
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/B647F704090C11EFB666C967C4F9AE02.roa
File: B647F704090C11EFB666C967C4F9AE02.roa (raw, json)
Hash identifier: nMJlJs5RVl9hK1ao5B9tFWVbxrXwgcmPLTkIzplwg3c=
Subject key identifier: C5:4E:B9:BC:91:CF:2D:64:31:13:5B:37:E6:44:4C:26:1A:AD:E6:97
Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Certificate serial: 0D24
Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/B647F704090C11EFB666C967C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:34:45 +0000
ROA not before: Thu 20 Nov 2025 18:08:13 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 134525
IP address blocks: 202.1.171.0/24 maxlen: 24
202.1.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3364 (0xd24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Validity
Not Before: Nov 20 18:08:13 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45c95-ddd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e8:a1:02:4d:a6:15:e2:dc:cd:e7:7d:59:2e:
19:e8:90:a3:51:ce:87:5c:af:14:29:28:2f:a0:6d:
3b:eb:ac:69:70:95:6b:ad:ea:13:f7:67:81:66:70:
9e:54:2a:89:5b:8a:9d:20:7a:cb:89:e0:bb:b4:3c:
d3:84:d9:c5:36:86:40:0a:53:0e:6e:a5:cb:61:fe:
59:74:1e:92:51:d0:11:fc:f7:b0:24:a0:b4:a7:95:
c3:bc:68:73:2a:84:bf:fd:2c:61:b7:d7:54:b3:76:
14:65:b1:8e:ad:3d:15:72:1c:98:20:9c:2b:dd:5e:
a4:da:86:04:ef:d5:95:33:66:98:a8:44:36:d6:00:
50:a8:d0:b3:9b:1b:a8:6c:53:c6:0f:70:67:df:91:
95:cb:c2:fe:46:c0:4e:dd:15:bb:af:2e:c5:3a:56:
98:28:b7:12:49:f6:1b:9d:f0:dc:b9:32:dc:fa:ef:
07:34:fe:b6:d2:9f:94:b3:7a:79:2a:70:6a:79:66:
86:97:40:ce:89:36:3f:ba:12:50:6f:1e:e9:1c:29:
f1:22:3f:59:87:e2:8a:24:1e:b3:c0:97:2f:0c:54:
12:ad:94:98:37:64:8c:1d:8e:e0:58:60:17:cb:cc:
d7:bd:a3:87:94:33:e2:aa:07:37:c3:9b:81:8c:72:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:B9:BC:91:CF:2D:64:31:13:5B:37:E6:44:4C:26:1A:AD:E6:97
X509v3 Authority Key Identifier:
keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/B647F704090C11EFB666C967C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.1.171.0/24
202.1.179.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3f:d6:c9:ca:d3:45:9b:04:61:73:c9:f7:ee:84:da:a2:bc:
0f:0f:c4:30:b6:68:84:11:e6:75:79:f0:5e:00:82:c5:d0:92:
13:e1:b3:2f:c0:31:d2:b8:e6:e3:0a:11:66:0b:28:95:b1:5f:
6b:c8:48:c8:2b:68:fc:1f:41:77:38:4b:9b:93:bd:f6:e3:b9:
70:0c:08:02:e0:3e:6a:1b:ca:6e:16:da:7b:e6:13:b8:a5:9d:
35:b6:f5:ce:51:bb:98:32:5b:0e:c4:1e:86:4b:33:62:88:4b:
96:e5:b6:66:1f:26:03:51:24:15:41:40:51:9c:7e:8c:f2:f6:
f2:5e:81:1f:37:ba:b4:35:0b:49:29:4c:92:66:5b:b0:f8:9b:
d8:ea:43:fe:2d:35:34:81:f8:a3:2e:b0:81:60:77:69:88:3f:
d0:82:34:71:1d:bf:27:f8:d0:16:57:a4:4d:de:9f:14:15:7e:
26:70:c3:cf:98:d8:98:50:a9:33:ae:e0:2f:cd:7a:ce:1a:90:
94:5c:b1:59:c1:32:49:42:49:c0:45:a7:25:d5:bd:33:28:bf:
39:67:c3:bf:cf:0e:0e:44:01:09:62:b4:54:73:13:f3:1b:0c:
80:7f:12:d1:0f:fc:b0:9f:0d:65:73:52:43:a1:bc:e7:bb:08:
ec:a9:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:20 2026 by rpki-client