
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/4453BC8A2CD411EC8884B41FC4F9AE02.roa
File: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (raw, json)
Hash identifier: mK8qf/GYIQuZCVYCSo1wm8LPq+SV519KPVQtz/qeeLk=
Subject key identifier: 8D:16:B7:4E:B5:A0:89:03:4B:0F:47:10:E2:F5:47:DE:75:C7:8F:E5
Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial: 35B7
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/4453BC8A2CD411EC8884B41FC4F9AE02.roa
Signing time: Wed 30 Sep 2026 05:42:18 +0000
ROA not before: Wed 30 Sep 2026 05:42:18 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 198504
IP address blocks: 203.171.124.0/24 maxlen: 24
203.171.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 15:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13751 (0x35b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Validity
Not Before: Sep 30 05:42:18 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6abca13a-a17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:75:b4:27:c1:2d:c7:6a:aa:b0:44:15:c5:
4c:e8:c0:21:ec:7d:4f:45:e6:93:3c:a8:b8:5b:17:
53:7e:e0:94:51:c7:6b:70:58:a2:52:8d:ba:c2:01:
25:95:e6:2f:a5:53:7f:b9:86:fb:b9:c8:3c:b0:39:
16:b4:bc:c6:28:42:fb:1f:1d:4c:22:8d:e8:a9:7c:
a9:1b:4a:37:8e:42:2d:85:8b:9c:b3:0e:56:3a:fa:
97:98:90:17:e4:8c:07:0e:04:d2:87:11:5a:13:f9:
2a:80:1f:bd:ef:cf:65:c0:41:7b:13:09:4e:c5:03:
84:22:81:31:8d:84:9c:e3:e0:6f:3a:69:41:13:de:
f3:46:a8:d1:75:92:87:9a:3d:71:93:66:05:3d:43:
bb:9c:6c:69:80:2d:43:7b:61:70:8f:9e:87:7e:f7:
86:ca:1a:cd:2c:ff:13:8a:c7:cd:24:d3:6e:2a:c6:
91:43:db:1e:a1:7c:75:9f:ce:1f:89:48:f9:9a:2f:
06:e4:55:82:69:7c:0e:e3:28:1c:b3:9f:a2:c3:a3:
9b:da:cd:a6:19:16:aa:43:34:fc:e4:c8:64:2e:7d:
fa:bf:ed:62:4f:3e:08:2a:01:02:30:39:6a:b3:8a:
2f:ea:73:e1:f9:ec:41:34:0a:51:85:8c:21:54:4f:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:16:B7:4E:B5:A0:89:03:4B:0F:47:10:E2:F5:47:DE:75:C7:8F:E5
X509v3 Authority Key Identifier:
keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/4453BC8A2CD411EC8884B41FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.171.124.0/24
203.171.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4b:b1:7d:8e:37:45:a8:7b:30:76:58:27:f9:9d:1e:6a:b6:
51:47:4c:3c:11:c7:81:48:d6:31:ae:03:75:a2:f8:14:b2:87:
c4:4b:5f:60:b3:30:0a:6b:8d:00:26:ec:4a:67:fa:33:24:9f:
7f:45:7f:b6:7b:4d:3b:96:52:fb:5f:45:2f:4d:36:13:c5:5b:
c5:db:82:6a:e6:75:3e:dd:7f:33:2e:ac:7a:32:b1:2a:a7:af:
d5:4d:3a:2f:3f:e0:15:94:8a:9a:b5:86:b7:da:50:51:49:84:
85:98:02:d3:b4:0f:d7:21:c5:90:44:4a:a5:6f:1a:8f:68:3d:
fe:6c:a6:b6:c3:a3:38:10:27:68:1d:bb:d4:75:6a:4b:bd:c7:
db:f5:b4:d7:4c:b9:72:db:47:23:4c:87:cd:03:54:ae:cd:ff:
6f:2f:db:15:a7:03:01:1c:39:84:15:39:24:0f:55:2c:4b:56:
54:73:e4:a4:65:ea:08:8e:63:ac:bd:4b:86:65:25:86:a1:48:
b1:a7:33:a0:4c:fe:d3:39:d6:ac:6b:cf:37:53:c7:e8:42:6f:
32:b6:51:37:65:2b:48:cb:02:e3:76:8e:76:2a:f1:20:04:7a:
25:a8:e8:1b:b9:32:ed:20:60:ad:71:01:e5:f7:46:d2:a4:ac:
5a:08:89:5d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICNbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzNDQxMTAvBgNVBAUTKDg5RkQyN0M1MDY3QjRDRjQxMjI5NkZFQkE2Q0U2RDgz
MTE4NTgwMEIwHhcNMjYwOTMwMDU0MjE4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJjYTEzYS1hMTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlwV1tCfBLcdqqrBEFcVM6MAh7H1PReaTPKi4WxdTfuCUUcdrcFiiUo26wgEl
leYvpVN/uYb7ucg8sDkWtLzGKEL7Hx1MIo3oqXypG0o3jkIthYucsw5WOvqXmJAX
5IwHDgTShxFaE/kqgB+9789lwEF7EwlOxQOEIoExjYSc4+BvOmlBE97zRqjRdZKH
mj1xk2YFPUO7nGxpgC1De2Fwj56HfveGyhrNLP8TisfNJNNuKsaRQ9seoXx1n84f
iUj5mi8G5FWCaXwO4ygcs5+iw6Ob2s2mGRaqQzT85MhkLn36v+1iTz4IKgECMDlq
s4ov6nPh+exBNApRhYwhVE8YmQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFI0Wt061
oIkDSw9HEOL1R951x4/lMB8GA1UdIwQYMBaAFIn9J8UGe0z0Eilv66bObYMRhYAL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTM0NC81MTVDQUJFMDFE
QTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQUVNLV19ycHM1dGd4R0Zn
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lmMG54UVo3VFBRU0tXX3JwczV0Z3hHRmdBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODUzNDQvNTE1Q0FCRTAxREExMTFFMkIyQ0Q2RDkzMDhCMDJDRDIvNDQ1M0JDOEEy
Q0Q0MTFFQzg4ODRCNDFGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAy6t8AwQAy6t/MA0GCSqGSIb3DQEBCwUAA4IBAQAdS7F9jjdFqHsw
dlgn+Z0earZRR0w8EceBSNYxrgN1ovgUsofES19gszAKa40AJuxKZ/ozJJ9/RX+2
e007llL7X0UvTTYTxVvF24Jq5nU+3X8zLqx6MrEqp6/VTTovP+AVlIqatYa32lBR
SYSFmALTtA/XIcWQREqlbxqPaD3+bKa2w6M4ECdoHbvUdWpLvcfb9bTXTLly20cj
TIfNA1Suzf9vL9sVpwMBHDmEFTkkD1UsS1ZUc+SkZeoIjmOsvUuGZSWGoUixpzOg
TP7TOdasa883U8foQm8ytlE3ZStIywLjdo52KvEgBHolqOgbuTLtIGCtcQHl90bS
pKxaCIld
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:01 2026 by rpki-client