dc:
bd:50:ce:0f:d2:77:ac:95:91:ac:eb:ae:d2:b6:bf:ea:e0:b3:
8b:d7:8b:be:5c:cf:99:1e:25:a1:fc:e5:38:1b:b4:e7:be:90:
c7:51:ac:e1:6a:1a:8a:3a:15:ed:f2:8d:21:82:36:de:80:ba:
81:61:d0:fe:90:06:2e:29:29:cf:d5:62:0c:c8:5f:58:39:c6:
76:25:ff:62:1c:24:86:c5:8e:5b:86:3f:d3:bf:19:1d:84:23:
e2:1e:f0:60:38:ea:5b:47:34:ca:2c:9c:95:ee:d9:fe:a4:a5:
61:94:95:e0:9d:34:e7:71:83:a7:05:d5:7c:9a:11:3b:1b:8d:
29:29:98:5b:b3:01:ae:5e:71:ce:d3:3f:67:66:eb:68:20:c4:
0c:be:23:36:31:76:d4:ff:2c:92:b6:79:0f:31:7e:71:b7:15:
24:61:aa:29:6e:4a:fe:22:99:c2:5e:83:7f:89:94:82:84:93:
3b:dd:87:09:2a:7a:f1:13:26:a4:c1:c1:97:83:e7:6d:7c:34:
41:e6:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:51 2026 by rpki-client