
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
File: A97B2098C70811ECBAECCC78C4F9AE02.roa (raw, json)
Hash identifier: xAc4OJbOxCgNPQzehrNrCMwxj00/3gJsQEEGACaa2Rw=
Subject key identifier: 97:4B:40:14:E4:6D:D9:AE:9F:81:26:FC:B6:46:98:46:BE:95:98:89
Certificate issuer: /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial: 047E
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:58:10 +0000
ROA not before: Thu 02 Oct 2025 23:24:37 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 14618
IP address blocks: 141.163.128.0/20 maxlen: 24
141.163.144.0/20 maxlen: 24
141.163.160.0/20 maxlen: 24
141.163.176.0/20 maxlen: 24
141.163.192.0/20 maxlen: 24
141.163.208.0/20 maxlen: 24
141.163.224.0/20 maxlen: 24
141.163.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 22:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150 (0x47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Validity
Not Before: Oct 2 23:24:37 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a45401-5e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:ff:4c:fc:da:8d:70:7d:df:8c:b9:51:8c:
f3:2c:7d:d3:02:5e:e7:2c:af:e0:2a:da:4e:62:80:
c6:2f:04:37:13:a5:98:d0:57:76:96:2e:5a:d5:fd:
89:dc:8b:33:59:39:d5:7a:b4:9c:8a:f2:a2:fb:25:
98:4e:7d:e7:2f:11:40:a9:17:79:a3:c9:6d:be:f1:
d5:58:a2:c4:1f:f8:f3:6a:79:db:a9:bc:d1:5d:64:
57:a0:90:2c:7a:88:8d:40:3c:1e:10:62:58:c3:2f:
c6:9c:7b:cb:30:15:f5:c5:d4:a9:82:10:56:bf:98:
f4:8d:99:d4:5a:a0:13:49:3d:4a:16:82:d6:6b:d2:
bd:b0:b0:7f:4e:40:fa:a7:32:50:16:52:75:bb:52:
50:6f:86:56:63:ec:a8:35:61:8e:24:35:12:41:21:
0d:d3:e8:19:11:10:8f:4e:ed:05:fa:27:b6:08:8f:
24:dd:0c:51:9c:59:39:af:e3:38:e4:f9:45:5f:46:
54:6b:dd:ec:87:08:a2:64:7f:a2:d0:ff:0d:62:6c:
e3:a3:a0:1a:fb:2b:ce:78:6e:46:34:cf:44:e5:0f:
ad:5b:cf:46:89:6b:67:0e:01:77:52:07:1e:26:be:
98:a2:e8:68:ff:f9:7b:5c:ce:01:54:4e:7b:35:8e:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4B:40:14:E4:6D:D9:AE:9F:81:26:FC:B6:46:98:46:BE:95:98:89
X509v3 Authority Key Identifier:
keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
141.163.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b3:ff:96:48:a9:36:62:cb:75:ab:8c:bb:cf:54:7a:5e:71:6e:
2d:6a:48:6c:4a:cf:2e:80:c3:7d:d6:dd:50:6c:00:06:e1:55:
10:37:52:c4:eb:46:ab:4d:ec:59:3b:4e:2d:68:14:3a:86:dd:
ac:3e:0f:0e:bb:3e:d5:68:51:c0:3c:a9:b2:b8:c3:da:ed:cd:
18:f5:12:64:01:00:ac:45:b8:fb:81:17:5c:8b:15:b8:79:ca:
d9:0f:59:62:25:7c:32:8a:c9:28:34:33:2d:8d:f5:41:3d:4a:
6c:3a:72:d2:a7:15:42:a7:a5:68:65:ce:4c:24:dc:cc:8c:4a:
8f:fd:a9:25:96:88:2e:b2:14:56:28:8d:bd:6d:7a:96:11:89:
03:f3:da:28:41:5f:58:c1:0c:9c:d4:db:93:e5:cd:32:ea:41:
6a:56:0b:77:51:c0:d8:4c:84:b0:90:17:2e:7e:a8:43:5a:ff:
d5:97:e5:c3:41:42:fa:9e:30:e6:ba:df:28:0d:52:5e:bf:c8:
f2:bb:fa:90:fc:e4:38:92:ed:6f:5a:5f:08:47:fc:1e:39:a1:
d5:d8:35:80:66:4e:73:f3:79:1f:bd:a9:13:13:4c:3a:0c:b2:
2e:cf:07:a3:5f:fa:ce:dc:2b:ea:1b:f2:d7:45:cd:76:67:c3:
58:53:9f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:13:21 2026 by rpki-client