
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/451C283AFE4911ED9352E438C4F9AE02.roa
File: 451C283AFE4911ED9352E438C4F9AE02.roa (raw, json)
Hash identifier: 0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=
Subject key identifier: F4:BD:43:2E:A3:59:15:E5:04:5D:9A:B8:37:1B:D8:28:07:3A:2B:99
Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
Certificate serial: 0D52
Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/451C283AFE4911ED9352E438C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:56:47 +0000
ROA not before: Tue 10 Feb 2026 18:15:35 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 394811
IP address blocks: 203.23.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl
rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3410 (0xd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
Validity
Not Before: Feb 10 18:15:35 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a47ddf-2047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:aa:cb:bd:79:8d:f1:91:38:17:67:2a:cf:
bc:57:8d:2d:41:1a:fc:91:59:3d:b4:a5:87:d7:fb:
eb:fc:86:27:fd:6e:7e:2b:d9:7d:a5:dc:03:8f:10:
ba:6f:4d:70:96:94:ee:e1:2d:c1:7c:de:98:10:77:
82:0a:f8:28:8a:c7:a5:d5:6a:fd:44:0e:8e:85:2e:
d5:72:37:87:96:d2:b6:05:bc:59:73:ca:89:46:2e:
83:05:6b:44:52:2b:45:d5:65:bd:2c:e6:5b:a0:56:
ea:39:1d:03:23:f8:ec:fb:b4:d4:3b:45:3e:a1:c1:
39:be:be:ed:68:83:2a:36:17:93:9b:9d:89:1e:c6:
7e:24:3c:ed:72:db:e7:9f:cb:f7:ce:be:f6:17:fa:
a9:28:dd:3e:16:40:13:aa:c0:f3:b6:6d:e0:35:e2:
de:a1:01:d1:35:e5:48:25:1e:95:5a:2d:98:3e:b8:
76:80:e4:84:f3:87:5e:7e:95:6a:f0:47:17:26:33:
00:b9:17:6b:37:5f:a2:89:f7:86:af:07:80:d9:8a:
0b:1e:60:15:29:25:f4:ea:01:55:d8:f9:ca:bf:2a:
dc:fe:c4:dd:cf:81:45:bc:d5:b2:a3:21:22:a3:0f:
0c:d9:a3:15:9a:25:ce:c5:a1:eb:50:a0:22:81:c2:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:43:2E:A3:59:15:E5:04:5D:9A:B8:37:1B:D8:28:07:3A:2B:99
X509v3 Authority Key Identifier:
keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/451C283AFE4911ED9352E438C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.23.176.0/24
Signature Algorithm: sha256WithRSAEncryption
10:78:af:e1:6e:b0:80:34:00:06:ec:3e:c9:a0:51:e7:8f:c6:
fd:0d:8d:fd:10:2e:e6:5c:6e:ac:06:68:d4:43:63:ec:95:3c:
41:d9:15:b0:c4:e6:a8:fe:64:59:e9:25:d4:c4:c2:90:c2:7f:
e3:57:22:96:bc:40:86:47:38:c1:18:f6:48:ae:95:ca:78:29:
6b:26:d4:e0:ac:9b:4c:65:86:97:84:62:14:b8:d2:6f:07:93:
95:4e:08:b4:a8:3b:b7:3f:35:b6:9d:f0:21:05:01:8d:cc:dc:
c8:f6:36:81:c7:8b:b4:8c:21:b7:bd:7b:b1:ae:3c:23:47:b2:
ff:0a:6c:db:a2:34:10:6f:b5:79:1b:8f:e5:18:f2:a0:6a:d2:
6d:0a:6e:5b:2e:ad:91:dc:50:5a:44:4e:ef:67:8b:0e:30:06:
b4:7b:25:3b:87:93:10:de:6e:f1:45:ac:18:fd:ba:5e:40:2c:
4e:7b:5f:ef:6c:d7:5d:7a:2d:44:cc:7a:49:b5:3d:18:14:38:
31:c2:9d:4c:12:05:de:1c:64:fb:90:bd:25:fc:a7:3f:c5:93:
62:c5:a1:11:d3:44:25:69:1b:25:c6:75:57:05:e3:be:cb:b8:
72:d9:7a:e7:99:24:b5:4e:c4:cb:ba:2e:0a:3d:d1:a4:cd:93:
4d:49:51:42
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My
MEVEMUE4QzQwHhcNMjYwMjEwMTgxNTM1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2RkZi0yMDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxjaqy715jfGROBdnKs+8V40tQRr8kVk9tKWH1/vr/IYn/W5+K9l9pdwDjxC6
b01wlpTu4S3BfN6YEHeCCvgoisel1Wr9RA6OhS7VcjeHltK2BbxZc8qJRi6DBWtE
UitF1WW9LOZboFbqOR0DI/js+7TUO0U+ocE5vr7taIMqNheTm52JHsZ+JDztctvn
n8v3zr72F/qpKN0+FkATqsDztm3gNeLeoQHRNeVIJR6VWi2YPrh2gOSE84defpVq
8EcXJjMAuRdrN1+iifeGrweA2YoLHmAVKSX06gFV2PnKvyrc/sTdz4FFvNWyoyEi
ow8M2aMVmiXOxaHrUKAigcIfywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPS9Qy6j
WRXlBF2auDcb2CgHOiuZMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2
MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzRFQjUvQUZFQTI5QzIwNjE5MTFFQTg1NEEzNTE2QzRGOUFFMDIvNDUxQzI4M0FG
RTQ5MTFFRDkzNTJFNDM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyxewMA0GCSqGSIb3DQEBCwUAA4IBAQAQeK/hbrCANAAG7D7JoFHn
j8b9DY39EC7mXG6sBmjUQ2PslTxB2RWwxOao/mRZ6SXUxMKQwn/jVyKWvECGRzjB
GPZIrpXKeClrJtTgrJtMZYaXhGIUuNJvB5OVTgi0qDu3PzW2nfAhBQGNzNzI9jaB
x4u0jCG3vXuxrjwjR7L/CmzbojQQb7V5G4/lGPKgatJtCm5bLq2R3FBaRE7vZ4sO
MAa0eyU7h5MQ3m7xRawY/bpeQCxOe1/vbNddei1EzHpJtT0YFDgxwp1MEgXeHGT7
kL0l/Kc/xZNixaER00QlaRslxnVXBeO+y7hy2XrnmSS1TsTLui4KPdGkzZNNSVFC
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:25 2026 by rpki-client