
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa
File: B2E74042602811EF90548827C4F9AE02.roa (raw, json)
Hash identifier: j6SYkO3HZhEL2LK5lIazKp9zU4gcdGwtc5skzDjxN2o=
Subject key identifier: D9:3B:7B:9D:60:AA:B4:E2:EF:9B:2A:0C:42:67:EB:25:5E:37:98:15
Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial: 0932
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa
Signing time: Wed 16 Sep 2026 20:41:07 +0000
ROA not before: Wed 16 Sep 2026 20:41:07 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 141002
IP address blocks: 103.154.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2354 (0x932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Validity
Not Before: Sep 16 20:41:07 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aaafee3-a563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:39:f6:80:a3:f7:9c:c1:fb:82:ef:bb:87:
4b:05:58:33:be:e0:5a:cd:36:c3:40:fe:61:ef:8b:
12:d1:00:0e:23:b4:8c:6f:7b:4b:4c:8d:e5:ab:ab:
8f:8b:53:b1:fa:89:f8:2c:9d:6c:5b:42:b1:65:43:
ab:30:79:b3:f0:b6:3d:ac:84:0a:b6:d2:56:0f:75:
e2:a9:79:e2:0f:2e:c3:92:16:22:28:ca:4d:a2:46:
96:1f:fb:13:a6:79:7f:ad:71:1d:2b:bb:f8:30:dc:
0f:13:03:9a:82:42:67:6a:23:56:4b:77:59:9c:8b:
f5:b1:2d:06:83:14:83:9b:49:58:51:41:c9:c2:83:
0d:14:9e:f5:44:75:e7:0b:06:de:ba:d3:fc:64:3b:
91:88:e6:04:4a:10:d5:10:d4:52:b5:fe:31:12:51:
a5:db:19:62:46:61:ca:77:16:a8:c5:4a:3a:fd:12:
c3:fd:4d:95:57:29:7a:35:c0:ca:38:dc:75:6f:87:
dd:98:3a:0e:a3:5e:59:a6:01:6b:a3:14:90:4a:5a:
19:e2:91:d2:26:f7:e5:9d:a8:b8:62:e1:09:de:1c:
6c:7c:dc:ee:8b:93:17:ce:f5:0c:11:24:0a:f4:56:
0e:e0:d7:19:e7:b3:9e:ee:ac:11:91:c7:14:db:a1:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:7B:9D:60:AA:B4:E2:EF:9B:2A:0C:42:67:EB:25:5E:37:98:15
X509v3 Authority Key Identifier:
keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.29.0/24
Signature Algorithm: sha256WithRSAEncryption
02:01:ae:5f:b5:55:a7:8d:cd:fc:68:e7:dd:e7:a1:7f:12:6d:
f8:b5:f9:03:39:58:a7:22:97:96:fc:2f:c8:60:5b:60:5e:43:
dc:c2:26:8c:8b:26:d9:e8:e2:c6:e6:ab:90:b1:09:2e:38:12:
8e:a9:ed:f6:53:7d:ca:f0:d0:a4:3a:c3:c5:a2:4c:33:db:1e:
6d:64:5b:33:b9:54:2d:12:5f:ab:5c:41:b3:2c:29:d4:20:e8:
7e:fe:eb:22:ad:c2:43:a3:49:e2:75:44:fa:1e:e1:29:6d:75:
25:8e:3a:d7:bd:51:d0:b1:27:47:d1:ed:90:58:32:8a:57:22:
b2:91:ae:c9:91:b3:4e:a7:e7:34:53:cc:1c:70:f9:2b:a2:42:
f4:50:93:a4:6e:74:e8:c5:37:2b:26:f3:8a:d6:59:ce:fe:26:
11:f1:18:6d:67:28:37:a5:01:ca:e4:53:27:b7:7c:76:34:c3:
78:08:46:7c:cf:f1:f1:37:c4:83:a1:c3:5f:49:1d:97:03:71:
25:7b:29:66:23:ec:34:c4:03:19:3c:f0:ec:ea:a1:e1:8e:c8:
93:16:5e:79:da:2d:9d:76:ad:6e:5f:ef:02:f6:3b:70:6d:04:
17:d2:c8:15:dd:10:4c:13:97:b7:82:be:00:1f:ca:9d:c4:de:
0c:70:e0:6e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M5MzMxMTAvBgNVBAUTKDFBMUEyREI2MjI3MDQ5ODYwRDFDQjZGQjM4MUQwMzVG
N0NEREZFNzkwHhcNMjYwOTE2MjA0MTA3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFhZmVlMy1hNTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArrE59oCj95zB+4Lvu4dLBVgzvuBazTbDQP5h74sS0QAOI7SMb3tLTI3lq6uP
i1Ox+on4LJ1sW0KxZUOrMHmz8LY9rIQKttJWD3XiqXniDy7DkhYiKMpNokaWH/sT
pnl/rXEdK7v4MNwPEwOagkJnaiNWS3dZnIv1sS0GgxSDm0lYUUHJwoMNFJ71RHXn
CwbeutP8ZDuRiOYEShDVENRStf4xElGl2xliRmHKdxaoxUo6/RLD/U2VVyl6NcDK
ONx1b4fdmDoOo15ZpgFroxSQSloZ4pHSJvflnai4YuEJ3hxsfNzui5MXzvUMESQK
9FYO4NcZ57Oe7qwRkccU26Hv+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNk7e51g
qrTi75sqDEJn6yVeN5gVMB8GA1UdIwQYMBaAFBoaLbYicEmGDRy2+zgdA1983f55
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkzMy9GRDk1MjFCMkRD
NTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZWU5ITGI3T0IwRFgzemRf
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dob3R0aUp3U1lZTkhMYjdPQjBEWDN6ZF9uay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0M5MzMvRkQ5NTIxQjJEQzU3MTFFQTgzRThFQzY3QzRGOUFFMDIvQjJFNzQwNDI2
MDI4MTFFRjkwNTQ4ODI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5odMA0GCSqGSIb3DQEBCwUAA4IBAQACAa5ftVWnjc38aOfd56F/
Em34tfkDOVinIpeW/C/IYFtgXkPcwiaMiybZ6OLG5quQsQkuOBKOqe32U33K8NCk
OsPFokwz2x5tZFszuVQtEl+rXEGzLCnUIOh+/usircJDo0nidUT6HuEpbXUljjrX
vVHQsSdH0e2QWDKKVyKyka7JkbNOp+c0U8wccPkrokL0UJOkbnToxTcrJvOK1lnO
/iYR8RhtZyg3pQHK5FMnt3x2NMN4CEZ8z/HxN8SDocNfSR2XA3EleylmI+w0xAMZ
PPDs6qHhjsiTFl552i2ddq1uX+8C9jtwbQQX0sgV3RBME5e3gr4AH8qdxN4McOBu
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:45:59 2026 by rpki-client