
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/240B1914D90B11EF95020982C4F9AE02.roa
File: 240B1914D90B11EF95020982C4F9AE02.roa (raw, json)
Hash identifier: 0gHNtWChBEUR4YEQpsBzxLagBwCzjHIiYU13EWlRZC8=
Subject key identifier: 7E:B8:E9:D8:33:8C:61:8D:FF:70:13:7D:5F:B1:A7:22:A6:08:EA:BA
Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Certificate serial: DC
Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/240B1914D90B11EF95020982C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:29:30 +0000
ROA not before: Mon 23 Feb 2026 05:25:16 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136557
IP address blocks: 161.248.254.0/24 maxlen: 24
161.248.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 05:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Validity
Not Before: Feb 23 05:25:16 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a590ba-4c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:71:9c:27:37:f5:e6:27:23:de:fe:9a:bb:
75:04:6a:db:7f:d6:d3:48:11:a9:cb:30:d6:fc:fd:
de:2a:3c:90:9d:d2:be:a5:0e:24:6f:9b:61:95:bf:
d0:04:7f:d8:b6:62:18:e1:37:05:04:fb:23:95:54:
72:3f:40:65:5d:37:e4:53:3f:51:75:af:1c:a3:13:
3e:0f:dd:9f:29:c8:9d:47:79:d8:1a:fa:f7:4a:8b:
37:cb:f2:c0:ac:ec:2f:b8:79:42:07:b7:ba:97:6f:
88:25:10:27:5b:a5:dd:f2:9d:06:c5:2d:00:11:66:
bf:a7:1b:de:08:df:08:eb:94:89:a1:b8:e5:b6:76:
1b:58:21:66:71:61:03:d7:47:ed:0b:42:15:19:f6:
bd:59:cf:16:cf:03:ca:41:c8:cb:fc:c2:82:5a:3b:
ac:5f:71:95:c0:bc:05:79:da:37:ef:a2:0c:d0:75:
a5:6c:e1:24:64:cb:5a:09:76:25:d6:a7:ff:ea:e8:
77:5c:9b:d0:c5:80:f5:4f:61:90:e0:f9:d6:45:e3:
a3:92:b4:11:8a:7f:ab:d5:06:46:18:80:e1:c1:bd:
ac:c7:2d:e3:4e:b3:59:1e:91:76:1a:ce:b5:3c:fa:
fe:bc:4b:42:b9:09:dc:24:ec:5f:c4:a7:92:03:d6:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B8:E9:D8:33:8C:61:8D:FF:70:13:7D:5F:B1:A7:22:A6:08:EA:BA
X509v3 Authority Key Identifier:
keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/240B1914D90B11EF95020982C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.254.0/23
Signature Algorithm: sha256WithRSAEncryption
72:74:13:00:6c:c4:13:3b:4a:ee:74:f5:7f:ca:da:d7:77:d9:
61:27:b5:a4:25:56:15:e8:28:36:f7:c3:42:b3:e5:c3:a3:02:
7b:92:c7:c6:0a:2b:f5:01:e3:1d:f6:b9:2f:20:fe:50:b3:1e:
ac:95:53:58:1e:88:1f:fc:ef:e0:f0:37:6b:dd:cb:00:3c:da:
ab:27:0f:94:fe:e4:ba:5e:2e:02:f0:ca:e8:dc:82:92:9a:2d:
8f:b0:c6:e0:a0:45:7a:f7:38:4b:93:bd:20:b1:2d:07:b7:ae:
11:bc:0b:2f:90:66:b6:c3:22:c5:0c:5f:57:cb:73:87:2f:93:
63:85:f8:5f:78:9f:91:6a:1d:77:a3:8b:48:ee:8b:a9:53:c0:
b2:ea:53:3f:ad:2c:b6:cc:00:b5:d3:63:6f:f9:6b:fd:9c:54:
1e:da:ac:78:69:0b:13:c3:af:36:0e:30:a2:f7:dc:4e:f9:73:
3a:c3:7c:f1:b6:12:4c:e0:06:ce:85:a7:17:6a:ea:b0:bd:c9:
f6:53:0a:bf:61:19:7a:78:4d:6d:53:9f:c5:d7:62:c0:98:79:
17:ad:c0:03:64:c4:29:21:cc:71:ac:9e:97:d8:19:62:0e:5d:
50:e5:26:97:d7:68:27:91:37:f4:98:cd:d7:93:51:0d:4a:e3:
d4:dd:ff:0c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNjExMTAvBgNVBAUTKEI0OUIyQjExRDM4NzZERUNERTEzRjVFOEY1OUU2NDFB
N0QwOTNGQjkwHhcNMjYwMjIzMDUyNTE2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTBiYS00YzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAldtxnCc39eYnI97+mrt1BGrbf9bTSBGpyzDW/P3eKjyQndK+pQ4kb5thlb/Q
BH/YtmIY4TcFBPsjlVRyP0BlXTfkUz9Rda8coxM+D92fKcidR3nYGvr3Sos3y/LA
rOwvuHlCB7e6l2+IJRAnW6Xd8p0GxS0AEWa/pxveCN8I65SJobjltnYbWCFmcWED
10ftC0IVGfa9Wc8WzwPKQcjL/MKCWjusX3GVwLwFedo376IM0HWlbOEkZMtaCXYl
1qf/6uh3XJvQxYD1T2GQ4PnWReOjkrQRin+r1QZGGIDhwb2sxy3jTrNZHpF2Gs61
PPr+vEtCuQncJOxfxKeSA9aaHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH646dgz
jGGN/3ATfV+xpyKmCOq6MB8GA1UdIwQYMBaAFLSbKxHTh23s3hP16PWeZBp9CT+5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE2MS83MTMyRUY5QUQ5
MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJlemVFX1hvOVo1a0duMEpQ
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzMxNjEvNzEzMkVGOUFEOTA3MTFFRkIyN0Y3ODU3QzRGOUFFMDIvMjQwQjE5MTRE
OTBCMTFFRjk1MDIwOTgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBofj+MA0GCSqGSIb3DQEBCwUAA4IBAQBydBMAbMQTO0rudPV/ytrX
d9lhJ7WkJVYV6Cg298NCs+XDowJ7ksfGCiv1AeMd9rkvIP5Qsx6slVNYHogf/O/g
8Ddr3csAPNqrJw+U/uS6Xi4C8Mro3IKSmi2PsMbgoEV69zhLk70gsS0Ht64RvAsv
kGa2wyLFDF9Xy3OHL5NjhfhfeJ+Rah13o4tI7oupU8Cy6lM/rSy2zAC102Nv+Wv9
nFQe2qx4aQsTw682DjCi99xO+XM6w3zxthJM4AbOhacXauqwvcn2Uwq/YRl6eE1t
U5/F12LAmHkXrcADZMQpIcxxrJ6X2BliDl1Q5SaX12gnkTf0mM3Xk1ENSuPU3f8M
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:33:46 2026 by rpki-client