
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C4E57D9EE55A11ED98D38780C4F9AE02.roa
File: C4E57D9EE55A11ED98D38780C4F9AE02.roa (raw, json)
Hash identifier: y0+JvtMZneyLAkeZYh9VrzkklhQ0hdBbhaIghcfRRoY=
Subject key identifier: DB:78:AC:81:70:6E:6A:13:FF:2A:F2:05:D1:0D:12:43:92:49:0F:F4
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 0792
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C4E57D9EE55A11ED98D38780C4F9AE02.roa
Signing time: Sat 04 Jul 2026 22:23:30 +0000
ROA not before: Sat 04 Jul 2026 22:23:30 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 45201
IP address blocks: 202.125.168.0/24 maxlen: 24
203.56.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 22:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1938 (0x792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Jul 4 22:23:30 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4987e2-a0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:08:a8:da:80:7f:73:16:93:93:14:7c:5d:
3d:be:ec:9a:e5:97:25:37:fe:ae:10:20:8a:57:89:
c7:4b:f4:c2:71:72:b0:49:94:4c:46:c2:17:4a:73:
c8:82:01:82:eb:8b:be:5c:ba:4e:c1:56:63:3f:21:
46:03:4c:11:44:bc:c3:eb:a5:3a:94:91:a3:e2:05:
56:5e:8d:94:3b:fb:a0:3d:47:48:6e:02:c6:6b:12:
24:80:d4:fc:d1:64:69:18:b4:29:8d:32:c4:f0:08:
b1:d9:ae:1f:67:40:10:68:4c:e1:8b:45:ad:0f:a9:
4e:a2:3b:77:66:33:85:f3:ac:d3:c7:8f:89:9d:64:
8e:40:a8:43:ff:21:8d:20:a9:e2:2b:fe:40:20:30:
e7:b1:47:10:25:e4:52:c7:74:96:b9:de:c0:11:67:
31:a2:b7:a0:7b:24:06:3c:f2:9c:61:fd:1b:53:5a:
3b:98:a6:78:72:d4:a9:e8:b2:8a:9b:36:5d:15:42:
98:3d:28:93:dd:4b:66:f9:5a:59:60:ee:e4:93:64:
90:d9:72:20:80:8b:da:48:70:ab:51:d6:23:44:d5:
4b:eb:01:35:e0:ad:02:09:7a:0a:1e:bf:8a:b1:97:
a5:da:d6:64:38:76:8a:b7:dc:af:5e:2b:74:75:1d:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:78:AC:81:70:6E:6A:13:FF:2A:F2:05:D1:0D:12:43:92:49:0F:F4
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C4E57D9EE55A11ED98D38780C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.125.168.0/24
203.56.225.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1a:f3:ea:1a:ff:1c:c4:56:06:97:b4:2c:a2:cc:9b:43:83:
4e:d7:ec:fb:be:bf:f1:6c:bd:c5:d4:1a:e2:19:0a:0f:92:af:
08:72:d2:0f:36:c2:9a:2d:da:9d:b9:b6:00:81:75:1a:ce:7f:
b5:95:f2:eb:39:31:eb:a8:53:a1:25:02:16:d4:0e:4e:6c:08:
72:ad:cb:78:6e:79:cd:f4:45:57:f9:f8:d1:f1:20:46:63:ec:
09:28:5f:f1:0a:87:fb:e0:fd:5c:3d:85:92:6c:ec:dd:d5:39:
35:66:94:c5:16:7d:03:f3:0b:5b:5c:29:7a:5a:f1:5c:08:ac:
3c:3b:6c:bd:24:34:ca:87:9e:7c:94:67:af:24:4f:fe:d1:3e:
7c:0b:ee:11:03:3f:cc:46:c3:3e:d4:fd:10:16:04:a3:7f:fa:
8b:d3:60:d3:bb:c3:75:d5:f7:19:3d:16:34:d0:be:a8:7b:6d:
17:be:f6:4f:44:5d:26:69:61:57:ee:95:b2:4b:55:7b:38:4f:
d8:4a:6f:24:3d:3b:3e:20:8a:f3:73:ae:c1:14:5e:d3:51:31:
e2:e9:e5:e5:10:90:b2:78:c5:ba:39:5e:29:37:12:ae:c1:b2:
ad:c3:8c:6b:e9:3b:0b:63:11:be:7d:01:f1:ef:af:7b:2d:86:
ed:1e:3c:b9
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4
MzE0RThGQ0IwHhcNMjYwNzA0MjIyMzMwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ5ODdlMi1hMGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcEIqNqAf3MWk5MUfF09vuya5ZclN/6uECCKV4nHS/TCcXKwSZRMRsIXSnPI
ggGC64u+XLpOwVZjPyFGA0wRRLzD66U6lJGj4gVWXo2UO/ugPUdIbgLGaxIkgNT8
0WRpGLQpjTLE8Aix2a4fZ0AQaEzhi0WtD6lOojt3ZjOF86zTx4+JnWSOQKhD/yGN
IKniK/5AIDDnsUcQJeRSx3SWud7AEWcxoregeyQGPPKcYf0bU1o7mKZ4ctSp6LKK
mzZdFUKYPSiT3Utm+VpZYO7kk2SQ2XIggIvaSHCrUdYjRNVL6wE14K0CCXoKHr+K
sZel2tZkOHaKt9yvXit0dR3h7wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNt4rIFw
bmoT/yryBdENEkOSSQ/0MB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC
RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzNDRTYvMEU4RTI3ODA3QkQwMTFFQjg1QTY2OTgwQzRGOUFFMDIvQzRFNTdEOUVF
NTVBMTFFRDk4RDM4NzgwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAyn2oAwQAyzjhMA0GCSqGSIb3DQEBCwUAA4IBAQBiGvPqGv8cxFYG
l7QsosybQ4NO1+z7vr/xbL3F1BriGQoPkq8IctIPNsKaLdqdubYAgXUazn+1lfLr
OTHrqFOhJQIW1A5ObAhyrct4bnnN9EVX+fjR8SBGY+wJKF/xCof74P1cPYWSbOzd
1Tk1ZpTFFn0D8wtbXCl6WvFcCKw8O2y9JDTKh558lGevJE/+0T58C+4RAz/MRsM+
1P0QFgSjf/qL02DTu8N11fcZPRY00L6oe20XvvZPRF0maWFX7pWyS1V7OE/YSm8k
PTs+IIrzc67BFF7TUTHi6eXlEJCyeMW6OV4pNxKuwbKtw4xr6TsLYxG+fQHx7697
LYbtHjy5
-----END CERTIFICATE-----
Generated at Tue Jul 7 15:47:53 2026 by rpki-client