
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
File: A97B2098C70811ECBAECCC78C4F9AE02.roa (raw, json)
Hash identifier: 2bQYhSZcJ4BtlNj5FI7uxu6AOJTLtYVvnOaTPN177HE=
Subject key identifier: CF:89:E2:DE:84:60:CF:49:B9:4D:E4:85:61:FD:C1:2A:FF:52:D1:A5
Certificate issuer: /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial: 04EC
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
Signing time: Fri 04 Sep 2026 22:44:02 +0000
ROA not before: Fri 04 Sep 2026 22:44:02 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 14618
IP address blocks: 31.69.0.0/17 maxlen: 24
31.69.224.0/19 maxlen: 24
31.99.144.0/21 maxlen: 24
141.163.128.0/20 maxlen: 24
141.163.144.0/20 maxlen: 24
141.163.160.0/20 maxlen: 24
141.163.176.0/20 maxlen: 24
141.163.192.0/20 maxlen: 24
141.163.208.0/20 maxlen: 24
141.163.224.0/20 maxlen: 24
141.163.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1260 (0x4ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Validity
Not Before: Sep 4 22:44:02 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9b49b2-5264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:1b:b4:2a:45:0f:3f:69:03:b8:47:11:3a:
c8:84:d5:a9:1f:36:fd:0d:aa:21:86:8c:5f:89:ef:
02:d0:0d:2c:bc:72:37:73:14:ac:56:95:04:7e:83:
97:ae:36:14:7a:72:5b:ad:be:53:b6:58:8c:a5:e7:
3a:35:50:c0:e2:3d:86:e6:b8:1c:10:93:5c:c5:28:
b5:78:c5:9f:fb:7e:22:95:69:18:d9:fc:12:0d:b3:
d0:db:a3:bd:a7:5b:05:23:f7:f5:b6:7f:d4:e3:ac:
9e:19:b4:87:85:b2:e6:60:ed:5c:a1:2f:cd:6b:e1:
15:ac:95:5d:e9:98:2b:02:1d:15:4c:46:6f:0e:62:
75:53:ce:69:bb:9c:b3:c7:88:1d:1b:e4:97:5c:a2:
b7:de:a8:fb:71:96:10:44:1a:02:0b:06:d4:50:46:
39:df:e3:73:d2:19:b8:98:c8:03:2b:5d:6d:61:18:
e1:d7:81:83:0b:67:16:3a:b2:05:3e:a8:7b:96:88:
96:0c:64:cf:dd:73:cd:b1:f6:86:2c:d5:5e:66:80:
22:39:b2:0b:d6:de:d7:ad:b8:8c:85:9a:89:b3:67:
59:84:57:da:b4:48:42:fc:e1:ba:0f:10:7b:9b:e5:
ba:a6:f7:e7:58:ae:45:28:48:d0:e1:30:a4:db:20:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:89:E2:DE:84:60:CF:49:B9:4D:E4:85:61:FD:C1:2A:FF:52:D1:A5
X509v3 Authority Key Identifier:
keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
31.69.0.0/17
31.69.224.0/19
31.99.144.0/21
141.163.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9c:4c:ef:d7:ce:20:b9:ae:f9:9e:1a:0e:0e:40:36:74:88:35:
c8:13:36:25:85:71:93:0c:b5:05:60:ba:4a:ee:4a:62:4a:b7:
b4:03:c9:7b:34:e6:9f:01:02:73:d5:9f:10:22:76:52:15:6e:
ae:63:a0:a3:fe:98:19:4b:d2:82:b2:3e:98:47:51:69:b1:97:
8b:a0:ca:5e:f3:b0:47:e8:96:8b:fc:6d:20:ec:08:e3:0c:f8:
8a:0f:c9:df:c3:9d:44:11:fa:9c:ce:b4:90:df:60:6e:01:85:
6f:f9:e5:ca:46:dc:28:b6:4d:8c:5c:df:92:d7:bf:cc:1e:6d:
39:28:2d:9c:d4:bc:b9:34:0f:b5:aa:7b:87:22:a3:02:9c:94:
5d:e1:eb:79:f4:43:fc:e7:f0:aa:16:1d:c0:c0:38:20:8a:90:
69:ec:bf:3a:95:f1:b7:35:92:8a:92:e6:49:67:3e:e9:2a:bd:
c9:ee:5b:46:1b:5d:16:4f:b8:88:4e:15:99:00:70:58:bc:1a:
f5:54:be:4f:f5:1c:99:c7:d1:a0:a2:73:00:4c:f8:28:c2:15:
43:32:5a:ae:fe:fd:41:a5:d0:9a:66:72:a6:46:7d:14:26:ca:
4a:ae:06:ef:27:8f:61:c2:80:fa:cc:cb:7f:21:5a:56:6e:29:
5c:b3:b2:7e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVENkUxMTAvBgNVBAUTKDhEMjAyMDdEMUVEQjVGNUMyRDY2M0IwQTZBMTBCQ0Q0
MEJBRDNBREUwHhcNMjYwOTA0MjI0NDAyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTliNDliMi01MjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAksMbtCpFDz9pA7hHETrIhNWpHzb9Daohhoxfie8C0A0svHI3cxSsVpUEfoOX
rjYUenJbrb5TtliMpec6NVDA4j2G5rgcEJNcxSi1eMWf+34ilWkY2fwSDbPQ26O9
p1sFI/f1tn/U46yeGbSHhbLmYO1coS/Na+EVrJVd6ZgrAh0VTEZvDmJ1U85pu5yz
x4gdG+SXXKK33qj7cZYQRBoCCwbUUEY53+Nz0hm4mMgDK11tYRjh14GDC2cWOrIF
Pqh7loiWDGTP3XPNsfaGLNVeZoAiObIL1t7XrbiMhZqJs2dZhFfatEhC/OG6DxB7
m+W6pvfnWK5FKEjQ4TCk2yBWAwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFM+J4t6E
YM9JuU3khWH9wSr/UtGlMB8GA1UdIwQYMBaAFI0gIH0e219cLWY7CmoQvNQLrTre
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS9BNDZCRTU4ODg4
ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgxd3RaanNLYWhDODFBdXRP
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2pTQWdmUjdiWDF3dFpqc0thaEM4MUF1dE90NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODVENkUvQTQ2QkU1ODg4ODg4MTFFQzkxMjMzQTcwQzRGOUFFMDIvQTk3QjIwOThD
NzA4MTFFQ0JBRUNDQzc4QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQHH0UAAwQFH0XgAwQDH2OQAwQHjaOAMA0GCSqGSIb3DQEBCwUAA4IB
AQCcTO/XziC5rvmeGg4OQDZ0iDXIEzYlhXGTDLUFYLpK7kpiSre0A8l7NOafAQJz
1Z8QInZSFW6uY6Cj/pgZS9KCsj6YR1FpsZeLoMpe87BH6JaL/G0g7AjjDPiKD8nf
w51EEfqczrSQ32BuAYVv+eXKRtwotk2MXN+S17/MHm05KC2c1Ly5NA+1qnuHIqMC
nJRd4et59EP85/CqFh3AwDggipBp7L86lfG3NZKKkuZJZz7pKr3J7ltGG10WT7iI
ThWZAHBYvBr1VL5P9RyZx9GgonMATPgowhVDMlqu/v1BpdCaZnKmRn0UJspKrgbv
J49hwoD6zMt/IVpWbilcs7J+
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:34 2026 by rpki-client