
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/B2D0F8D2178311F1B32BFEF6283D8C67.roa
File: B2D0F8D2178311F1B32BFEF6283D8C67.roa (raw, json)
Hash identifier: 0l1faSsNOHOUv9dts3Hprtyh48iyjB1f/xwuNggdhEY=
Subject key identifier: 0C:A5:08:0B:4B:96:0D:CF:9C:F9:2B:B4:0E:59:FD:1B:DE:12:85:0E
Certificate issuer: /CN=A9120D97/serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Certificate serial: 02
Authority key identifier: 63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/B2D0F8D2178311F1B32BFEF6283D8C67.roa
Signing time: Wed 04 Mar 2026 04:36:23 +0000
ROA not before: Wed 04 Mar 2026 04:36:23 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 4764
IP address blocks: 203.34.114.0/24 maxlen: 24
2001:df5:3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 08:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120D97, serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Validity
Not Before: Mar 4 04:36:23 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a7b6c7-d993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:85:85:ec:f0:1f:40:89:25:f6:f3:19:71:
e3:85:10:71:c3:ca:c6:a5:9e:9e:fd:3c:d0:ac:aa:
45:10:43:67:8d:49:02:82:2f:d9:fc:6a:a9:15:59:
8e:de:8b:f8:fe:a6:1a:15:c8:52:68:cf:36:bc:23:
d7:21:96:c8:3d:d0:a3:7b:44:ec:27:02:cd:e9:12:
60:c8:12:0e:03:1f:d6:31:e9:cc:eb:69:6b:ae:bf:
63:bd:c7:50:01:f1:83:6b:0a:de:76:cb:ce:c9:fa:
39:9e:c4:21:05:3c:ea:2b:94:b9:4c:ae:ef:cd:d8:
1c:59:11:4e:02:fd:6c:a3:6f:60:44:af:ff:09:a5:
2e:fc:f3:d4:99:4e:11:f3:e6:73:37:e8:18:6e:eb:
7d:e6:b0:f7:d4:f5:5d:d6:a5:f6:bc:3b:0b:45:50:
04:cb:b5:24:df:40:cc:cb:11:be:83:0a:80:06:17:
39:d9:ce:90:f1:e3:fd:02:a5:8e:2b:b5:f6:c2:8d:
cd:c7:e4:8b:e2:e7:7a:e7:48:1c:97:1a:f6:1f:c6:
9d:bb:ae:60:a5:69:59:5f:73:cc:db:9d:34:03:a3:
58:38:bb:56:4f:28:6c:29:46:19:20:1f:7b:98:f8:
37:5a:c7:b0:8a:6d:40:da:a7:f9:72:80:37:69:8a:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A5:08:0B:4B:96:0D:CF:9C:F9:2B:B4:0E:59:FD:1B:DE:12:85:0E
X509v3 Authority Key Identifier:
keyid:63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/B2D0F8D2178311F1B32BFEF6283D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
203.34.114.0/24
IPv6:
2001:df5:3c0::/48
Signature Algorithm: sha256WithRSAEncryption
94:6f:a1:fc:16:38:a9:1d:15:82:c0:ee:2d:ae:12:3d:81:27:
42:b3:fb:63:b4:1b:7c:ac:2a:d5:e9:e8:66:15:4d:fe:d4:f7:
8c:65:04:c1:8c:6f:37:de:b6:a1:0a:08:ff:80:25:5d:c6:bd:
7d:41:d1:7b:d7:6c:8e:3c:f4:2e:13:c6:23:d1:11:fb:42:77:
b5:76:68:57:d6:f0:4e:57:74:8e:b1:ec:44:d2:03:03:aa:f7:
95:ea:fd:65:57:55:58:73:7b:c8:c4:dd:8f:f3:b9:e5:1c:d3:
f1:7d:e2:eb:47:ba:6a:32:7e:90:58:97:09:89:56:e8:6e:a2:
a3:a3:e9:db:31:07:9a:f1:84:15:88:1e:be:4a:33:4d:15:87:
d0:04:f4:93:b3:be:c3:b0:d7:83:f4:bf:b3:ad:f7:b1:ea:81:
83:6c:a4:9e:3f:9c:35:46:3e:1e:51:46:4e:c4:d9:ed:ab:98:
71:2e:d4:e6:b9:2f:38:96:6a:1a:a7:62:38:79:97:52:e2:a5:
bb:a1:90:e4:54:99:b7:b5:10:af:de:1f:86:7d:51:98:cc:bf:
9e:10:84:e8:19:2f:4a:5b:e6:70:15:c1:9e:b2:6e:b9:c3:7b:
f9:e2:67:9a:d2:b8:91:e5:f6:33:81:c3:00:4e:0a:5b:87:41:
95:1f:5d:eb
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MEQ5NzExMC8GA1UEBRMoNjM0OUNGNzE3QjM0MDk2MzM1RDFGQzM5N0JDNTA0MDY0
OEE3OEYwRTAeFw0yNjAzMDQwNDM2MjNaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTdiNmM3LWQ5OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbQIWF7PAfQIkl9vMZceOFEHHDysalnp79PNCsqkUQQ2eNSQKCL9n8aqkVWY7e
i/j+phoVyFJozza8I9chlsg90KN7ROwnAs3pEmDIEg4DH9Yx6czraWuuv2O9x1AB
8YNrCt52y87J+jmexCEFPOorlLlMru/N2BxZEU4C/Wyjb2BEr/8JpS7889SZThHz
5nM36Bhu633msPfU9V3Wpfa8OwtFUATLtSTfQMzLEb6DCoAGFznZzpDx4/0CpY4r
tfbCjc3H5Ivi53rnSByXGvYfxp27rmClaVlfc8zbnTQDo1g4u1ZPKGwpRhkgH3uY
+Ddax7CKbUDap/lygDdpig5zAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUDKUIC0uW
Dc+c+Su0Dln9G94ShQ4wHwYDVR0jBBgwFoAUY0nPcXs0CWM10fw5e8UEBkinjw4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwRDk3LzEwQTk5QTBBMTc4
MzExRjFCN0FBQzBGRjI3M0Q4QzY3L1kwblBjWHMwQ1dNMTBmdzVlOFVFQmtpbmp3
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWTBuUGNYczBDV00xMGZ3NWU4VUVCa2luanc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEQ5Ny8xMEE5OUEwQTE3ODMxMUYxQjdBQUMwRkYyNzNEOEM2Ny9CMkQwRjhEMjE3
ODMxMUYxQjMyQkZFRjYyODNEOEM2Ny5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE
AgABMAYDBADLInIwDwQCAAIwCQMHACABDfUDwDANBgkqhkiG9w0BAQsFAAOCAQEA
lG+h/BY4qR0VgsDuLa4SPYEnQrP7Y7QbfKwq1enoZhVN/tT3jGUEwYxvN962oQoI
/4AlXca9fUHRe9dsjjz0LhPGI9ER+0J3tXZoV9bwTld0jrHsRNIDA6r3ler9ZVdV
WHN7yMTdj/O55RzT8X3i60e6ajJ+kFiXCYlW6G6io6Pp2zEHmvGEFYgevkozTRWH
0AT0k7O+w7DXg/S/s633seqBg2yknj+cNUY+HlFGTsTZ7auYcS7U5rkvOJZqGqdi
OHmXUuKlu6GQ5FSZt7UQr94fhn1RmMy/nhCE6BkvSlvmcBXBnrJuucN7+eJnmtK4
keX2M4HDAE4KW4dBlR9d6w==
-----END CERTIFICATE-----
Generated at Sat Mar 7 23:59:50 2026 by rpki-client