
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/D9624ED082FD11F088ACD36DC4F9AE02.roa
File: D9624ED082FD11F088ACD36DC4F9AE02.roa (raw, json)
Hash identifier: x04ROYFrMT9oBHbHLSP4ELtb1xdWEg+KH0XVVfaWkMo=
Subject key identifier: 8D:6C:FA:48:F8:DC:FC:5C:26:EC:51:D3:B1:60:A7:EB:63:F6:D1:FD
Certificate issuer: /CN=A9176E5A/serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE
Certificate serial: 64
Authority key identifier: B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/D9624ED082FD11F088ACD36DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:29:33 +0000
ROA not before: Fri 31 Oct 2025 07:51:56 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 1221
IP address blocks: 203.14.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl
rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176E5A, serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE
Validity
Not Before: Oct 31 07:51:56 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a3f8ed-c0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:3f:b1:cb:18:f4:71:00:7e:ad:08:5d:e1:
83:00:e4:b4:5c:27:c4:20:af:de:5b:98:c4:58:13:
ad:2e:f3:b9:4b:e4:d1:c3:ea:02:b5:72:95:76:52:
ae:6b:ea:c2:b1:12:b5:92:c8:46:37:f5:04:18:94:
1d:ac:98:74:5d:b9:40:71:0c:07:46:2f:46:6a:09:
62:d1:66:2d:a3:0e:ff:0c:91:e6:5c:8a:b8:0a:3e:
36:c7:23:f5:b0:6f:24:94:e9:78:22:3a:61:cc:a3:
54:97:f0:4c:74:fd:8b:9c:eb:36:31:30:5a:0a:d7:
79:52:f4:08:ca:12:e5:87:02:61:59:d7:bf:f5:91:
5a:87:73:80:ec:d4:fd:82:01:bd:72:2d:37:af:70:
8e:ee:83:20:a0:0b:e6:87:b9:08:d0:8e:5b:24:4b:
24:68:8f:06:62:20:0a:93:62:d4:02:54:bd:4a:96:
98:b2:b1:19:8e:dc:9d:cf:3d:90:26:ba:93:18:b9:
02:23:b8:a9:be:c8:88:57:6a:53:63:fc:20:9a:51:
e8:45:32:b7:f9:3d:3c:34:3d:ca:8a:48:94:c3:80:
e8:de:ef:21:5b:e7:24:0b:42:b9:0f:9e:50:c7:f1:
99:e2:7e:b8:77:58:87:3a:5e:8c:da:64:b8:28:45:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6C:FA:48:F8:DC:FC:5C:26:EC:51:D3:B1:60:A7:EB:63:F6:D1:FD
X509v3 Authority Key Identifier:
keyid:B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/D9624ED082FD11F088ACD36DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.14.116.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:95:8b:d9:33:ac:c6:f3:5d:0a:28:9d:ca:97:77:4e:96:85:
d7:2a:5f:61:98:75:65:a1:5e:55:9e:1e:2a:a7:e4:12:56:73:
23:00:a3:53:62:a2:d6:47:e7:40:e9:9b:9d:25:5d:80:9c:a6:
09:95:b7:9c:be:23:ba:f3:94:e5:0b:c3:7f:c2:fc:0f:7f:87:
a2:f9:83:20:8f:13:fb:ba:33:01:3f:02:fb:c0:51:9f:72:0c:
23:d9:ce:ce:dc:2d:28:7f:f0:39:a2:df:29:05:a2:ad:37:0e:
df:aa:ab:a1:65:3f:06:2d:74:1f:d1:5d:b9:23:39:9b:31:fa:
dd:bc:f3:48:83:d2:b2:ce:bd:9b:3f:e2:82:8e:39:d9:4d:63:
a4:7d:1e:d4:34:0e:02:56:fc:8b:86:ed:75:b9:01:fc:9b:cd:
f7:4a:a0:11:b5:dc:2f:63:75:43:1a:87:9a:0e:72:ce:6c:3f:
44:27:d4:d3:43:f2:dc:b8:27:0c:f3:a6:dd:c5:2f:83:01:f1:
35:98:69:d9:aa:c3:fa:69:94:e6:2e:7c:6c:52:7c:b4:6a:1a:
0b:e3:40:c2:b4:e2:e9:3c:4c:c8:b5:23:8e:84:e7:c6:d6:54:
a5:b7:7c:e6:11:e5:a4:4f:8a:8d:d8:a1:31:39:b4:98:f9:fa:
5a:f7:ef:94
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NkU1QTExMC8GA1UEBRMoQjE1MjRGQkU0NjVGRTRGQjk5RkU2MTFERkMwNDBGNTEw
QzExNjhGRTAeFw0yNTEwMzEwNzUxNTZaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNmOGVkLWMwZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0WT+xyxj0cQB+rQhd4YMA5LRcJ8Qgr95bmMRYE60u87lL5NHD6gK1cpV2Uq5r
6sKxErWSyEY39QQYlB2smHRduUBxDAdGL0ZqCWLRZi2jDv8MkeZcirgKPjbHI/Ww
bySU6XgiOmHMo1SX8Ex0/Yuc6zYxMFoK13lS9AjKEuWHAmFZ17/1kVqHc4Ds1P2C
Ab1yLTevcI7ugyCgC+aHuQjQjlskSyRojwZiIAqTYtQCVL1KlpiysRmO3J3PPZAm
upMYuQIjuKm+yIhXalNj/CCaUehFMrf5PTw0PcqKSJTDgOje7yFb5yQLQrkPnlDH
8Znifrh3WIc6XozaZLgoRay3AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUjWz6SPjc
/Fwm7FHTsWCn62P20f0wHwYDVR0jBBgwFoAUsVJPvkZf5PuZ/mEd/AQPUQwRaP4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTVBLzgwMzc5ODM4ODJG
RDExRjBBRTBGODc2QUM0RjlBRTAyL3NWSlB2a1pmNVB1Wl9tRWRfQVFQVVF3UmFQ
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc1ZKUHZrWmY1UHVaX21FZF9BUVBVUXdSYVA0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkU1QS84MDM3OTgzODgyRkQxMUYwQUUwRjg3NkFDNEY5QUUwMi9EOTYyNEVEMDgy
RkQxMUYwODhBQ0QzNkRDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAHLDnQwDQYJKoZIhvcNAQELBQADggEBAG6Vi9kzrMbzXQooncqXd06W
hdcqX2GYdWWhXlWeHiqn5BJWcyMAo1NiotZH50Dpm50lXYCcpgmVt5y+I7rzlOUL
w3/C/A9/h6L5gyCPE/u6MwE/AvvAUZ9yDCPZzs7cLSh/8Dmi3ykFoq03Dt+qq6Fl
PwYtdB/RXbkjOZsx+t2880iD0rLOvZs/4oKOOdlNY6R9HtQ0DgJW/IuG7XW5Afyb
zfdKoBG13C9jdUMah5oOcs5sP0Qn1NND8ty4Jwzzpt3FL4MB8TWYadmqw/pplOYu
fGxSfLRqGgvjQMK04uk8TMi1I46E58bWVKW3fOYR5aRPio3YoTE5tJj5+lr375Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:18 2026 by rpki-client