
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/D323D61E26BE11F181670517C8833773.roa
File: D323D61E26BE11F181670517C8833773.roa (raw, json)
Hash identifier: 1TJHd1Er4qRUDf0cVa/Qv0BzLccXr+2X4f6DCu7VbSs=
Subject key identifier: 67:15:3D:5D:AD:3B:51:BF:F2:E1:C3:F4:5A:AD:73:9D:72:6D:8A:F3
Certificate issuer: /CN=A9132C07/serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C
Certificate serial: BD
Authority key identifier: A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/D323D61E26BE11F181670517C8833773.roa
Signing time: Thu 03 Sep 2026 07:57:43 +0000
ROA not before: Thu 03 Sep 2026 07:57:43 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154182
IP address blocks: 202.6.204.0/23 maxlen: 23
202.6.204.0/24 maxlen: 24
202.6.205.0/24 maxlen: 24
2001:df6:11c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl
rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132C07, serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C
Validity
Not Before: Sep 3 07:57:43 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a992877-6898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:ea:91:ff:47:7b:5e:cc:ca:ae:1c:d1:ce:
34:65:b0:f0:0e:a7:5c:56:58:f8:20:17:9a:bd:e7:
09:2c:e4:83:9e:ed:c1:07:3a:30:70:b4:2a:5e:f5:
08:9d:25:b9:d4:7d:e5:eb:c4:af:70:4e:35:39:90:
f3:57:7c:35:d1:3b:4e:8c:a1:3f:97:f5:da:07:db:
3d:cf:1a:7a:b9:c0:5a:5b:50:f8:3d:2e:18:1a:4e:
7e:ba:a5:39:15:20:81:83:6f:b5:37:55:a3:54:a5:
f4:a2:0a:59:90:dd:bd:b5:f1:a8:0e:dd:7f:f3:c0:
d7:b0:50:93:5c:fd:7f:71:af:ff:eb:e6:87:22:b8:
f4:cd:6a:41:7d:56:00:c9:09:6b:08:fd:0a:c0:08:
9a:ef:e1:5c:f8:77:f8:b5:15:80:da:13:6c:65:ac:
8e:61:2d:3f:94:40:b4:06:a7:aa:32:d6:46:11:6d:
8b:a1:dd:00:3c:8f:75:26:81:b1:50:ab:a1:9a:fd:
96:ca:39:b3:31:2f:65:6a:88:b2:79:cd:55:4b:49:
7a:9c:7a:e6:3f:e4:62:64:51:b9:74:d6:a9:69:c8:
1f:62:13:9a:87:4d:13:a8:37:ac:1a:33:d4:6c:0e:
1e:5c:04:aa:f1:fd:6d:2c:21:b9:e6:2b:ec:39:8e:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:3D:5D:AD:3B:51:BF:F2:E1:C3:F4:5A:AD:73:9D:72:6D:8A:F3
X509v3 Authority Key Identifier:
keyid:A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/D323D61E26BE11F181670517C8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
202.6.204.0/23
IPv6:
2001:df6:11c0::/48
Signature Algorithm: sha256WithRSAEncryption
06:63:77:86:1a:32:89:fb:79:85:e1:c8:39:62:db:1e:a4:2d:
68:93:a9:89:06:6d:69:cf:6e:b9:83:3b:a3:8d:9b:7a:53:30:
97:d8:24:ad:eb:f8:c5:6f:79:72:be:b6:a4:af:d3:ac:89:9e:
0a:7f:78:d1:df:ab:7e:d9:ad:55:7b:67:a7:6f:f0:6f:31:87:
f9:a6:5c:2f:cc:d7:83:85:bf:4f:57:55:60:05:03:58:bd:b1:
ee:e6:5f:b1:c5:21:3e:4c:28:db:4e:d9:28:22:cf:c8:9e:5c:
3b:71:4d:b0:0c:c0:dd:98:3d:ae:66:89:5e:7d:a8:3e:a5:6c:
ff:b9:c6:06:ec:b0:d7:0a:b7:16:3f:a5:d0:1a:aa:df:d0:1f:
cd:a5:ea:a1:ca:b4:23:1e:a5:f5:3f:1c:ae:a1:95:bc:ab:6c:
87:d3:22:35:ae:e7:ff:37:60:93:ec:30:19:f1:58:8a:49:fd:
c0:20:ff:87:f2:ab:4f:8e:1d:3a:30:b5:f6:7d:89:5e:6a:96:
ff:f5:0e:13:c7:f1:25:4c:1d:9f:1a:3a:00:4e:6a:5f:9e:25:
fd:c4:78:f7:e4:02:6b:b6:5d:84:64:b0:ea:51:04:fd:4e:f6:
03:32:55:81:31:f3:38:4c:b1:82:4e:c4:96:e3:e3:8f:ec:c9:
90:17:f3:8f
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJDMDcxMTAvBgNVBAUTKEE4RkU5QkVGRkM2NTQxRTZCNjMyQzQyMUQ3OEE3REND
MDhCMEFDOEMwHhcNMjYwOTAzMDc1NzQzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk5Mjg3Ny02ODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzubqkf9He17Myq4c0c40ZbDwDqdcVlj4IBeavecJLOSDnu3BBzowcLQqXvUI
nSW51H3l68SvcE41OZDzV3w10TtOjKE/l/XaB9s9zxp6ucBaW1D4PS4YGk5+uqU5
FSCBg2+1N1WjVKX0ogpZkN29tfGoDt1/88DXsFCTXP1/ca//6+aHIrj0zWpBfVYA
yQlrCP0KwAia7+Fc+Hf4tRWA2hNsZayOYS0/lEC0BqeqMtZGEW2Lod0API91JoGx
UKuhmv2WyjmzMS9laoiyec1VS0l6nHrmP+RiZFG5dNapacgfYhOah00TqDesGjPU
bA4eXASq8f1tLCG55ivsOY5K9QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGcVPV2t
O1G/8uHD9Fqtc51ybYrzMB8GA1UdIwQYMBaAFKj+m+/8ZUHmtjLEIdeKfcwIsKyM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMwNy80Q0EwMjk3Njkw
OUIxMUYwQTkzQjkxMzdDNEY5QUUwMi9xUDZiN194bFFlYTJNc1FoMTRwOXpBaXdy
SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FQNmI3X3hsUWVhMk1zUWgxNHA5ekFpd3JJdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzJDMDcvNENBMDI5NzY5MDlCMTFGMEE5M0I5MTM3QzRGOUFFMDIvRDMyM0Q2MUUy
NkJFMTFGMTgxNjcwNTE3Qzg4MzM3NzMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBygbMMA8EAgACMAkDBwAgAQ32EcAwDQYJKoZIhvcNAQELBQADggEB
AAZjd4YaMon7eYXhyDli2x6kLWiTqYkGbWnPbrmDO6ONm3pTMJfYJK3r+MVveXK+
tqSv06yJngp/eNHfq37ZrVV7Z6dv8G8xh/mmXC/M14OFv09XVWAFA1i9se7mX7HF
IT5MKNtO2Sgiz8ieXDtxTbAMwN2YPa5miV59qD6lbP+5xgbssNcKtxY/pdAaqt/Q
H82l6qHKtCMepfU/HK6hlbyrbIfTIjWu5/83YJPsMBnxWIpJ/cAg/4fyq0+OHTow
tfZ9iV5qlv/1DhPH8SVMHZ8aOgBOal+eJf3EePfkAmu2XYRksOpRBP1O9gMyVYEx
8zhMsYJOxJbj44/syZAX848=
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:44:52 2026 by rpki-client