
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/2CE73CF20F1D11E991F4271EC4F9AE02.roa
File: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (raw, json)
Hash identifier: dwjkn2DW2HgGCHSm1qCTooFpBKfe2SamOh5enGZ3aMA=
Subject key identifier: E2:C9:51:7C:2B:93:C9:79:92:28:18:0B:F3:5E:28:D1:88:5D:9D:D0
Certificate issuer: /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial: 11C9
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/2CE73CF20F1D11E991F4271EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:56:56 +0000
ROA not before: Tue 10 Feb 2026 17:15:09 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 132132
IP address blocks: 101.100.187.0/24 maxlen: 24
101.100.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4553 (0x11c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Validity
Not Before: Feb 10 17:15:09 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a461c8-c548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:fe:39:78:86:6d:b4:69:d7:1c:fc:52:f5:
c9:23:e4:e7:33:c3:7d:bd:3c:3f:bb:90:bd:dd:d1:
97:b8:55:e3:20:29:79:98:1b:1f:00:ab:5b:9b:f1:
84:f1:bb:9a:f0:58:12:a3:e6:a1:8f:a0:bd:d6:19:
49:41:2a:bd:06:dc:81:34:91:d7:5a:38:fc:53:ee:
86:eb:f5:8b:f2:78:ce:6e:68:bd:7d:3e:60:17:e7:
a2:59:95:e5:29:08:27:68:67:83:7d:dc:33:8d:5e:
b7:13:4c:83:fd:d5:10:ad:dd:22:3e:95:c4:fb:ce:
e6:d2:6f:15:49:e7:e5:93:4a:b6:50:b5:11:76:ae:
73:fa:17:01:96:ae:14:0d:7a:ac:3c:92:67:88:35:
2e:71:6d:f2:1a:c2:3b:3e:d6:a6:1e:17:44:d7:ec:
e0:38:81:73:1a:d0:db:7c:dc:51:db:85:f9:aa:a5:
88:87:f1:5f:43:86:ae:7b:d6:e1:4a:93:cd:ac:c6:
6d:6e:b6:b0:76:4e:6b:15:87:67:ce:65:11:32:2f:
1d:63:d0:37:96:c7:b0:5b:19:f6:f7:b2:1b:a1:9e:
d1:83:2a:ab:84:3e:19:58:4b:a7:2f:41:24:af:e9:
fc:bc:9f:ee:cd:be:22:88:c0:e5:56:04:00:cc:6b:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C9:51:7C:2B:93:C9:79:92:28:18:0B:F3:5E:28:D1:88:5D:9D:D0
X509v3 Authority Key Identifier:
keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/2CE73CF20F1D11E991F4271EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.100.187.0/24
101.100.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5f:25:70:e4:e5:f6:6d:ca:6e:0d:46:37:f2:5f:84:77:26:
17:66:87:87:61:95:4e:69:15:b9:27:eb:12:6f:bf:57:e2:db:
ac:bc:d8:2f:77:38:c6:22:b5:0c:21:b7:db:06:82:4d:e5:e4:
fc:14:b9:f2:ec:45:c6:d1:d1:53:b5:d5:02:a0:94:7c:e7:a0:
0e:06:5a:ce:c3:5d:91:86:10:09:36:18:5d:08:a8:0a:95:45:
da:34:16:bf:9b:ee:00:87:2f:7e:80:11:e6:15:56:64:f6:be:
d2:af:9e:28:3c:40:eb:78:73:4c:6f:20:0b:7b:82:b0:47:bb:
1b:14:96:5b:d3:c7:9a:a1:50:dd:84:d0:9c:0b:35:59:09:db:
9e:de:7f:c6:68:04:d4:49:01:29:29:9f:f4:a4:01:8f:89:2d:
56:4b:3d:6c:de:ff:3e:e4:3a:c3:ea:14:3f:72:ca:a9:84:30:
18:49:06:bf:71:a7:b1:be:0d:f3:ed:b2:c1:9e:44:09:b3:4a:
58:c3:7a:59:b6:a5:e5:0e:13:7d:dc:76:23:22:03:0b:6a:4f:
c5:02:2c:e2:b8:35:72:6a:2c:10:1b:d1:37:9c:db:ac:e2:b3:
2d:be:25:59:f1:22:c5:d3:e0:bc:9f:7e:75:2b:5e:24:5c:3a:
ff:4a:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:40:58 2026 by rpki-client