
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/2A9AFB320BC911EBBA11562FC4F9AE02.roa
File: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (raw, json)
Hash identifier: IYK0qSzEebuE0KBmbImZms3PEASi26kf8B/z+PvBOXQ=
Subject key identifier: C6:C2:37:90:6D:EA:91:76:CB:1E:F9:FF:C0:A1:71:90:D0:73:68:6F
Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6
Certificate serial: 0D13
Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/2A9AFB320BC911EBBA11562FC4F9AE02.roa
Signing time: Thu 06 Aug 2026 18:36:40 +0000
ROA not before: Thu 06 Aug 2026 18:36:40 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 134404
IP address blocks: 103.192.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl
rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3347 (0xd13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6
Validity
Not Before: Aug 6 18:36:40 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74d438-1aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:ab:6b:34:4a:43:3f:bb:6d:ef:58:30:0f:
09:b6:ce:0d:4e:40:50:fb:49:e1:8e:67:4a:6b:37:
9a:cf:4f:76:e2:07:ee:d1:ce:06:5e:fa:b4:b3:15:
d3:55:68:97:aa:0a:63:18:c5:85:cf:52:03:70:c2:
7c:3d:d6:f6:5b:37:d2:b2:64:18:5b:10:71:a2:8c:
e9:a8:16:7a:f7:3f:1d:20:39:4a:74:df:6b:07:42:
d5:f2:cf:00:93:ff:59:61:0a:84:1b:16:e9:a9:97:
e3:66:ba:95:8c:54:1d:82:40:3e:ea:e1:f9:48:22:
25:f6:01:d2:4a:87:a5:25:8a:0b:90:c6:6c:47:31:
75:1b:31:3b:d3:33:4a:0c:e5:13:50:ea:39:6c:36:
89:32:ee:2d:7d:97:5d:fa:07:aa:ca:7d:04:d8:6c:
c3:b4:53:f8:43:12:2c:26:f5:f7:00:9b:01:95:de:
4c:a3:49:32:0a:2d:e4:1a:aa:9e:9a:ce:c8:67:0c:
f3:ae:7b:34:0e:64:ef:bc:37:24:86:55:17:6a:1f:
c3:71:41:02:dc:35:68:e5:db:12:ac:a9:05:d5:e0:
ea:9f:67:c4:84:48:25:f3:31:fb:01:07:c0:91:42:
b7:dc:d2:b2:f8:a3:b1:7b:e3:bd:1f:ac:08:bb:bf:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:37:90:6D:EA:91:76:CB:1E:F9:FF:C0:A1:71:90:D0:73:68:6F
X509v3 Authority Key Identifier:
keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/2A9AFB320BC911EBBA11562FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.192.156.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:e1:1d:70:40:a6:1c:39:9f:b7:e5:89:7b:7b:cb:14:55:56:
58:61:36:2e:57:34:fe:06:dc:de:5b:46:26:1d:08:10:ae:bf:
2b:96:1f:14:60:24:ca:55:67:18:19:d7:24:65:ac:6c:74:f8:
06:a4:35:83:72:87:47:83:f9:44:58:8d:bb:c3:17:57:d8:fc:
fb:75:94:47:97:9a:48:d6:72:51:5e:32:ae:75:7f:66:f9:2e:
ec:5c:ff:3c:85:a8:c3:b3:58:d5:db:5f:9c:1d:ec:8a:95:e4:
e9:e6:d8:81:33:59:04:88:d8:1d:7a:82:11:ad:14:64:90:d1:
22:a2:0b:d9:79:88:6f:5d:b7:8c:a9:46:4b:41:b0:a2:7b:3a:
07:40:d3:da:e5:ab:11:f8:90:b8:9b:d1:71:ff:5c:d0:8f:ea:
d1:2e:76:84:a3:9e:de:0f:c7:ee:f9:9c:88:f7:95:bc:95:d7:
89:b5:95:e0:c0:1b:2a:4a:05:dd:39:9e:56:52:a5:58:ff:cb:
c9:a1:d9:be:46:15:9a:40:4e:10:fa:d1:fd:97:3b:83:f9:da:
e3:9e:14:04:b2:ac:23:f7:69:5a:4a:35:99:17:5d:0b:87:d0:
24:fc:71:7b:10:d7:20:59:91:76:64:b6:f2:e3:08:d4:4c:ec:
b3:9a:f1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:53:04 2026 by rpki-client