
$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa
File: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (raw, json)
Hash identifier: 4D8RNBVxZ4n/YFoAFxcO6RiKNijl1P5296cdlR8pmnU=
Subject key identifier: 35:4E:8B:0F:B8:BD:3F:BB:8D:57:89:EC:BB:3E:A6:FF:80:6F:A5:94
Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial: 0839
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:52:06 +0000
ROA not before: Tue 18 Nov 2025 20:12:18 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 7545
IP address blocks: 203.4.197.0/24 maxlen: 24
203.4.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Validity
Not Before: Nov 18 20:12:18 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45296-d67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:1f:f5:53:52:c1:db:7a:8e:b7:77:ea:73:
85:8f:45:9b:66:1d:8b:7d:21:59:a6:4c:a2:0b:e6:
8c:61:ce:4a:6c:34:e4:f8:35:4d:3f:44:7f:ec:ca:
1f:bd:46:8c:fc:96:cd:c2:e3:f3:e3:e4:50:23:17:
39:2f:30:67:f6:f9:b0:dd:fd:63:c6:15:35:24:85:
3f:63:8a:16:ba:5f:0c:54:61:a9:53:f5:28:e7:f4:
85:5d:33:2f:c5:73:d0:bf:3f:de:e8:cd:eb:e2:5a:
76:b0:dd:45:51:c1:e7:f4:c8:57:ba:ec:03:ac:3f:
6b:75:ac:3e:52:ae:8c:39:da:8f:63:ac:01:88:06:
5a:73:22:d3:50:b6:20:29:fb:75:90:5b:4b:bf:f2:
cc:a6:62:5f:fc:a8:a0:7f:60:39:c1:0e:61:ee:3c:
73:8c:bf:8a:60:54:48:6f:90:86:d9:5e:d1:4e:7f:
26:68:f9:02:ca:5d:f1:66:52:1e:ee:eb:1e:bc:63:
de:70:87:b7:eb:b0:3a:d1:c0:ab:3b:f8:b8:43:84:
e5:b5:c4:9c:4d:a2:0f:0b:75:dc:78:77:51:56:88:
16:39:ae:ad:29:92:4c:67:e7:c1:90:46:76:87:01:
09:a8:36:17:86:50:b9:65:bc:5b:0d:fc:50:78:10:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:8B:0F:B8:BD:3F:BB:8D:57:89:EC:BB:3E:A6:FF:80:6F:A5:94
X509v3 Authority Key Identifier:
keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.4.197.0-203.4.198.255
Signature Algorithm: sha256WithRSAEncryption
ac:09:ee:7d:4e:bc:98:ec:8c:6e:eb:82:ab:24:6b:f7:23:89:
57:66:ac:03:62:b0:00:80:e2:0c:96:8f:b9:e9:83:7d:ae:1d:
64:69:ed:cd:03:7d:96:85:dc:e4:6a:c4:86:19:c4:68:fd:86:
12:ee:51:4b:51:90:5f:77:80:38:88:9a:b2:7a:ad:6d:eb:35:
2a:fa:32:6f:a3:72:41:02:5f:81:4e:78:96:d2:42:a8:9a:f7:
91:15:21:02:c2:0c:b6:df:04:e6:f6:03:06:3f:ff:7d:35:e1:
e8:66:a2:22:94:c4:26:42:14:22:b9:1e:df:3b:49:05:da:c3:
49:61:9d:c9:e3:52:7c:fb:de:f0:3a:e6:06:85:47:e6:45:44:
71:95:5d:62:d0:5c:dc:09:67:3d:79:72:8d:9f:4a:45:3f:dc:
f7:00:d1:c7:00:ab:00:6c:3c:a4:9c:39:ad:ca:31:f5:04:36:
fc:41:f5:97:00:24:2d:5e:ea:57:e8:5e:1f:18:e1:0a:0f:19:
11:d0:b1:85:54:43:f5:a7:4d:4b:df:c6:55:77:fb:5d:ab:bd:
a6:a3:0f:01:d3:35:18:86:10:42:0b:94:69:90:4d:aa:ab:38:
2b:a4:cd:ea:c0:31:02:dd:b3:9b:d6:c0:83:eb:7b:89:2b:6d:
56:1c:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:05 2026 by rpki-client