
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/234074FA00DD11EE95AF6F7CC4F9AE02.roa
File: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (raw, json)
Hash identifier: UDAiIDt5KCZ26qE9nXhTFphvH/OarvgyVyiqEpIHoNo=
Subject key identifier: 4C:77:6E:77:33:76:4A:5A:1F:B8:A1:A0:56:1D:E9:30:23:93:F2:C9
Certificate issuer: /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
Certificate serial: 020F
Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/234074FA00DD11EE95AF6F7CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:56:23 +0000
ROA not before: Wed 11 Jun 2025 21:58:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136964
IP address blocks: 167.179.2.0/24 maxlen: 24
167.179.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl
rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 00:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C3D, serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
Validity
Not Before: Jun 11 21:58:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3ff37-6e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:d5:ed:e1:ba:2a:60:d5:9a:23:55:7a:d3:
c0:63:8e:ed:b8:12:ea:c4:58:c4:61:4f:50:48:a0:
c4:7e:59:3f:2c:1e:9d:e3:15:fc:ce:1b:1c:21:8e:
f0:ed:3d:b2:ff:dc:27:16:93:4e:a6:1a:8c:ed:1d:
d6:a8:11:f5:cf:19:07:07:df:17:bf:30:15:90:de:
de:98:98:cc:8c:84:1a:86:b1:9b:de:de:ba:d6:b2:
ca:ee:c3:e9:fc:6b:d3:67:ba:ca:02:63:1c:58:6e:
8f:28:00:8e:0e:fc:24:d3:39:12:bf:7f:92:b2:c6:
80:50:89:b2:ba:ac:0e:9f:4a:eb:e9:39:b1:73:f7:
9e:93:2b:f5:f8:14:7e:86:2c:d9:03:36:6d:8c:dd:
e0:a4:26:30:5c:e7:e7:c2:ef:75:77:84:df:7a:b2:
19:05:50:47:ea:0c:57:89:3c:ab:56:c2:5c:50:81:
d6:15:ee:6f:1d:35:26:bb:5d:20:bc:c4:3d:3f:38:
ab:90:a9:2d:b7:d0:9a:1f:70:15:c3:0a:8e:6d:46:
c0:0e:0e:f9:31:a6:26:b0:06:45:e2:25:a9:6c:a6:
ff:68:44:8a:4d:2c:1b:a6:90:c6:97:c1:f8:7a:2c:
8a:aa:36:c4:5b:80:5f:dd:27:27:fa:ff:81:68:d0:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:6E:77:33:76:4A:5A:1F:B8:A1:A0:56:1D:E9:30:23:93:F2:C9
X509v3 Authority Key Identifier:
keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/234074FA00DD11EE95AF6F7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
167.179.2.0/24
167.179.209.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1f:8e:ec:62:93:f7:73:69:99:72:73:6f:c8:5d:60:18:34:
b6:82:32:cf:3b:0e:0a:41:ed:76:e5:37:97:6b:e6:07:36:ca:
47:9e:cc:88:66:bd:88:e4:91:6c:18:36:6b:c2:a5:46:8a:30:
48:6b:b4:96:5d:02:f3:47:e5:e1:a1:4b:80:a2:61:86:17:dc:
4d:56:2d:da:47:95:75:92:80:b0:70:bd:0c:08:7a:27:a8:5b:
6b:6e:a3:c3:6d:af:73:c2:38:b5:ed:09:25:11:5b:dc:d4:19:
2e:05:f0:02:f8:15:5c:ab:2a:d9:64:c5:b1:5e:3d:6e:f7:25:
51:6d:28:49:df:82:4c:22:51:26:ff:49:4b:46:07:5b:bb:2a:
a0:75:74:03:31:5d:e4:a8:1e:fc:f5:89:29:d4:91:0b:60:31:
41:98:6c:37:72:8e:2a:08:35:c6:e7:2d:6a:bf:8b:e8:82:83:
f8:3a:a0:91:cc:1f:83:5b:51:54:91:86:f1:b6:c2:f1:9e:9f:
d0:ac:bd:81:95:a2:b0:f8:bc:bd:ca:25:5b:5c:4d:2a:82:99:
5b:fa:e1:42:4f:d2:90:25:68:5d:1c:19:40:0f:3f:14:e1:02:
33:11:7f:63:69:af:c3:24:ad:24:af:30:cb:c5:a0:b6:93:83:
24:b6:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:19 2026 by rpki-client