
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A29347481B4F11F1A4B595BB243D8C67.roa
File: A29347481B4F11F1A4B595BB243D8C67.roa (raw, json)
Hash identifier: cFIIURMISz0qcX6KSUfjvKtpLlYIhmwjeZDiRxoHciA=
Subject key identifier: 46:25:C9:75:7E:BD:FB:26:0F:3C:8C:C6:13:3C:34:67:99:0D:84:BD
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3C57
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A29347481B4F11F1A4B595BB243D8C67.roa
Signing time: Mon 09 Mar 2026 00:34:39 +0000
ROA not before: Mon 09 Mar 2026 00:34:39 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 215595
IP address blocks: 203.173.100.0/24 maxlen: 24
203.173.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Mar 2026 00:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15447 (0x3c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Mar 9 00:34:39 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69ae159f-c4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:52:e2:35:3c:ff:cd:ad:b7:06:1a:cf:7e:
f8:58:50:db:c6:75:e6:66:a0:af:95:53:5a:d9:52:
3b:1a:41:a9:88:5e:40:4a:29:a9:dd:8f:14:2b:e1:
44:aa:68:b2:7f:12:dd:a0:19:66:71:36:4d:d2:4b:
70:b8:b2:fd:db:66:a5:a7:54:56:6a:74:c8:44:82:
82:a5:a7:fe:9f:7e:39:04:b0:27:7d:ae:0a:df:49:
23:41:6b:01:73:83:8d:ea:47:da:d6:a5:d6:f8:7e:
d7:0f:09:67:d9:c4:11:be:71:2a:c9:b3:59:e0:ee:
58:e2:7a:d2:3a:e8:a1:9c:6f:9c:98:a7:9c:37:d5:
8d:8e:42:27:65:b4:fc:a8:b2:3d:68:7c:b0:2a:3a:
e2:18:71:b6:57:65:46:0a:18:10:aa:86:99:17:16:
bb:23:e1:80:0d:4f:dc:6c:e1:c0:d3:0e:81:05:b8:
5f:b5:8a:f1:d3:50:4f:f6:73:e1:ed:b7:3e:45:d1:
d9:a6:bc:a5:2f:f8:11:d1:46:b9:2d:27:4f:d2:4d:
09:1d:f9:87:fe:66:74:9e:91:08:fc:15:4e:88:d8:
62:66:7e:90:e2:d2:ca:86:82:c2:07:9c:da:6e:22:
36:c3:b1:cc:f9:00:83:a7:68:46:bd:f4:30:4a:cc:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:25:C9:75:7E:BD:FB:26:0F:3C:8C:C6:13:3C:34:67:99:0D:84:BD
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A29347481B4F11F1A4B595BB243D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
203.173.100.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:22:8f:01:e3:a3:c6:d6:c0:c8:0d:f8:83:3d:8c:7a:f3:d0:
65:cf:61:9e:99:75:4d:54:18:5c:58:ca:5c:d8:f5:21:53:34:
a8:e4:47:69:bd:d6:74:3c:a5:25:9e:ab:c5:be:44:7d:2d:72:
67:da:28:25:4e:94:b1:ad:e7:86:c4:39:d3:0b:22:a0:d6:54:
2e:ce:b8:52:96:a1:0c:91:29:77:9e:4c:85:2b:93:5a:16:86:
b1:5f:96:f4:3e:1c:dc:8d:a3:dc:f3:ba:0a:e3:22:d1:c5:88:
7d:14:2c:f7:1a:8b:40:9b:20:33:9d:f0:9a:b8:a7:1e:0c:d7:
57:c6:7b:ec:a0:80:02:04:db:c2:39:7f:dd:b5:6d:87:8e:55:
a7:ab:8d:93:7e:03:b1:40:67:3c:b2:16:61:8b:27:b7:a0:f2:
cb:c6:e8:2d:6e:23:79:14:45:2b:07:b8:05:2b:ec:b9:be:61:
19:90:c1:7b:4e:04:d5:36:38:99:54:88:fe:d4:98:1d:46:1b:
ec:05:e4:d6:b3:00:80:14:56:ec:8b:5c:3c:20:2c:0a:2a:f7:
4c:8a:ab:28:e2:62:ac:7d:38:cd:e9:e1:a5:52:5f:09:af:11:
b2:33:0d:d9:7a:c9:e8:ac:d5:a8:63:d0:f9:ca:04:79:31:3f:
a1:bf:55:a0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICPFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjYwMzA5MDAzNDM5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFlMTU5Zi1jNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsv5S4jU8/82ttwYaz374WFDbxnXmZqCvlVNa2VI7GkGpiF5ASimp3Y8UK+FE
qmiyfxLdoBlmcTZN0ktwuLL922alp1RWanTIRIKCpaf+n345BLAnfa4K30kjQWsB
c4ON6kfa1qXW+H7XDwln2cQRvnEqybNZ4O5Y4nrSOuihnG+cmKecN9WNjkInZbT8
qLI9aHywKjriGHG2V2VGChgQqoaZFxa7I+GADU/cbOHA0w6BBbhftYrx01BP9nPh
7bc+RdHZprylL/gR0Ua5LSdP0k0JHfmH/mZ0npEI/BVOiNhiZn6Q4tLKhoLCB5za
biI2w7HM+QCDp2hGvfQwSsyUiwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEYlyXV+
vfsmDzyMxhM8NGeZDYS9MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvQTI5MzQ3NDgx
QjRGMTFGMUE0QjU5NUJCMjQzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBy61kMA0GCSqGSIb3DQEBCwUAA4IBAQDSIo8B46PG1sDIDfiDPYx6
89Blz2GemXVNVBhcWMpc2PUhUzSo5EdpvdZ0PKUlnqvFvkR9LXJn2iglTpSxreeG
xDnTCyKg1lQuzrhSlqEMkSl3nkyFK5NaFoaxX5b0PhzcjaPc87oK4yLRxYh9FCz3
GotAmyAznfCauKceDNdXxnvsoIACBNvCOX/dtW2HjlWnq42TfgOxQGc8shZhiye3
oPLLxugtbiN5FEUrB7gFK+y5vmEZkMF7TgTVNjiZVIj+1JgdRhvsBeTWswCAFFbs
i1w8ICwKKvdMiqso4mKsfTjN6eGlUl8JrxGyMw3ZesnorNWoY9D5ygR5MT+hv1Wg
-----END CERTIFICATE-----
Generated at Tue Mar 10 13:18:08 2026 by rpki-client