
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A29347481B4F11F1A4B595BB243D8C67.roa
File: A29347481B4F11F1A4B595BB243D8C67.roa (raw, json)
Hash identifier: I6Jf0ENz6zH6Dr0nn64AaYVXkWEYmfgxIcYS+vYa8Kc=
Subject key identifier: A7:E9:8C:48:2F:69:C4:0B:17:29:03:3E:76:2F:67:CE:99:35:29:8B
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3DB8
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A29347481B4F11F1A4B595BB243D8C67.roa
Signing time: Thu 06 Aug 2026 15:12:02 +0000
ROA not before: Thu 06 Aug 2026 15:12:02 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 215595
IP address blocks: 203.173.100.0/24 maxlen: 24
203.173.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15800 (0x3db8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Aug 6 15:12:02 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a74a442-8260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:e9:f4:8d:5c:5e:63:2b:51:52:79:68:6b:
b7:03:a2:55:10:4d:e6:da:7d:a2:57:1f:5f:ac:e6:
d6:ef:75:ae:f8:7f:3f:e5:08:78:64:b4:b7:8f:13:
e8:7d:dc:6a:23:c7:d1:44:b0:59:30:fc:fa:3c:53:
a4:77:cf:54:08:df:a1:6c:2b:52:8a:a1:6f:de:75:
78:8b:31:4d:a9:7e:cc:ac:b2:53:e1:2b:70:15:fa:
0e:49:fc:a1:84:ad:df:c9:95:d1:a9:35:fc:a7:cf:
e8:34:dd:30:0b:74:da:8a:76:ae:bb:72:bb:df:46:
79:5c:d5:6a:2a:f3:95:91:bc:2f:db:70:8a:8d:a7:
1b:eb:c6:59:3e:7c:9c:af:47:d9:c5:6a:d4:3f:9a:
ba:ae:0d:6d:b3:f4:42:04:fb:4d:8b:74:18:cb:38:
7b:e7:03:19:54:65:c4:6e:b3:38:6f:7a:f9:cd:41:
e8:67:f1:0e:a6:35:39:21:01:7a:85:22:6e:29:e2:
2e:0f:fa:cc:b2:c8:ef:55:7f:7b:92:0f:97:b2:ba:
86:df:81:a1:fb:71:ee:79:f1:87:d2:91:05:8d:ba:
6f:0c:8d:03:0a:81:0d:09:26:2b:aa:9b:37:89:4b:
7a:c0:65:21:48:e2:c1:2e:e3:19:b2:bf:07:f8:fd:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E9:8C:48:2F:69:C4:0B:17:29:03:3E:76:2F:67:CE:99:35:29:8B
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A29347481B4F11F1A4B595BB243D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
203.173.100.0/23
Signature Algorithm: sha256WithRSAEncryption
64:c5:64:c5:c0:7c:f4:02:d6:97:4a:75:2e:03:e8:73:4b:88:
2b:d5:74:9f:fe:d4:69:e3:4e:19:cb:82:6c:db:0a:35:5d:fa:
66:30:56:c6:a7:21:79:4a:db:2c:fc:c4:07:44:31:5c:cc:3d:
b1:19:09:ee:bc:8e:e7:1e:b0:07:39:b6:43:29:83:22:21:6e:
c2:a0:f3:06:8c:25:e4:7c:6a:db:f5:cc:f4:ee:4c:39:a3:9f:
11:fc:65:39:75:15:eb:2a:02:51:69:23:0d:5d:37:be:7b:26:
b5:cf:45:d6:73:29:9d:2e:57:8d:7b:39:a5:0e:ef:10:bc:22:
4a:cc:da:33:03:35:c5:88:2e:cf:93:99:50:40:d8:a1:2f:e1:
e3:25:a2:09:cd:7f:73:69:81:6a:95:a3:a0:65:96:b8:1b:e3:
7f:6f:48:46:b9:7e:13:6a:87:42:d7:a9:d0:a6:d8:bf:b1:36:
c9:a6:94:cf:c1:ba:ec:ec:63:74:7b:a6:27:66:c6:eb:c7:83:
a6:38:b0:d9:9f:a2:37:36:70:01:e8:db:fa:18:69:3b:13:b1:
2c:87:de:4b:13:67:95:43:08:4b:5b:12:5a:e1:01:d2:51:a8:
f3:10:9a:52:81:ab:b6:c3:dc:70:77:0a:04:25:de:02:1d:50:
64:21:13:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:57 2026 by rpki-client