
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AE51756A556B11EFA5FB1569C4F9AE02.roa
File: AE51756A556B11EFA5FB1569C4F9AE02.roa (raw, json)
Hash identifier: E4V8i1GbSrj3ckCIhJ/JtVFnax8DC57jYmR1XIQG+vk=
Subject key identifier: 9F:D4:64:34:C3:F8:46:34:87:1F:7E:40:AC:ED:D2:32:0D:33:FA:0F
Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Certificate serial: 01B8
Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AE51756A556B11EFA5FB1569C4F9AE02.roa
Signing time: Wed 09 Sep 2026 04:55:14 +0000
ROA not before: Wed 09 Sep 2026 04:55:13 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 8075
IP address blocks: 203.21.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Validity
Not Before: Sep 9 04:55:13 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa0e6b1-7c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:67:0c:7d:98:0b:c6:31:0d:97:34:2c:40:6a:
ba:0b:f6:1c:39:ad:f0:f3:1f:d7:1d:e7:70:e8:41:
ee:6b:19:9b:03:5f:74:61:01:20:c6:b1:87:b9:ed:
7d:a3:27:fb:67:4a:76:b6:6f:4c:59:d7:62:b9:6d:
a5:1d:93:1c:c5:93:9a:5c:cf:fd:eb:b8:f1:d1:29:
02:3c:53:fb:f7:64:78:0d:ad:1d:f2:28:a3:c5:c2:
ce:68:b6:df:55:6d:9a:8a:ed:91:5a:24:51:7b:7e:
39:e5:17:d0:e8:79:bc:6d:82:38:97:3d:f3:f6:f5:
a5:e6:ca:83:03:0e:38:19:98:f1:5c:05:24:03:8a:
d1:8b:4e:e3:fc:7d:d7:37:a2:82:ac:38:b6:c1:2a:
d7:c3:df:2f:a1:48:c2:c9:b0:32:ec:49:de:c8:4a:
94:bc:88:a1:bb:46:c6:9a:6d:30:80:cf:58:4b:3a:
cf:0e:ea:6c:72:2a:07:4a:96:d6:e3:27:fb:0d:5d:
6a:f2:5a:89:5f:1a:51:62:a6:80:22:de:98:8f:43:
10:cf:01:7c:b0:e0:93:21:3c:99:0b:b2:a1:5a:ed:
04:95:96:5e:a8:c0:f7:1d:99:a6:41:36:e9:ae:7d:
fc:ab:cf:10:1e:3e:07:bc:4d:e8:7b:3a:7f:af:e2:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D4:64:34:C3:F8:46:34:87:1F:7E:40:AC:ED:D2:32:0D:33:FA:0F
X509v3 Authority Key Identifier:
keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AE51756A556B11EFA5FB1569C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.21.152.0/23
Signature Algorithm: sha256WithRSAEncryption
39:20:87:5e:f8:33:38:f2:5e:74:fb:3a:1f:86:fb:7c:82:f9:
09:67:c8:2e:ad:d2:9f:fa:d1:5f:79:cb:8b:26:8d:b4:bd:58:
b7:59:5c:2f:d8:30:33:5c:18:e6:70:c2:bb:23:81:7b:cb:2c:
95:6e:17:a2:1d:cf:44:45:b6:28:5a:dd:d3:19:c4:2a:d2:96:
13:f0:5f:0d:5a:f3:f3:c7:08:3e:aa:52:dc:26:ee:14:44:30:
9e:39:8b:90:5c:82:81:cc:0a:13:03:62:fd:02:55:e8:b6:84:
c9:b8:4d:7f:5a:e4:77:a4:0f:1c:49:ab:ce:e6:3f:a7:de:33:
72:10:02:67:20:50:a9:97:aa:99:f9:cf:85:a5:84:e6:45:5a:
7a:40:8e:54:19:2c:b3:b4:8b:9a:ae:18:af:de:fb:cf:16:d7:
87:79:f1:01:2b:c6:68:4c:34:14:99:b2:72:6d:1a:d3:d4:cf:
09:ca:07:b8:fd:78:38:df:07:d2:6f:90:20:70:3a:31:c3:9e:
d9:e9:0d:7e:02:c8:81:ab:ef:50:0f:18:60:2c:d9:76:72:9e:
66:ce:86:90:f7:ff:e2:ed:8e:7e:0f:18:c0:ee:6c:22:97:78:
69:9b:fe:92:57:3a:74:3f:0d:15:37:71:7e:b7:0a:55:2e:e0:
a9:5c:6a:fd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNEMTIxMTAvBgNVBAUTKDVBOEI2MUJDNTNBMzI0RDdBMkI0RjQxNTNEMDc3NDZF
QzJBMzM1RDIwHhcNMjYwOTA5MDQ1NTEzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwZTZiMS03YzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9mcMfZgLxjENlzQsQGq6C/YcOa3w8x/XHedw6EHuaxmbA190YQEgxrGHue19
oyf7Z0p2tm9MWddiuW2lHZMcxZOaXM/967jx0SkCPFP792R4Da0d8iijxcLOaLbf
VW2aiu2RWiRRe3455RfQ6Hm8bYI4lz3z9vWl5sqDAw44GZjxXAUkA4rRi07j/H3X
N6KCrDi2wSrXw98voUjCybAy7EneyEqUvIihu0bGmm0wgM9YSzrPDupscioHSpbW
4yf7DV1q8lqJXxpRYqaAIt6Yj0MQzwF8sOCTITyZC7KhWu0ElZZeqMD3HZmmQTbp
rn38q88QHj4HvE3oezp/r+LMmQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ/UZDTD
+EY0hx9+QKzt0jINM/oPMB8GA1UdIwQYMBaAFFqLYbxToyTXorT0FT0HdG7CozXS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QxMi9BQjg5MzRGMjUy
QzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpOZWl0UFFWUFFkMGJzS2pO
ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5kSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzNEMTIvQUI4OTM0RjI1MkM0MTFFRjhEREZENTNGQzRGOUFFMDIvQUU1MTc1NkE1
NTZCMTFFRkE1RkIxNTY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQByxWYMA0GCSqGSIb3DQEBCwUAA4IBAQA5IIde+DM48l50+zofhvt8
gvkJZ8gurdKf+tFfecuLJo20vVi3WVwv2DAzXBjmcMK7I4F7yyyVbheiHc9ERbYo
Wt3TGcQq0pYT8F8NWvPzxwg+qlLcJu4URDCeOYuQXIKBzAoTA2L9AlXotoTJuE1/
WuR3pA8cSavO5j+n3jNyEAJnIFCpl6qZ+c+FpYTmRVp6QI5UGSyztIuarhiv3vvP
FteHefEBK8ZoTDQUmbJybRrT1M8Jyge4/Xg43wfSb5AgcDoxw57Z6Q1+AsiBq+9Q
DxhgLNl2cp5mzoaQ9//i7Y5+DxjA7mwil3hpm/6SVzp0Pw0VN3F+twpVLuCpXGr9
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:49:00 2026 by rpki-client