
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/02A3523ABC5C11EF9108934FC4F9AE02.roa
File: 02A3523ABC5C11EF9108934FC4F9AE02.roa (raw, json)
Hash identifier: 5JXzFCyibCyq2fa3F79OvI6v/hGcm9VVM6RcX/Kchp4=
Subject key identifier: AD:4E:F4:56:D9:BD:99:05:1E:14:14:3B:0F:5A:32:12:C7:41:7D:63
Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Certificate serial: 0149
Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/02A3523ABC5C11EF9108934FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:59:50 +0000
ROA not before: Wed 27 Aug 2025 06:12:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 203.0.207.0/24 maxlen: 24
203.0.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Validity
Not Before: Aug 27 06:12:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a589c6-9803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:24:c2:89:52:a2:bb:2b:1f:6e:3c:7c:f1:
b1:71:97:6d:bf:69:db:92:4b:19:34:3d:39:7b:c0:
cc:8b:12:11:10:84:79:36:c4:8a:6b:14:46:99:eb:
7b:d0:d8:78:3e:56:7d:81:e5:dd:f3:c2:7f:a4:98:
d2:87:89:d2:dd:e6:dd:50:68:fb:d8:2f:27:66:61:
56:27:8f:0d:d8:89:56:d4:1c:61:b7:6e:8d:37:31:
0a:e8:b2:72:e3:3d:a0:43:b8:b6:64:94:80:3e:ce:
d0:7b:71:b4:97:3f:3b:9c:42:f3:90:32:29:48:1d:
06:80:37:b5:0d:68:21:1b:40:fe:63:48:60:3c:29:
6f:1f:8a:15:61:fa:31:69:7f:78:8e:f0:43:68:05:
9f:0c:66:18:1d:b6:e4:68:42:07:8f:a8:b3:01:bd:
85:82:2e:39:ba:b6:f0:df:17:92:ab:b2:49:3d:2f:
fd:f2:0a:d9:c2:c4:39:71:f8:7c:38:c9:f8:41:61:
d5:77:95:7d:5b:93:ed:97:c0:d0:0e:e3:95:bf:b2:
ae:c1:2d:0b:9e:a6:24:62:18:82:94:eb:15:50:3a:
f1:46:d8:9d:cb:a3:0f:54:50:4b:5a:f5:4d:d8:e3:
4b:05:8d:6e:c3:c6:b8:7c:68:04:4b:15:e7:b9:fd:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4E:F4:56:D9:BD:99:05:1E:14:14:3B:0F:5A:32:12:C7:41:7D:63
X509v3 Authority Key Identifier:
keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/02A3523ABC5C11EF9108934FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.0.207.0-203.0.208.255
Signature Algorithm: sha256WithRSAEncryption
61:b2:c8:92:e9:49:20:4b:8e:cc:3a:f2:8a:58:39:a5:ba:d0:
72:42:eb:83:9d:69:c7:88:c0:dd:ca:58:70:03:b2:82:08:cf:
a5:e3:cc:8d:41:87:5a:e2:52:bf:4e:d5:f9:39:b2:08:c2:9e:
d9:d3:bb:9b:fd:de:35:58:7a:e7:57:33:02:a0:fc:5e:5c:3b:
14:24:65:a3:66:e1:82:c2:98:fd:a1:58:2d:f2:91:75:8d:64:
d1:da:99:64:28:a1:71:58:93:87:72:72:2a:0f:32:dd:bf:bf:
73:3a:b9:de:cc:ad:44:70:86:e6:58:81:a1:fd:97:33:db:c1:
54:10:d9:2f:8d:f5:ba:d2:2a:2e:e4:56:a0:b2:9f:ad:0d:14:
94:49:95:a3:c6:d6:28:21:10:05:40:15:e0:83:99:da:67:1a:
ce:39:ab:69:e7:06:00:30:06:b8:1e:2e:d8:56:fc:2e:06:18:
39:3b:c3:8e:07:b1:35:a8:8d:e6:1a:b7:38:f2:0d:c1:ed:6a:
cf:ea:75:85:e2:55:62:d0:67:86:fa:2f:e2:f4:bf:65:09:6d:
23:0c:0f:67:39:9b:53:43:28:a1:c8:10:01:64:a4:20:07:b1:
a3:ca:16:fe:16:47:23:42:71:fc:4a:0d:55:b3:45:53:90:93:
36:a1:e4:25
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNEMTIxMTAvBgNVBAUTKDVBOEI2MUJDNTNBMzI0RDdBMkI0RjQxNTNEMDc3NDZF
QzJBMzM1RDIwHhcNMjUwODI3MDYxMjQ0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODljNi05ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0bEkwolSorsrH248fPGxcZdtv2nbkksZND05e8DMixIREIR5NsSKaxRGmet7
0Nh4PlZ9geXd88J/pJjSh4nS3ebdUGj72C8nZmFWJ48N2IlW1Bxht26NNzEK6LJy
4z2gQ7i2ZJSAPs7Qe3G0lz87nELzkDIpSB0GgDe1DWghG0D+Y0hgPClvH4oVYfox
aX94jvBDaAWfDGYYHbbkaEIHj6izAb2Fgi45urbw3xeSq7JJPS/98grZwsQ5cfh8
OMn4QWHVd5V9W5Ptl8DQDuOVv7KuwS0LnqYkYhiClOsVUDrxRtidy6MPVFBLWvVN
2ONLBY1uw8a4fGgESxXnuf3i5wIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFK1O9FbZ
vZkFHhQUOw9aMhLHQX1jMB8GA1UdIwQYMBaAFFqLYbxToyTXorT0FT0HdG7CozXS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QxMi9BQjg5MzRGMjUy
QzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpOZWl0UFFWUFFkMGJzS2pO
ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5kSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzNEMTIvQUI4OTM0RjI1MkM0MTFFRjhEREZENTNGQzRGOUFFMDIvMDJBMzUyM0FC
QzVDMTFFRjkxMDg5MzRGQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBADLAM8DBADLANAwDQYJKoZIhvcNAQELBQADggEBAGGyyJLpSSBL
jsw68opYOaW60HJC64OdaceIwN3KWHADsoIIz6XjzI1Bh1riUr9O1fk5sgjCntnT
u5v93jVYeudXMwKg/F5cOxQkZaNm4YLCmP2hWC3ykXWNZNHamWQooXFYk4dycioP
Mt2/v3M6ud7MrURwhuZYgaH9lzPbwVQQ2S+N9brSKi7kVqCyn60NFJRJlaPG1igh
EAVAFeCDmdpnGs45q2nnBgAwBrgeLthW/C4GGDk7w44HsTWojeYatzjyDcHtas/q
dYXiVWLQZ4b6L+L0v2UJbSMMD2c5m1NDKKHIEAFkpCAHsaPKFv4WRyNCcfxKDVWz
RVOQkzah5CU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:52 2026 by rpki-client