
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa
File: 8C73DD2414F711F088D0424FC4F9AE02.roa (raw, json)
Hash identifier: 9o+Qw/FeSyyPIEmhCtAbhaIoXiSOwHTJpapnPBPLnq8=
Subject key identifier: 15:B2:98:2F:5E:C7:D2:23:1B:FD:0A:8A:EA:10:20:9E:1F:7B:C3:72
Certificate issuer: /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial: 017A
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:32:51 +0000
ROA not before: Sat 03 May 2025 05:12:00 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 23838
IP address blocks: 115.126.128.0/24 maxlen: 24
202.162.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 03:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Validity
Not Before: May 3 05:12:00 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a59f93-14ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:47:c3:a3:bd:7c:a9:4d:c8:ac:51:a3:00:fc:
6c:cb:77:5b:1a:2f:94:60:8f:83:9f:40:1d:32:3c:
ad:c8:68:f7:b7:54:b7:87:bf:86:7e:07:d9:76:2b:
18:5a:ca:8d:1c:fc:f6:93:02:34:a1:66:9d:8f:c2:
16:ed:11:b1:f6:0a:25:8c:aa:2c:d5:d7:d8:03:65:
09:12:e5:df:67:99:45:fa:32:58:3a:6c:99:85:18:
fa:85:d4:5c:f5:65:c6:1f:4f:7c:64:32:ce:7c:2b:
89:9e:b0:c8:ab:c1:56:35:b6:af:ef:f4:92:8a:12:
06:4e:45:2a:e5:0b:b0:c6:d0:26:31:83:dc:46:23:
8a:16:87:b9:b2:50:c2:0d:3d:00:83:a7:0c:23:85:
19:91:82:da:66:3d:04:85:3d:e2:71:eb:e5:cd:16:
d6:62:a4:46:71:f3:96:d0:a8:9e:82:d1:7d:e5:16:
fb:f4:c8:61:7f:86:57:a6:9d:f5:cc:ee:6c:5e:eb:
73:36:86:62:77:1b:73:59:cf:4c:34:ec:b6:dd:0f:
d9:30:31:3c:15:b0:e6:dd:ae:fb:d5:f2:e7:f8:ab:
93:f3:67:89:7e:65:36:e4:15:22:26:0c:22:3a:6b:
d9:33:d8:3a:50:eb:49:33:08:b9:95:0a:93:81:86:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:98:2F:5E:C7:D2:23:1B:FD:0A:8A:EA:10:20:9E:1F:7B:C3:72
X509v3 Authority Key Identifier:
keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
115.126.128.0/24
202.162.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c1:84:0e:ac:76:bd:6b:4f:a5:67:23:f5:57:e0:39:70:b8:
18:3d:b9:d7:18:24:7d:85:48:94:e9:17:83:c0:c2:19:b7:c5:
20:10:2f:a6:e6:29:de:1d:0e:78:9a:dc:4a:95:c7:fa:ae:5f:
b4:b2:d9:5c:ef:b4:0c:cd:21:70:16:05:4e:dd:a5:38:3f:3d:
46:60:ac:20:49:ec:f7:30:bd:77:7d:8f:56:4a:50:e8:95:6a:
97:eb:b8:7d:4a:b8:87:20:7c:49:3e:01:ff:9f:58:f3:cb:3b:
44:c0:38:de:c1:52:ce:01:df:60:fd:c2:9e:1a:f8:16:89:21:
29:13:c4:bd:25:c3:a8:29:c2:75:fd:80:f6:bd:ec:3b:1b:1c:
e3:ce:a0:16:f9:7b:7b:52:8e:da:04:c4:49:0e:19:6e:15:fb:
48:fb:46:9a:20:55:40:38:00:07:e9:24:77:92:91:e0:7e:ba:
a7:39:25:0f:33:66:9a:cf:cc:a2:fe:b6:37:54:9b:f0:19:63:
76:11:52:6d:04:24:d1:64:fe:86:f4:2b:07:70:76:4f:9b:6d:
72:58:5c:f7:8c:d1:6e:a7:11:b6:60:f0:d1:0a:a0:fa:24:e4:
b8:44:e5:eb:a2:c3:52:70:f7:70:88:87:43:15:7a:3f:1c:9a:
7a:78:2d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 22:46:15 2026 by rpki-client