
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/229253A4A1F111F084328A39C4F9AE02.roa
File: 229253A4A1F111F084328A39C4F9AE02.roa (raw, json)
Hash identifier: Mo9vGdj4BG0OS7QK1hyQLJY9HjLI3Bpb5SXRCt0vElw=
Subject key identifier: C0:C1:2F:8B:15:A4:89:23:B3:B2:BA:8D:54:63:D1:53:B6:DC:87:86
Certificate issuer: /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial: 01AB
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/229253A4A1F111F084328A39C4F9AE02.roa
Signing time: Tue 31 Mar 2026 04:37:28 +0000
ROA not before: Tue 31 Mar 2026 04:37:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151781
IP address blocks: 203.20.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Validity
Not Before: Mar 31 04:37:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69cb4f88-b6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:85:c0:0c:d4:0b:f9:6d:b0:31:81:e6:86:
d7:a8:f0:ed:08:a5:e6:0e:6b:e3:7d:aa:71:e7:be:
56:c6:8e:3f:76:11:a9:66:75:0d:97:63:33:04:e9:
19:a0:54:19:8e:19:df:2f:24:83:47:69:32:f4:57:
ef:0a:ea:08:b9:2c:25:49:5a:00:05:35:30:4d:99:
5c:7c:c3:bb:a5:9a:ce:c2:10:48:cc:a3:31:11:3e:
3a:d4:26:a3:c5:30:af:1c:cd:b1:05:d9:44:13:0c:
a4:35:a4:45:d5:43:fc:6e:2e:9e:bb:7a:e0:b2:ea:
f9:24:72:c2:5a:94:89:9f:fb:a4:e0:0d:c7:1d:c7:
11:d6:60:ac:0e:6e:66:7e:3b:25:58:49:e5:24:1c:
3f:d0:ab:6b:c8:fc:77:59:24:a9:1d:28:19:07:36:
05:34:f8:d0:15:28:c0:25:cc:52:a2:a8:09:19:65:
ee:e7:2e:03:42:8a:03:8d:59:c4:94:0d:01:b3:2e:
11:7a:54:bf:d1:f2:0b:fd:71:5d:3e:46:1b:85:dc:
ee:be:57:7a:c9:70:8f:6b:5e:6d:f6:59:3e:82:31:
46:46:60:39:83:f9:dc:a3:c5:5e:f1:7b:28:bf:47:
f2:40:15:df:de:e8:50:67:f9:bf:3a:b1:6e:eb:d5:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:2F:8B:15:A4:89:23:B3:B2:BA:8D:54:63:D1:53:B6:DC:87:86
X509v3 Authority Key Identifier:
keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/229253A4A1F111F084328A39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f7:cb:e6:28:4c:00:5c:c4:3b:83:ad:1a:fa:95:d7:e6:82:
5d:d7:f6:42:4a:38:f9:05:8d:4f:36:17:95:c1:2f:64:e2:fe:
d3:89:ca:ec:e8:da:1b:61:83:d8:d2:03:a3:8d:74:79:5d:dd:
c8:84:75:5f:11:ee:86:f2:ea:e0:e5:de:c6:24:9a:9c:5b:5e:
c1:b1:6a:4d:db:4e:3a:fc:87:95:d7:4f:f8:ae:3e:19:a6:f3:
d9:22:a2:d3:8c:de:4e:e6:52:6b:4e:42:ff:a8:0c:a8:15:15:
b6:7d:4a:67:10:bf:3a:41:16:9b:e2:a9:be:ce:50:48:5e:b0:
34:d2:6e:d1:b2:49:e8:03:2e:32:59:01:94:72:b5:c1:63:97:
a0:df:6f:8c:3e:de:86:1b:ac:0d:82:57:de:1f:fb:e3:86:a3:
d2:33:3a:02:72:96:ef:be:e0:f1:a4:6e:77:bd:e3:7f:b7:1b:
21:04:7f:38:6b:25:77:e9:e5:e8:8c:cf:82:22:03:ca:ca:e4:
51:ce:f1:3f:f7:48:a4:e9:56:97:0e:ac:31:54:28:33:df:7c:
1c:58:b1:72:c4:05:17:60:96:4a:49:01:36:3a:37:b9:01:88:
9e:80:97:62:99:bb:51:ae:af:c1:85:d2:0b:02:62:10:8d:cc:
f1:5a:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:44:22 2026 by rpki-client