
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/B0D1C39A182511EABDE3E142C4F9AE02.roa
File: B0D1C39A182511EABDE3E142C4F9AE02.roa (raw, json)
Hash identifier: b4dUJUsflstBmfkTo+6WB27BRTM43w5uV9OUP+GZroI=
Subject key identifier: C8:71:AF:56:2C:E6:4F:A2:FC:22:78:65:8D:1E:62:6E:F5:8F:68:39
Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial: 2C73
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/B0D1C39A182511EABDE3E142C4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:22:45 +0000
ROA not before: Thu 20 Aug 2026 16:22:45 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 17885
IP address blocks: 140.213.54.0/24 maxlen: 24
140.213.93.0/24 maxlen: 24
140.213.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 15:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11379 (0x2c73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Validity
Not Before: Aug 20 16:22:45 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a8729d5-d398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:d0:57:d8:94:5f:15:36:d2:e5:d4:05:d3:
10:b6:50:00:ee:63:3a:c8:41:e2:ea:2c:63:96:53:
88:e6:a0:86:57:1a:68:16:de:00:1c:99:0b:38:61:
16:8a:25:6f:09:6e:0f:26:99:6f:55:7b:93:aa:df:
55:38:38:c5:c8:e1:7f:97:4d:eb:62:f8:c8:80:42:
c9:b4:2c:a5:e5:97:0e:92:18:23:3b:bc:d4:a2:9f:
82:1f:a7:de:a7:2b:53:d4:58:3b:e2:6a:48:80:0a:
92:a3:9b:fe:62:02:3e:ad:84:a2:69:fa:85:dd:e3:
f9:da:cc:67:74:fd:21:85:01:42:2b:8c:d3:49:0c:
a3:45:ca:19:38:b8:76:aa:90:c1:bc:6b:7b:ff:87:
36:71:42:02:19:ea:87:4c:69:30:84:99:4b:06:a1:
de:a3:e6:11:ad:44:1b:07:68:58:91:95:c8:3e:40:
02:e0:b0:13:83:c3:8e:61:c4:77:60:10:28:49:93:
25:39:e7:34:d1:6f:0f:93:c0:49:6e:10:da:21:8b:
ef:e6:19:44:59:8e:9b:eb:eb:5b:ec:fe:8d:52:79:
e4:6f:58:93:be:7a:41:5e:8c:19:36:d3:ee:4e:09:
bb:75:84:62:88:89:9a:1a:51:f3:4e:3a:66:ef:fe:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:71:AF:56:2C:E6:4F:A2:FC:22:78:65:8D:1E:62:6E:F5:8F:68:39
X509v3 Authority Key Identifier:
keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/B0D1C39A182511EABDE3E142C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
140.213.54.0/24
140.213.93.0/24
140.213.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f8:5a:63:b6:e8:49:d5:0c:4f:14:7f:19:67:7b:04:99:75:
c9:22:7a:f2:be:8a:c1:06:b9:07:b5:e2:6e:c4:2b:a4:56:c1:
1e:c6:28:10:b8:eb:e5:74:4d:2c:9b:1b:9a:07:3a:5c:70:65:
95:39:4b:2b:e3:50:a8:01:8f:89:93:de:78:17:e4:84:13:76:
c6:a3:40:ca:4e:fe:1f:63:9d:88:14:2b:ca:c9:b2:05:58:f2:
b3:39:c5:85:e3:c4:af:b0:bf:88:ac:34:3f:f2:d1:e4:fe:e3:
56:2b:00:5b:ad:b8:a7:2d:74:84:26:d8:85:26:69:f2:78:a4:
c3:1e:84:14:82:bf:01:73:2a:4a:44:f1:7f:cf:96:3b:3b:7d:
21:3a:b1:cc:7e:cb:c0:83:cd:2b:ec:3c:7c:a3:f1:67:26:3c:
70:57:3b:a4:57:58:52:53:aa:3b:4e:0a:07:30:5e:e6:5a:31:
a6:59:1e:74:ec:be:d7:3b:53:e2:b1:c9:00:98:19:c9:2e:b2:
58:5b:f9:c4:a7:a1:da:78:ea:19:0f:c9:38:4b:76:cf:e3:5b:
49:b0:3b:d2:5d:6b:f3:ab:fc:99:0c:a3:7a:31:62:4c:93:33:
d5:16:1a:8a:72:dd:db:b8:2a:9e:bb:cc:0f:db:5e:56:b4:58:
fd:e0:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:38:15 2026 by rpki-client