
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/240B1914D90B11EF95020982C4F9AE02.roa
File: 240B1914D90B11EF95020982C4F9AE02.roa (raw, json)
Hash identifier: jcPLOxSXVBuZGKBmjhai/8yeBk68tQM48wGmrirDldc=
Subject key identifier: 2C:5E:3A:C6:3F:E9:7A:04:C1:24:7C:E3:D5:57:88:05:A0:74:A3:73
Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Certificate serial: D2
Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/240B1914D90B11EF95020982C4F9AE02.roa
Signing time: Mon 23 Feb 2026 05:25:16 +0000
ROA not before: Mon 23 Feb 2026 05:25:16 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136557
IP address blocks: 161.248.254.0/24 maxlen: 24
161.248.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Validity
Not Before: Feb 23 05:25:16 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=699be4bc-c80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:0e:71:21:01:af:48:a2:1c:67:23:e0:39:
b4:88:22:fa:d9:8d:f6:41:fe:34:a1:1f:22:22:12:
55:61:5c:6d:43:48:9d:12:78:49:e1:4e:08:3f:96:
5a:d6:fb:3b:09:bf:d2:96:0f:dc:f6:3e:8c:3d:c3:
b2:c0:0e:96:a5:27:1b:0e:de:d8:b9:06:6d:17:c1:
9f:17:bc:cc:0e:a6:cc:b6:a0:cd:11:d3:db:90:ed:
82:d4:09:87:22:25:81:e4:8f:88:9c:1d:29:3b:fc:
f4:ed:fb:98:ce:1c:41:72:13:f1:c2:b9:68:5b:3e:
3e:62:86:16:64:6a:5c:16:e1:5e:19:80:3b:2e:af:
44:70:18:69:14:34:28:71:9c:5f:f2:47:00:01:e0:
38:79:2f:60:d6:c7:ed:3f:79:a7:1f:61:6c:ca:4b:
4f:eb:f0:f6:c1:84:42:a0:77:32:e2:78:f9:ad:fb:
8c:47:69:1b:82:fd:aa:b4:31:a0:d5:fc:bd:8b:0c:
87:3f:d7:47:84:12:f4:3d:d7:db:89:86:8a:2c:f2:
aa:35:05:d1:0a:31:37:a8:c7:9c:c4:07:27:a2:2d:
ac:9e:00:ab:b1:f2:6e:51:ba:e2:e3:9b:14:1e:c7:
60:14:67:c8:66:70:1a:e1:e3:bd:db:1c:7c:4f:fc:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5E:3A:C6:3F:E9:7A:04:C1:24:7C:E3:D5:57:88:05:A0:74:A3:73
X509v3 Authority Key Identifier:
keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/240B1914D90B11EF95020982C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:93:9e:48:ed:4f:07:43:91:50:50:26:f4:41:4c:d2:26:a3:
03:8d:06:61:0e:4d:f1:47:f8:f5:1a:00:4d:39:49:97:9e:76:
de:de:e1:ec:ba:9f:c5:fa:8c:ad:a5:3b:d6:ab:c1:43:48:2c:
89:97:92:fe:f2:09:14:d3:94:4b:44:74:59:b1:0e:94:eb:1c:
41:df:22:e9:48:e5:e6:cb:d8:92:ed:7c:95:04:86:4a:87:9c:
1d:e9:4f:58:7d:51:55:1b:bc:c8:de:68:ae:ea:cf:69:ce:9d:
11:0f:b7:cd:e3:42:1b:93:3d:ab:ee:cd:f7:22:06:c4:7d:41:
ea:7d:91:43:49:93:0e:a2:ca:36:f8:7f:bb:3b:e9:66:29:23:
b2:11:f4:b6:03:90:04:b5:a7:a1:36:85:dd:db:68:e8:09:4d:
84:22:c2:55:04:7a:03:d5:1d:d6:6f:0f:40:63:74:44:e4:75:
b1:37:0a:19:ea:dd:5c:97:45:6a:c9:0c:bf:6d:af:49:30:a9:
2b:ca:9a:6e:5c:d3:a0:c2:e8:03:e3:66:19:4a:5a:6f:54:94:
6d:6a:37:4a:8e:3f:9c:e4:7a:d1:18:6a:12:ae:3b:93:c7:9d:
b2:39:0f:04:da:10:a0:00:3e:5f:ac:ae:50:bd:ee:b9:20:3a:
ef:b1:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:19 2026 by rpki-client