
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/2D7A0C2A08D811EF8DFDE781C4F9AE02.roa
File: 2D7A0C2A08D811EF8DFDE781C4F9AE02.roa (raw, json)
Hash identifier: cz4Ylmr4Kv9n4Y7QqxrwtG+najuucUzZTc2q4HUpfpg=
Subject key identifier: 97:D3:91:96:B1:63:4C:CF:CC:80:08:CA:EB:B8:47:E6:07:2D:23:72
Certificate issuer: /CN=A9179F22/serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF
Certificate serial: 01C3
Authority key identifier: 06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/2D7A0C2A08D811EF8DFDE781C4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:25:06 +0000
ROA not before: Fri 27 Feb 2026 03:22:54 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 16509
IP address blocks: 167.179.24.0/24 maxlen: 24
204.145.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl
rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 03:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F22, serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF
Validity
Not Before: Feb 27 03:22:54 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a61c52-b736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:3c:a8:32:3c:3b:5b:b2:4b:a2:ff:3e:ea:
f3:7f:c7:76:63:51:fc:48:29:1c:c2:f1:e7:f1:59:
1f:e1:4c:f9:3e:2d:5b:64:a0:06:70:08:05:c1:d5:
d2:9a:bc:37:29:a3:44:28:33:e3:56:54:25:d0:34:
3f:7c:35:b5:e8:e4:21:1c:70:31:d6:19:32:9c:4c:
8e:d1:95:0c:68:c5:33:a6:3a:76:46:39:4e:83:70:
e5:4b:09:c9:ca:8c:c4:36:dc:35:34:9b:11:ad:37:
4c:06:10:85:f3:ad:a8:b3:58:d8:38:f1:a8:76:2c:
8a:ba:b3:53:68:45:71:7c:5b:1a:24:ee:2d:24:91:
47:29:02:55:be:b1:5d:dd:96:9b:6b:32:67:2b:f7:
10:46:cc:25:28:60:4a:76:3f:59:7d:76:44:9d:19:
1a:66:46:16:49:e0:14:47:31:59:47:c5:33:23:b7:
cb:0e:c6:33:05:2a:ac:c4:57:00:06:58:f6:a2:95:
22:4d:07:59:8a:f9:ba:08:6a:28:31:40:1d:50:22:
35:8a:c2:7c:cd:71:29:56:3c:e7:3c:ba:cb:8b:70:
46:cf:d1:a6:5a:73:dc:2c:e9:79:fd:b2:a9:7b:90:
0f:25:4c:fb:ff:65:d9:3e:c4:d3:4c:44:a4:d0:b2:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:91:96:B1:63:4C:CF:CC:80:08:CA:EB:B8:47:E6:07:2D:23:72
X509v3 Authority Key Identifier:
keyid:06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/2D7A0C2A08D811EF8DFDE781C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
167.179.24.0/24
204.145.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ae:26:e2:1a:27:ca:29:3b:b4:27:44:a7:89:fe:19:9b:a6:
fd:35:66:f3:f4:b7:66:42:97:11:69:77:71:c8:f9:b1:4d:b9:
e8:90:dc:52:b3:27:3a:32:7c:f3:be:2c:9d:47:69:d5:a8:71:
3e:18:8c:19:11:6e:73:9f:0d:52:63:50:18:8d:a4:14:f1:83:
ab:6d:0c:ea:35:47:9d:cc:aa:e3:d4:bd:9a:81:fe:af:21:cd:
3a:63:68:81:69:8f:34:b5:e3:99:cf:5e:34:8e:cb:36:2a:56:
5f:31:0e:fa:d1:5a:1d:56:69:b2:03:78:97:0d:fc:ed:1f:b2:
ea:4f:02:91:63:3f:be:60:dc:41:8d:25:0b:8f:fa:d0:58:5b:
a9:3e:d2:ef:51:fd:75:b1:5c:ea:aa:e5:71:3e:d8:1c:a2:fe:
e3:d8:f2:48:86:29:69:1c:48:01:02:b7:c4:b2:bb:32:38:f2:
46:53:4a:22:70:d1:d9:97:fd:34:7b:14:b3:ae:6d:fb:76:c1:
d9:22:b8:4f:55:67:91:af:9e:67:a1:af:2e:2a:a5:92:1c:8e:
d2:46:91:a2:c7:78:23:5c:36:93:2d:54:09:9a:da:68:a4:c6:
0e:a1:ec:5e:d6:8e:aa:ad:95:25:9a:02:bb:91:6b:92:59:d9:
50:2e:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:15 2026 by rpki-client