
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/C828314A02CC11E6AA35863CC4F9AE02.roa
File: C828314A02CC11E6AA35863CC4F9AE02.roa (raw, json)
Hash identifier: gU89Q3UCcTfIuonWf4oM4J8bmG7V6fm6L0kNg0N/Yj8=
Subject key identifier: 4A:BF:B1:2A:B9:84:8F:FF:69:17:2E:5D:EE:D7:3A:05:BF:42:02:9F
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 2620
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/C828314A02CC11E6AA35863CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:52:50 +0000
ROA not before: Mon 04 Aug 2025 16:24:17 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 18115
IP address blocks: 112.198.48.0/24 maxlen: 24
203.177.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9760 (0x2620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Aug 4 16:24:17 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48b02-cb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:1f:ad:8d:79:a8:a9:98:c6:4b:e4:f0:e4:
8c:0a:2d:95:c8:d7:d3:2e:17:29:3e:48:9d:3d:3a:
8b:58:0c:8b:1f:9b:a2:09:cf:74:19:06:b0:fc:0b:
f6:e6:f5:23:32:09:d6:b6:e2:a7:5a:cf:a3:b2:51:
16:29:26:a0:29:43:7c:23:a5:e8:f8:17:e5:93:b9:
ee:17:1b:f6:68:63:3e:f8:73:e6:6d:3d:36:2d:5e:
d1:f5:c7:42:61:53:be:76:f8:c6:45:6b:14:b4:a1:
96:7f:05:95:c9:1f:af:f3:10:94:62:76:a8:69:0e:
b1:d7:a6:2c:e2:f7:9a:9c:c8:d6:43:c3:19:73:f0:
d4:4d:52:10:cd:74:a2:df:20:75:da:ea:53:ab:3c:
a3:7b:7d:17:46:d9:7a:9a:8e:4e:ea:1f:59:16:49:
ce:b8:ff:0f:b2:f9:e5:e5:5c:09:95:a7:93:05:e9:
fc:b0:8e:da:81:c9:40:cd:8e:2e:d6:fb:12:d1:50:
97:96:b8:e2:e1:7c:89:35:60:2d:e7:87:c8:b8:57:
1a:1c:7d:43:ec:83:6c:90:c1:f6:2f:c5:29:9d:9c:
07:d1:9a:0b:21:3f:0c:c6:ff:52:f0:76:43:cc:85:
f3:3a:02:1b:ca:ea:17:a0:81:74:06:30:76:03:bb:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BF:B1:2A:B9:84:8F:FF:69:17:2E:5D:EE:D7:3A:05:BF:42:02:9F
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/C828314A02CC11E6AA35863CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
112.198.48.0/24
203.177.228.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b5:34:f3:48:20:94:6b:40:5b:2a:1e:77:3a:a3:7f:01:08:
15:ce:39:4d:d0:d6:b5:71:ac:01:71:35:90:51:0e:6e:f7:79:
0e:f2:c9:9b:6c:58:95:c3:07:b8:08:15:69:d1:0f:00:12:a0:
a1:0c:5a:dc:25:c3:98:cd:c8:6f:d3:04:00:16:9c:a5:4f:37:
bb:f8:6c:09:95:44:f1:0a:e2:f9:64:cb:b3:bd:24:e7:11:12:
ef:ce:7d:1e:ff:86:b1:46:2a:4a:2b:a6:f4:e9:17:2a:ec:f1:
33:c2:98:94:ef:8e:2f:93:0f:fe:5f:4c:9e:26:b3:6d:dd:1e:
0a:7b:fb:fa:ee:99:c6:e5:3f:2a:bc:1c:40:72:04:16:93:57:
cf:d8:b0:4d:02:3c:3d:b4:27:61:de:cc:b3:b3:35:ee:8b:30:
4a:38:12:b5:de:95:f5:ee:c4:3a:a5:41:00:c7:cc:f4:5c:bc:
bc:6c:58:82:8d:ac:dd:9a:07:a9:70:32:1a:31:60:cc:76:4f:
87:ce:74:60:2b:49:ce:75:39:3a:b4:1c:d3:86:7f:21:08:e2:
fc:35:52:7d:69:89:15:e2:39:46:26:6f:b2:74:59:ef:7e:f5:
0d:45:78:ae:38:d1:52:bc:09:76:cc:b5:f6:5b:49:df:96:a3:
48:87:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:30:45 2026 by rpki-client