
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa
File: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (raw, json)
Hash identifier: vNfsLMgj6FIGb8F95RS1g08xcjRW3XjTHmN+wXU6cGs=
Subject key identifier: 8E:14:53:94:69:EB:10:C2:FE:19:3E:FE:72:C3:95:81:87:D3:49:8D
Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Certificate serial: 024F
Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa
Signing time: Tue 03 Nov 2026 03:51:00 +0000
ROA not before: Tue 03 Nov 2026 03:51:00 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 4768
IP address blocks: 202.36.181.0/24 maxlen: 24
202.36.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 03:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Validity
Not Before: Nov 3 03:51:00 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ae95a24-a5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:e2:17:38:1a:c5:71:65:48:56:aa:0e:6b:
b7:cd:2c:66:33:80:17:f8:de:c3:2e:7c:01:4a:97:
6f:9f:72:54:2d:25:54:74:d5:a7:e7:ea:46:71:ce:
29:d8:10:f9:2e:dd:b2:81:70:87:5b:bc:74:c9:7f:
3a:73:d6:e1:fe:dd:a9:25:63:c7:06:5a:4a:8d:35:
c3:ac:1d:52:0b:49:a8:77:16:d4:5c:25:1b:8c:1d:
a5:74:00:12:45:30:3a:ec:78:c5:af:7a:9c:c9:24:
7c:4c:41:57:28:c3:39:15:1f:22:35:df:11:e1:4e:
18:fb:20:b7:b8:74:52:7d:26:6f:a1:cc:c6:c9:b1:
8a:a9:9e:13:af:59:a7:0b:69:5a:ac:2c:5f:4d:ea:
7a:87:3a:06:1e:b6:ba:0b:8b:32:4d:b7:5f:2f:2e:
75:a9:61:d4:73:38:d2:7a:44:54:8b:90:73:52:e2:
8b:a0:41:f3:bd:49:68:66:59:ff:03:dd:c7:45:68:
ba:ca:84:d2:50:1c:fb:0c:7a:fd:72:63:14:08:bf:
b8:b1:ef:49:c1:e7:1e:2d:01:f9:c2:6c:2c:e0:16:
af:12:39:0c:b4:5e:8b:26:79:8c:e1:51:1f:fd:be:
1a:58:0c:75:6b:4a:a7:7e:55:4d:fb:7b:e8:f2:79:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:14:53:94:69:EB:10:C2:FE:19:3E:FE:72:C3:95:81:87:D3:49:8D
X509v3 Authority Key Identifier:
keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.36.181.0-202.36.182.255
Signature Algorithm: sha256WithRSAEncryption
4a:32:59:a8:28:e1:18:b8:5e:e1:04:14:4f:68:e8:2e:0e:c7:
d0:8a:1d:2d:5e:80:0f:da:b1:fd:21:87:a3:7c:25:a5:8a:3b:
7c:c2:c4:a6:28:3b:01:fb:00:b0:8c:4b:f0:e3:f1:cd:08:e3:
c7:11:4d:37:c5:ce:a8:15:2b:5c:b2:8d:b6:43:c8:03:25:e3:
8a:30:ba:56:69:3e:a7:1c:ce:cd:c6:7d:fe:b1:6e:05:c7:fa:
9f:7f:13:c4:72:6d:16:69:11:a5:0f:17:d5:fd:ba:fa:17:61:
17:5f:41:bd:6c:2f:47:66:ea:43:49:a3:1f:c4:c2:33:2f:45:
84:45:22:4e:b4:30:e4:b8:c5:c5:57:03:32:e2:cf:ad:ef:19:
5d:63:c3:4b:15:e3:db:33:eb:18:a4:58:0d:4f:8e:ae:c3:ee:
0f:d9:00:e0:90:d3:ed:b4:3c:3b:cf:b0:1d:ad:99:51:c3:26:
8e:f5:f1:a8:4c:4c:aa:4a:6a:58:c2:80:35:0a:33:01:a3:22:
0e:2b:ba:71:25:24:87:0e:1c:ba:f0:23:d0:bf:b1:a7:2f:bb:
80:8f:46:7d:16:f3:ca:1b:d7:b2:ed:85:29:a8:33:49:e3:a1:
9d:f9:4c:d2:0e:26:45:f6:a4:2e:4a:58:a7:f3:ac:e0:ad:82:
17:32:18:03
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJEQjQxMTAvBgNVBAUTKEI3Qzk3OTVGRkY3RjY5Q0YzM0I3NjUxQzZCOTkyNkE3
MzBEOTc1OUMwHhcNMjYxMTAzMDM1MTAwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWU5NWEyNC1hNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAriLiFzgaxXFlSFaqDmu3zSxmM4AX+N7DLnwBSpdvn3JULSVUdNWn5+pGcc4p
2BD5Lt2ygXCHW7x0yX86c9bh/t2pJWPHBlpKjTXDrB1SC0modxbUXCUbjB2ldAAS
RTA67HjFr3qcySR8TEFXKMM5FR8iNd8R4U4Y+yC3uHRSfSZvoczGybGKqZ4Tr1mn
C2larCxfTep6hzoGHra6C4syTbdfLy51qWHUczjSekRUi5BzUuKLoEHzvUloZln/
A93HRWi6yoTSUBz7DHr9cmMUCL+4se9JweceLQH5wmws4BavEjkMtF6LJnmM4VEf
/b4aWAx1a0qnflVN+3vo8nmrYwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFI4UU5Rp
6xDC/hk+/nLDlYGH00mNMB8GA1UdIwQYMBaAFLfJeV//f2nPM7dlHGuZJqcw2XWc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCNC8zQzA5QjNGQTVD
RTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2FjOHp0MlVjYTVrbXB6RFpk
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDJEQjQvM0MwOUIzRkE1Q0UyMTFFRUFGNDJERTYyQzRGOUFFMDIvOUFEQzlDOEE1
Q0UyMTFFRUJBNERCRDE1QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBADKJLUDBADKJLYwDQYJKoZIhvcNAQELBQADggEBAEoyWago4Ri4
XuEEFE9o6C4Ox9CKHS1egA/asf0hh6N8JaWKO3zCxKYoOwH7ALCMS/Dj8c0I48cR
TTfFzqgVK1yyjbZDyAMl44owulZpPqcczs3Gff6xbgXH+p9/E8RybRZpEaUPF9X9
uvoXYRdfQb1sL0dm6kNJox/EwjMvRYRFIk60MOS4xcVXAzLiz63vGV1jw0sV49sz
6xikWA1Pjq7D7g/ZAOCQ0+20PDvPsB2tmVHDJo718ahMTKpKaljCgDUKMwGjIg4r
unElJIcOHLrwI9C/sacvu4CPRn0W88ob17LthSmoM0njoZ35TNIOJkX2pC5KWKfz
rOCtghcyGAM=
-----END CERTIFICATE-----
Generated at Wed Nov 4 17:26:51 2026 by rpki-client