
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa
File: 971C7F142B3711F0BDDC4B6CC4F9AE02.roa (raw, json)
Hash identifier: ZpPVdVroOG25uh0dypL07ldN3ElkQy8ULQVXTuTVNr8=
Subject key identifier: 71:F6:60:38:C1:1F:A7:5E:31:32:DC:2A:FE:60:47:99:FD:33:46:64
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3A69
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:22:31 +0000
ROA not before: Fri 16 Jan 2026 16:13:38 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 45305
IP address blocks: 202.47.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14953 (0x3a69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:38 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4ae17-ddfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:b9:1d:48:60:7a:da:78:1e:58:85:41:8f:
5b:e2:f3:b8:b9:35:1e:b6:9a:e4:f4:9f:14:aa:77:
bf:f3:e7:d9:e0:c6:66:69:87:88:1f:72:bc:ee:93:
62:b9:a1:e2:8d:b1:94:04:c0:b5:67:a9:82:38:13:
04:06:b6:a2:a2:f5:b9:4d:99:5f:25:8c:2c:31:69:
ba:d0:08:4b:13:49:28:bf:c9:58:dc:3a:56:33:ab:
4c:42:27:5c:ce:49:64:0d:4f:01:68:80:51:13:39:
6e:f7:86:57:33:57:c0:9d:2e:33:30:ce:a2:c7:87:
20:2e:d9:1f:c3:11:f3:3e:f8:5e:11:0d:18:9e:bc:
65:7e:58:85:ac:95:5e:37:69:b0:8c:23:50:d9:7b:
ad:45:73:26:1d:1a:e7:ae:51:b5:3e:93:b2:89:44:
98:e5:45:be:71:e6:1c:a7:1d:cb:ec:ae:37:c2:e8:
d1:54:e0:6f:d1:58:96:25:9a:d1:0b:ba:02:7d:96:
1b:05:20:68:4f:31:b8:93:03:91:90:56:9f:06:fb:
f8:b1:2a:79:8c:51:09:a4:b1:fc:bd:c7:1f:4f:f2:
58:b0:92:6b:5b:eb:48:92:c4:10:35:b6:12:24:b4:
21:d8:42:6b:d0:e0:eb:94:12:68:34:0a:af:a2:f6:
2c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F6:60:38:C1:1F:A7:5E:31:32:DC:2A:FE:60:47:99:FD:33:46:64
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.47.188.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:82:fb:5f:b3:30:aa:4d:65:03:61:2f:ef:4e:cc:05:86:6a:
41:56:a8:ca:87:b2:7c:83:89:73:f7:3f:c0:de:2f:f2:cf:dc:
a4:6a:43:98:bd:e0:b9:6a:26:22:4f:fc:72:64:bc:a3:dd:d7:
6a:66:7e:9b:e3:0e:70:7a:fd:6e:2e:e4:ae:eb:ef:1c:bc:ca:
c4:40:31:40:64:b4:0c:6c:fb:99:bf:55:bf:29:73:ea:5a:46:
e7:f6:be:bb:d3:4d:5d:df:9c:af:33:35:b5:a4:c5:bf:6e:8a:
0d:0c:e0:ed:ae:2a:4a:8c:b9:95:cb:8c:44:bd:5f:64:14:0f:
d0:e4:a5:61:5e:25:fe:0e:9a:29:d8:39:29:13:de:ff:eb:c1:
58:af:ea:a9:19:eb:6e:ea:2d:bc:8c:4c:eb:95:97:de:38:a7:
90:30:a0:3a:f9:7d:8d:93:3a:8a:66:3a:07:91:02:26:5f:e0:
3a:cb:20:46:e8:6f:ae:34:eb:40:0c:17:ea:07:2b:44:c8:20:
c4:50:16:e6:a8:3a:b5:8e:46:a6:fa:c0:77:c6:ab:23:dc:e9:
e0:46:9f:ce:a3:94:51:b5:ef:07:4f:6d:4d:22:79:60:ae:7c:
c8:c3:d3:5b:2b:cd:cc:1e:a2:f7:af:40:c8:74:7c:08:6f:77:
7d:6a:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:28:27 2026 by rpki-client