
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/3A23F644121C11F1803734E51C3D8C67.roa
File: 3A23F644121C11F1803734E51C3D8C67.roa (raw, json)
Hash identifier: PxVzozWMWZJHVHWWgBPWDcSOqoZl2sTI6MwnvGCgEDM=
Subject key identifier: 96:47:E1:00:CE:AC:EC:AB:7E:DB:41:96:D8:C1:23:9F:FD:1E:A4:B2
Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial: 0BED
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/3A23F644121C11F1803734E51C3D8C67.roa
Signing time: Wed 25 Feb 2026 07:33:07 +0000
ROA not before: Wed 25 Feb 2026 07:33:07 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 45.115.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Validity
Not Before: Feb 25 07:33:07 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=699ea5b3-aa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:df:1d:b1:da:7b:32:56:bc:32:e1:a7:42:
99:07:84:31:6c:f9:4f:d7:b2:f5:f3:9a:d8:e3:8d:
b9:c5:13:f7:9c:b5:e6:90:57:6f:0f:3a:a6:9a:a3:
b2:14:78:d1:7d:68:f5:a4:68:58:5f:ae:43:18:28:
73:d5:1a:79:55:84:4a:45:fa:34:0f:86:f8:01:dd:
f8:76:f1:c2:51:d6:0f:c3:e2:52:fe:93:7a:74:79:
25:dd:b4:c1:d2:22:6a:ef:9b:41:db:29:70:7b:90:
e1:bf:41:c4:eb:0d:eb:f5:a5:97:06:73:27:54:d1:
79:14:cc:5f:ab:26:56:c3:58:3c:66:e1:97:8d:2c:
9b:d8:6d:44:a8:37:88:f8:3a:48:57:69:a3:d1:7a:
43:f7:d0:81:b7:20:9f:a2:da:33:1f:18:bf:b7:ca:
86:64:d3:56:c7:f2:89:c4:24:53:3e:0a:5c:00:ed:
2d:33:be:8c:5c:2e:8b:16:e1:bc:be:dc:ef:c4:69:
4e:a8:97:4f:56:83:ae:86:bd:f3:fb:c1:75:39:84:
d6:99:3c:54:1d:94:43:59:bd:57:00:32:af:42:f9:
5e:dc:63:d3:46:78:e8:97:17:31:82:f3:58:d8:f2:
bd:75:fc:76:e0:38:66:6e:80:bd:af:78:ea:04:c9:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:47:E1:00:CE:AC:EC:AB:7E:DB:41:96:D8:C1:23:9F:FD:1E:A4:B2
X509v3 Authority Key Identifier:
keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/3A23F644121C11F1803734E51C3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f1:17:7c:2e:85:43:64:4d:a1:ca:c3:75:06:28:91:28:b4:
10:94:23:78:db:bc:00:d3:6e:fc:0c:30:52:27:bd:e1:83:01:
ee:7a:da:ef:df:a0:23:d1:c9:83:48:f5:1f:85:6b:fc:26:a7:
65:ec:8b:c5:5f:dc:d6:1e:6f:20:ec:bb:d5:3b:76:db:d9:d4:
d0:4d:d2:0b:11:87:81:0e:7e:43:d4:61:85:88:f0:f9:32:10:
63:24:4e:29:93:8a:20:af:45:c7:d3:b9:be:06:ec:d4:a2:a4:
f1:db:ec:21:c5:2f:93:af:27:ac:4f:c3:b6:a6:13:e3:83:68:
25:1e:c8:cf:a0:57:1d:64:ed:1d:93:af:82:88:3b:6b:c3:43:
d0:14:04:59:26:63:36:90:fe:c8:f3:44:23:90:c0:0e:bf:cc:
90:a4:48:0b:fa:3e:49:a1:e1:b5:4f:4f:5d:69:89:46:0d:db:
1f:7f:f1:bb:d9:12:48:4e:0d:a9:aa:24:7f:48:1a:cb:4e:0b:
62:c9:fc:13:93:b4:e5:eb:1f:b3:53:1b:74:26:9d:75:7f:75:
75:d6:93:51:64:2c:1c:c9:b6:bb:bd:4c:e2:b8:56:be:4f:ed:
4d:86:48:0c:4d:f7:a0:22:c2:1a:64:68:9a:db:82:17:a3:36:
2a:e1:57:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:18 2026 by rpki-client