
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/8DFE2984EAD811ECA1ED8915C4F9AE02.roa
File: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (raw, json)
Hash identifier: Y0nyOQFtGM7QMWfObN4EdvQRJMeSWv8sAdWfmCpoLZg=
Subject key identifier: 91:8A:4C:14:7F:3D:B6:10:48:2A:A0:A7:A7:0C:0F:A9:77:D2:EB:DE
Certificate issuer: /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0
Certificate serial: 3533
Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/8DFE2984EAD811ECA1ED8915C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:34:51 +0000
ROA not before: Fri 24 Oct 2025 15:00:46 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 38211
IP address blocks: 203.135.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl
rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13619 (0x3533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0
Validity
Not Before: Oct 24 15:00:46 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4407a-e60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:c3:0d:31:de:99:54:1f:c1:f5:86:0b:fc:
bc:eb:6c:31:58:98:7b:48:0b:76:a7:a3:0d:7a:c8:
9e:85:db:33:ea:08:1d:90:f4:09:45:e3:78:08:1e:
16:c5:ed:73:6d:49:a6:03:78:1e:cb:e1:5e:0e:02:
7f:c0:dd:f6:1e:69:04:8e:1b:ac:d3:a2:33:3f:b1:
7e:70:7b:ab:34:f6:75:92:8f:ce:6e:0c:48:d5:83:
38:49:67:69:06:23:11:82:95:ec:2c:0e:69:66:9d:
cd:93:bf:cf:1e:7d:87:56:e2:e2:03:a8:58:0d:0d:
b2:c8:61:0d:10:80:7b:4b:77:bf:72:7b:a1:f9:d4:
64:e2:d0:76:0f:3c:de:5b:d4:80:ea:7d:3b:62:1b:
7e:d4:12:1f:ea:b8:3a:50:91:0a:33:3f:8a:1e:20:
51:95:b0:11:d1:5e:67:84:3b:3c:c1:91:00:d3:54:
b3:84:f5:47:85:59:4e:0b:62:0f:fa:4c:e4:9d:e1:
67:05:0c:a4:d6:66:ea:7b:42:27:f4:af:3d:8d:fd:
38:15:12:46:8d:37:7f:4b:18:00:5b:93:fb:0a:fd:
74:c0:ee:b9:38:1f:f6:a6:ab:33:db:c6:a1:23:3e:
99:a5:a9:6e:76:ad:00:11:dc:fb:30:2a:f0:28:e2:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8A:4C:14:7F:3D:B6:10:48:2A:A0:A7:A7:0C:0F:A9:77:D2:EB:DE
X509v3 Authority Key Identifier:
keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/8DFE2984EAD811ECA1ED8915C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.135.176.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:2a:09:93:58:ef:d6:b4:37:28:d9:6d:dd:1d:02:57:1b:77:
0c:39:9a:f5:14:f3:aa:19:d2:6d:7e:26:9b:e9:da:33:fc:89:
e1:36:52:e5:ce:2e:10:99:5b:2b:de:7a:b5:47:48:d8:fe:1b:
d1:a5:47:8b:3b:a1:9d:2b:eb:eb:60:d6:4f:30:37:b1:48:91:
b5:94:47:b0:4e:89:6c:5e:ef:13:c0:61:c7:0f:8d:03:a0:13:
23:a1:00:ce:76:fc:88:cb:92:b0:91:20:8b:c3:e3:39:85:3e:
ed:1d:88:88:b7:bd:99:7f:90:cb:27:c0:53:5f:5c:56:c4:61:
a9:6d:c6:0a:23:c5:5b:8b:96:ef:d1:81:20:3a:20:ec:7f:d3:
36:a5:cc:19:d1:62:f5:c9:7f:98:b8:3d:55:2e:cc:19:79:90:
eb:5e:79:f5:d9:6d:c4:fd:6a:4d:29:87:17:26:5c:89:29:be:
b1:d9:b2:06:fc:af:9f:53:2f:50:0c:44:c0:5b:09:ab:f4:83:
3c:f6:65:6b:ee:6d:03:3c:ac:fc:4e:1d:aa:2d:cf:62:d4:6f:
ff:83:94:90:fa:e8:dc:62:97:c6:79:40:c8:4d:85:cc:28:18:
67:6f:7c:95:fa:fd:be:a7:2b:c5:d0:47:d6:da:50:38:bf:ea:
49:f0:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:56 2026 by rpki-client