
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/9067F6746F3211EF8F5EFB20C4F9AE02.roa
File: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (raw, json)
Hash identifier: aZVjwOBzEzdNCEW5XvUhfqb5dAMw3PX/S+WhGKoCahs=
Subject key identifier: 2E:9F:70:45:A9:14:30:98:77:CC:71:E8:50:C7:8F:0F:31:6A:E2:FB
Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial: 08BD
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/9067F6746F3211EF8F5EFB20C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:42:41 +0000
ROA not before: Tue 02 Sep 2025 21:12:31 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133159
IP address blocks: 203.56.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Validity
Not Before: Sep 2 21:12:31 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45e70-e984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:16:37:e4:83:e7:00:11:1b:46:5d:54:17:
74:4f:fc:36:a9:a3:d5:1c:56:0e:14:e4:07:45:2f:
d8:98:5c:9e:ff:ce:e3:88:e6:dd:c1:57:e9:5f:13:
45:f9:56:44:a9:5d:e6:ed:4a:6d:81:9e:03:20:98:
2c:9d:f1:4a:4c:c9:c5:d8:69:36:0f:90:1b:2c:22:
19:26:78:27:97:56:4d:a0:56:cd:5f:90:cd:43:81:
55:d3:1e:cc:53:b2:33:40:4a:31:84:45:2a:4e:ed:
cb:ff:cc:54:a8:5a:b2:5f:c8:13:ef:b8:28:39:f9:
bb:99:80:61:3a:1d:a8:40:44:04:05:d9:9c:12:ed:
e4:f4:3e:2c:ad:3d:4f:e5:ef:62:23:ac:bc:47:38:
d9:21:0e:66:dc:e5:64:73:3f:2b:d8:68:55:ae:d3:
13:d1:fb:69:da:23:68:cd:49:10:9b:38:8b:03:cf:
b7:18:6d:d8:fb:95:2f:f8:15:94:4a:66:30:37:d1:
87:ba:1c:d8:33:70:4d:94:9a:c1:d5:98:c1:4c:b5:
1e:18:fa:d6:ce:84:6b:82:b5:23:44:a0:b5:7e:35:
a3:12:38:1b:31:04:54:ad:dd:58:91:09:38:a4:b3:
ea:2f:30:4f:3f:0c:24:58:7b:da:5a:87:28:0b:58:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9F:70:45:A9:14:30:98:77:CC:71:E8:50:C7:8F:0F:31:6A:E2:FB
X509v3 Authority Key Identifier:
keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/9067F6746F3211EF8F5EFB20C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.56.35.0/24
Signature Algorithm: sha256WithRSAEncryption
60:af:98:07:28:65:b0:07:2c:fa:b0:b3:48:82:95:d7:7d:aa:
e2:25:cd:8e:0b:98:38:7f:29:84:fd:ed:81:f7:71:b8:0d:7e:
0b:60:f1:d7:47:2b:dd:bb:9c:f6:13:cd:75:c6:9d:f0:54:64:
99:aa:9b:b7:5a:65:bf:42:6e:6b:dd:54:38:fa:e2:e7:9f:da:
65:3a:53:11:11:a1:5f:b8:39:eb:0d:cd:4c:ee:d0:f7:d9:04:
8f:fd:d4:7a:68:39:44:92:51:de:ea:14:97:c5:ee:1e:91:5d:
de:d0:41:5f:00:b6:51:90:fe:2d:0d:2e:f8:5c:b1:f0:e3:8a:
58:8e:fc:2f:c7:f0:2b:c1:ca:b1:ab:6d:0d:e4:1e:7f:ae:19:
ec:09:d0:61:4c:75:ee:4a:92:3e:7b:a7:3c:9a:14:81:2b:51:
c2:e4:4d:64:9b:f0:1d:3a:01:47:88:ce:51:ea:1e:25:6d:04:
7b:ab:a4:cd:48:1f:fb:1f:ac:a4:c4:4d:b4:0c:98:5a:c3:1d:
c6:d3:f9:c3:e0:75:e0:e9:86:ae:4a:84:ae:9f:6e:26:21:27:
12:3e:66:52:18:9c:4b:89:ff:c4:7f:4d:bd:67:b5:04:a9:d0:
df:da:25:23:a1:67:24:5e:75:5d:77:d7:d3:96:4a:b4:7b:2b:
26:2e:ec:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:40 2026 by rpki-client