
$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/200E2B0059A011EC83255663C4F9AE02.roa
File: 200E2B0059A011EC83255663C4F9AE02.roa (raw, json)
Hash identifier: UULcaQHNKBDfda2HKLf0hDbfYUd2cHh9DhOCF4t/roI=
Subject key identifier: 7C:92:B8:9D:96:9D:FE:6A:98:5E:24:8C:B1:B0:D8:5A:E7:82:BF:C8
Certificate issuer: /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Certificate serial: 0553
Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/200E2B0059A011EC83255663C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:07:20 +0000
ROA not before: Wed 28 Jan 2026 23:20:03 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147315
IP address blocks: 103.174.206.0/24 maxlen: 24
103.174.207.0/24 maxlen: 24
2001:df7:d480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1363 (0x553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919495D, serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Validity
Not Before: Jan 28 23:20:03 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46438-16fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6b:31:a6:6d:95:de:db:3b:b4:50:42:2d:0c:
de:3c:c4:d6:93:66:ba:7d:ab:0e:e7:24:5e:d2:6d:
69:3e:d6:54:9c:71:4d:2d:05:b8:00:0e:e9:a1:72:
fe:ef:34:e3:71:18:1d:16:ea:f9:9e:e6:68:65:fa:
d5:b8:46:b1:ed:8b:05:3f:e1:4b:3b:7e:23:d1:a6:
5d:60:59:d9:d9:42:83:af:cb:30:0f:c6:d5:29:d3:
cf:13:6a:80:a3:9a:e2:00:19:72:1f:e4:4c:38:a1:
4a:7b:fc:84:39:b3:f7:f9:d9:aa:b0:f4:92:1a:aa:
50:55:8a:4d:87:0f:38:3d:0d:71:0a:a6:e2:08:83:
f2:80:20:29:bd:ab:6e:b2:b0:e9:bb:53:6c:8e:56:
b4:0c:e5:fa:01:87:50:4d:fa:35:04:d7:0d:00:3c:
7a:59:cc:44:2a:fe:a5:0f:3e:75:57:00:3f:fd:e9:
22:63:56:7f:dd:37:a7:96:a6:5f:ec:5c:3a:f3:be:
91:3d:6f:d4:dc:af:8b:80:96:e0:a3:28:1d:18:de:
3e:70:3b:7e:d7:fe:a8:95:d5:ce:ef:66:21:7d:d1:
10:6d:fd:9b:98:ca:da:b2:78:b1:6d:82:97:94:b3:
11:71:7c:87:5a:e9:ee:e5:cc:52:fa:8c:86:7c:eb:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:92:B8:9D:96:9D:FE:6A:98:5E:24:8C:B1:B0:D8:5A:E7:82:BF:C8
X509v3 Authority Key Identifier:
keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/200E2B0059A011EC83255663C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.206.0/23
IPv6:
2001:df7:d480::/48
Signature Algorithm: sha256WithRSAEncryption
20:e0:97:be:9f:0c:ca:f5:5b:ae:b3:12:f5:42:98:91:4e:f5:
f9:bc:fe:d3:bd:35:82:1f:e7:dd:13:80:39:12:36:e3:c7:9c:
5a:d7:99:27:e9:3e:e2:73:58:04:c9:d2:0e:6a:04:50:85:62:
30:d5:b6:a9:c3:19:73:c8:32:cd:5c:74:c9:60:92:92:f8:86:
8e:7d:52:4a:a5:c8:bf:9c:9f:2b:c5:de:2f:50:f4:a5:b9:06:
84:d2:41:9c:d0:e7:72:e5:1b:d5:21:66:c5:eb:a1:70:98:29:
29:c0:b8:57:2a:9a:21:3d:a8:c5:b5:b8:2e:b3:e6:0a:15:3f:
05:3e:b5:4e:ed:a5:94:40:f0:19:5e:00:7b:ec:bc:9c:7d:66:
f0:17:29:69:3d:0d:a5:34:28:74:86:f3:4b:3d:24:46:fa:c6:
00:96:b9:cd:da:7b:41:53:62:82:fb:60:f8:d3:6e:4a:87:0e:
43:ef:e3:16:d9:1d:33:d9:eb:2f:bf:ee:7a:5e:74:be:ed:05:
8f:20:ad:f8:ab:04:ab:57:c9:fa:d4:5b:14:9b:f7:32:fd:bf:
75:50:d6:75:3f:2d:dc:69:f3:1b:a2:fa:66:63:4b:10:34:e5:
26:30:ca:9b:7b:3e:d4:ee:d1:ac:98:ae:d7:66:ea:f1:83:d2:
dc:fe:12:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:35 2026 by rpki-client