
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/7D13B7AEF0DA11F0923E16B83C6F56BC.roa
File: 7D13B7AEF0DA11F0923E16B83C6F56BC.roa (raw, json)
Hash identifier: YDKbI+qGB5kDjPGZ3teyR0K9FvALnCh7sEqUIG88/U0=
Subject key identifier: 71:7B:BD:8D:7A:73:EC:C4:1B:CE:3F:09:79:97:71:EF:3C:DE:62:70
Certificate issuer: /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
Certificate serial: 024E
Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/7D13B7AEF0DA11F0923E16B83C6F56BC.roa
Signing time: Mon 02 Mar 2026 11:28:30 +0000
ROA not before: Thu 19 Feb 2026 01:22:53 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 2764
IP address blocks: 203.22.205.0/24 maxlen: 24
203.30.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl
rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 01:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E67, serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
Validity
Not Before: Feb 19 01:22:53 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a5745e-976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:0c:26:df:35:ee:c1:9c:b9:4b:40:b5:57:
ae:94:16:e3:1b:c7:3c:da:3a:14:c0:72:3c:62:32:
66:36:ea:22:90:8c:0e:0d:0e:91:32:06:22:22:ca:
81:85:76:a4:e2:d1:4b:1d:0c:e4:3e:39:5b:a6:f8:
d2:18:4d:42:f4:58:bf:99:84:3a:ad:7c:c7:17:5b:
b5:40:ae:aa:cb:c4:d1:c9:a3:99:a5:86:ab:b5:b8:
12:a2:7c:ba:da:4d:66:a9:f0:96:bc:33:69:af:5a:
29:6b:eb:47:7e:29:2d:5f:6a:9f:e4:f8:c3:80:d1:
1b:3d:b1:97:b5:d8:61:42:70:aa:e9:4d:c7:92:f6:
a8:c2:1b:b1:20:b0:4c:31:e9:2c:95:10:31:4a:a3:
84:82:d6:b4:ca:ab:9a:b1:18:d5:91:71:5f:c1:e3:
7c:c4:d5:d3:76:63:63:9a:b0:90:9a:07:34:8c:b6:
41:cb:9d:32:8d:3c:4b:37:1b:e3:de:7a:a6:3b:28:
ca:7b:08:36:d4:e0:57:96:9f:5a:d8:20:8f:a5:59:
16:12:ee:48:82:0d:51:62:8b:55:dd:b0:e7:18:c6:
a0:ab:71:0b:7f:eb:13:ce:dd:dd:2b:d0:86:1a:c8:
d9:36:e6:46:d4:74:ad:f4:b6:72:15:28:40:a8:61:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:BD:8D:7A:73:EC:C4:1B:CE:3F:09:79:97:71:EF:3C:DE:62:70
X509v3 Authority Key Identifier:
keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/7D13B7AEF0DA11F0923E16B83C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.22.205.0/24
203.30.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:8b:70:fe:57:4c:64:92:78:cf:19:71:d5:c3:18:98:ad:36:
a1:d7:62:5e:73:59:51:9c:22:c5:c2:a8:2d:5c:34:82:93:2b:
20:08:8c:67:ab:44:24:2a:bf:b8:7c:47:e8:8d:75:aa:04:a1:
94:ad:b8:aa:e1:25:37:3b:b9:55:2f:b3:d1:e4:99:00:b7:ce:
52:0d:e7:be:9b:a6:de:a4:93:2c:97:4b:67:36:73:e2:14:f5:
31:52:8d:8d:20:54:d7:8b:4c:45:12:5e:6e:6b:f1:b5:97:9b:
24:e4:af:11:ec:48:14:8f:9e:52:cc:6b:ce:61:88:36:0e:22:
db:e9:aa:60:1b:dc:e3:ee:4a:24:07:34:7e:75:d7:64:eb:ab:
2f:3b:6e:73:13:0f:9a:19:3a:95:3c:c5:0e:b9:89:20:9d:87:
2a:45:06:7b:91:3e:69:6c:52:18:15:cb:9d:42:e5:fe:c4:48:
ac:85:f7:7f:a2:d3:7c:3b:2f:54:5e:08:9c:9f:8c:f9:72:62:
44:c8:8c:89:db:a7:0e:89:5a:4b:74:ca:8f:5f:b0:c8:1a:70:
b7:d5:4c:04:11:08:d3:15:1c:97:93:95:e4:13:8d:5e:ee:70:
91:ee:0e:10:59:9e:17:49:fb:15:d6:39:28:4c:c9:00:ba:b6:
98:b3:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:31 2026 by rpki-client