
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/24D8D69CADAE11EBB6E7565AC4F9AE02.roa
File: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (raw, json)
Hash identifier: HKoKRFcJwi5Gs9u7ltKGml2Yd1/FTu80z0zBCUgrM9M=
Subject key identifier: 77:3E:0F:E3:28:E0:E8:B9:2E:52:B7:1F:27:52:F5:16:54:6A:78:C7
Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial: 06FE
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/24D8D69CADAE11EBB6E7565AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:35:46 +0000
ROA not before: Sat 14 Jun 2025 22:41:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64063
IP address blocks: 103.164.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1790 (0x6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Validity
Not Before: Jun 14 22:41:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a46ae2-ccf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:8c:f6:65:3b:6a:cf:e6:25:da:62:0f:17:
88:50:7d:0b:83:40:06:ef:8c:3e:c4:75:e8:07:8f:
14:d4:4b:7b:a2:d0:e7:13:1f:e5:89:8a:09:fc:5b:
42:c7:f8:80:05:ae:b8:37:75:db:38:8a:44:34:8c:
aa:b2:1f:cd:eb:96:64:cd:96:2c:ce:ee:a6:ac:25:
2b:71:dc:d7:12:b1:88:47:b1:7a:1d:a3:65:b7:67:
53:f5:78:f1:d2:36:da:aa:61:84:5c:45:d9:91:38:
ec:f2:39:99:2e:fb:b7:3b:d1:09:fb:bb:e9:73:92:
9d:de:e6:a2:a7:63:d5:79:62:13:09:1f:6d:43:c6:
6f:f4:77:29:00:c8:53:9f:21:a6:a7:95:6c:f4:60:
9c:41:dd:6b:d2:c2:4e:1c:ff:d2:da:12:e6:75:5b:
10:31:2e:ef:8a:e7:ab:a3:68:fb:4d:73:9b:70:d5:
1d:04:c6:da:c4:11:5e:a7:3d:46:1a:75:e5:52:e9:
b5:f6:f0:85:34:de:46:0f:5a:56:5c:65:27:de:e9:
dd:7c:86:c6:ba:9c:f7:07:66:e3:32:b0:23:db:62:
45:9f:40:0c:c4:07:8d:73:f5:d6:42:3f:2d:09:b0:
d8:b7:d6:9e:0c:22:41:91:66:2f:eb:78:07:dc:06:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3E:0F:E3:28:E0:E8:B9:2E:52:B7:1F:27:52:F5:16:54:6A:78:C7
X509v3 Authority Key Identifier:
keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/24D8D69CADAE11EBB6E7565AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.164.254.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a9:a2:05:eb:3a:69:7f:b2:da:af:11:9a:b4:1e:83:e7:74:
7e:d3:b7:19:47:6e:3a:0f:b2:d6:cc:d3:4f:71:dd:b6:6a:70:
89:a0:d0:63:06:e9:e4:96:70:89:4a:f2:c1:13:65:c2:a2:82:
6f:44:09:a2:ac:8b:4e:9f:49:c9:74:28:1f:2f:cd:7a:7f:bd:
83:dc:b3:6a:d8:b8:ca:9d:d4:19:0c:f5:3d:42:1f:27:1a:80:
3f:1e:4b:65:32:13:68:dc:79:1e:6d:25:a0:fd:68:7d:9f:40:
c3:f5:6e:c7:77:b6:d5:8d:59:0e:36:f3:89:82:49:e9:92:a2:
22:bf:45:a2:f2:a4:27:2e:4a:21:46:d5:dc:8f:44:6b:95:9e:
7e:9e:c0:ad:01:a6:ec:ee:f2:25:83:79:88:46:13:39:ae:d6:
0c:d0:1c:1b:6c:fd:29:af:ea:0e:8c:7c:60:ab:e5:6f:15:20:
d9:b7:f5:9a:15:57:5c:e3:eb:49:0c:76:e6:9f:1f:dc:9e:86:
fe:45:1c:b9:88:03:e6:f4:23:9d:fb:db:95:88:02:67:c8:ae:
e0:39:a2:45:55:d4:f5:7b:ff:e8:d2:07:e2:09:75:37:56:55:
23:35:f6:75:e7:40:93:dd:87:7f:14:21:72:d7:8a:40:2f:67:
33:d4:ff:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:19 2026 by rpki-client