
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/014A2E90BC5C11EF9108934FC4F9AE02.roa
File: 014A2E90BC5C11EF9108934FC4F9AE02.roa (raw, json)
Hash identifier: zxfTHKrHEVsREM+8xz5AnHMO6VTB3ebrJdSrmp7BSxA=
Subject key identifier: 87:B7:3A:0A:C7:4F:A2:51:C4:A2:E4:D4:BF:08:78:DE:63:E0:88:C1
Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Certificate serial: 01B6
Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/014A2E90BC5C11EF9108934FC4F9AE02.roa
Signing time: Wed 09 Sep 2026 04:55:09 +0000
ROA not before: Wed 09 Sep 2026 04:55:09 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 14618
IP address blocks: 203.0.207.0/24 maxlen: 24
203.0.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Validity
Not Before: Sep 9 04:55:09 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa0e6ad-3c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:6e:96:ef:09:40:ae:46:3c:3e:08:e6:eb:
33:ba:c8:ec:78:3c:78:78:34:73:67:60:6e:f6:ce:
48:b0:e2:50:54:25:04:77:6e:8e:dd:64:4c:0c:62:
54:e4:2f:c7:9e:7f:f2:48:58:3c:f9:5f:45:e1:1c:
e6:80:d4:fb:57:21:40:c0:29:39:fe:eb:01:53:b0:
29:d6:1f:c0:a3:c5:1d:ef:ce:aa:1e:c6:6f:6f:0b:
3f:75:45:fa:a7:64:2d:c2:78:f7:c8:03:b8:f3:fc:
2d:08:80:66:d6:6b:c9:a2:ce:e2:fa:b7:c9:a2:3c:
2d:8f:a0:e2:c9:b3:8a:1a:6f:d6:c7:20:db:d0:e0:
1b:8f:37:82:3c:30:b2:8e:f3:83:b1:b5:24:f2:1d:
26:5a:db:52:1c:fe:a2:4d:b9:be:1f:59:95:34:b1:
c1:3a:78:2c:95:f3:4c:83:16:51:1e:ae:e8:f2:84:
cf:25:09:4f:fd:cb:72:70:08:60:d6:6e:98:bc:2d:
01:11:29:82:0d:45:f6:ac:ca:22:ee:67:00:da:af:
c8:b0:35:6b:a3:47:cf:71:4b:a4:1b:bb:9f:84:7b:
c0:f6:fe:0d:14:83:fd:30:64:f2:53:36:2a:84:e0:
71:c9:9c:5f:23:43:46:d9:8c:ea:f0:b0:28:d9:b2:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B7:3A:0A:C7:4F:A2:51:C4:A2:E4:D4:BF:08:78:DE:63:E0:88:C1
X509v3 Authority Key Identifier:
keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/014A2E90BC5C11EF9108934FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.0.207.0-203.0.208.255
Signature Algorithm: sha256WithRSAEncryption
0b:53:6b:25:53:6c:ff:a9:60:59:1a:8f:62:49:01:1a:19:e4:
c3:db:8c:d3:92:d3:97:15:b6:dc:a6:01:ee:5c:25:32:c2:4a:
b9:3c:50:d8:77:ff:bb:4e:2a:65:c0:a5:e0:e5:b7:43:25:9e:
3d:11:45:04:3c:da:11:10:d6:59:4a:6b:0d:f9:6b:11:05:59:
d1:38:82:1a:30:58:af:4d:0d:3d:16:40:18:54:48:46:07:d3:
20:b6:a7:ee:9d:bc:bf:fc:9a:4a:d3:f2:9b:22:db:6a:e8:1e:
5d:d6:29:d7:1e:79:99:6b:8b:91:45:99:a3:b6:e8:39:30:ac:
af:b8:6a:80:95:d7:3a:2d:cc:aa:35:3b:39:3f:41:b3:a4:86:
e9:68:df:0f:ff:c1:02:86:eb:dd:90:5b:06:bc:72:58:93:49:
d1:a2:49:fe:31:fd:f9:7b:e9:bd:1b:ea:21:7c:6c:b3:4c:8f:
75:0c:b7:1d:09:fb:a4:96:e9:3d:7d:b6:5e:27:08:4b:e0:c5:
49:a0:a8:61:dd:56:cd:93:47:ac:c9:23:10:18:a9:5c:b3:96:
46:aa:78:aa:5f:ca:5f:91:65:fd:c4:7b:fb:ae:34:a7:15:5a:
62:3f:37:b3:6d:01:19:63:dd:59:f1:55:2d:46:a4:1e:fa:4b:
52:82:e5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:48:19 2026 by rpki-client