
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa
File: 971C7F142B3711F0BDDC4B6CC4F9AE02.roa (raw, json)
Hash identifier: 9JMW1Axqaeza0Zg1QKYRRnVPCSleCSkAm3i0mgEuY3s=
Subject key identifier: AA:8D:8A:B9:30:E4:BD:C5:9E:45:B7:14:9E:96:0B:9E:4B:89:26:16
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3BA6
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:24:17 +0000
ROA not before: Thu 20 Aug 2026 16:24:17 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45305
IP address blocks: 202.47.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15270 (0x3ba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 20 16:24:17 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a872a31-c95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:95:59:a6:03:b8:3f:dc:9b:d9:fd:49:1b:
1e:a5:16:36:3d:e8:e3:ae:5f:1c:22:69:1f:5a:2a:
5b:86:d3:67:58:af:46:10:47:59:7a:94:9e:9b:3e:
92:9a:41:e6:8e:6d:e1:35:0f:ac:3e:ac:31:15:80:
01:c8:80:3e:e0:0b:ad:bf:af:5b:97:17:cb:12:8c:
04:8d:76:b7:ab:db:ae:a2:3c:f3:78:c7:76:4e:fb:
8b:45:83:97:4b:89:80:0c:9c:e4:8e:1f:66:31:9a:
d1:a9:05:d8:93:34:ae:ef:0f:88:27:3f:cc:fc:e2:
24:36:31:b2:a8:f5:fe:9c:8c:1c:b1:e5:d5:87:b2:
08:37:6d:32:8d:98:63:8b:ec:5a:f6:c6:16:49:2d:
45:89:ee:c3:bf:f8:6c:9a:bc:2b:ae:39:d6:48:47:
01:dd:31:06:90:28:dd:4e:f3:27:ed:d4:47:63:e3:
35:c5:0d:5b:c2:1a:21:59:d7:42:17:d7:45:61:29:
42:3c:51:45:62:6f:43:c9:7d:51:91:07:b7:cc:75:
94:12:de:de:f6:6f:01:a2:35:a8:3b:ba:c7:11:63:
46:93:df:57:05:14:25:5a:84:ce:34:e6:52:e0:51:
8d:bb:ed:b4:4a:6b:48:32:99:74:02:53:fc:43:1e:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8D:8A:B9:30:E4:BD:C5:9E:45:B7:14:9E:96:0B:9E:4B:89:26:16
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.47.188.0/23
Signature Algorithm: sha256WithRSAEncryption
05:b4:28:f1:6f:92:e5:95:5d:2d:fb:dd:1b:53:70:dd:9f:46:
29:e7:52:41:c8:07:4d:cf:81:84:94:7f:bf:0e:6b:41:ee:02:
59:c1:82:25:15:00:13:64:c3:d5:48:6a:f9:35:d6:08:1c:1d:
dd:f3:84:d6:6d:58:09:0b:29:bd:96:12:fb:ce:f7:24:82:d7:
f0:83:21:17:b7:63:66:92:38:b7:2a:13:1b:f5:81:49:1a:f7:
54:de:a2:b6:d8:09:d1:c7:60:0f:bd:a1:c7:d2:71:25:20:03:
90:35:94:a3:50:9f:fa:ac:72:b6:b4:7b:19:60:a0:2f:ba:81:
ce:5f:01:13:22:ac:80:1e:f3:2a:c2:f3:0e:76:ea:af:93:0f:
e5:7f:df:7d:91:2d:ff:46:7a:58:c7:85:0f:67:d0:00:8d:e6:
b8:4f:87:c3:f0:74:9f:62:12:14:02:e0:44:86:ea:4c:4d:2b:
c1:c2:6b:00:0d:2e:e1:d4:a5:37:b8:2c:fb:d7:99:77:5e:2e:
b3:65:8b:06:75:9c:99:87:e9:f3:ff:1e:54:61:ee:f4:b0:99:
ba:18:63:a8:13:59:0d:22:da:04:8a:26:69:81:91:09:63:8e:
63:66:32:58:fc:58:7d:08:90:7f:f8:62:4d:49:fd:47:a2:8f:
5a:a1:e8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:04 2026 by rpki-client