
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/17AF252C605A11EFB7F45361C4F9AE02.roa
File: 17AF252C605A11EFB7F45361C4F9AE02.roa (raw, json)
Hash identifier: 8DprNqSctLRq9Um1DBwsXYIm/hC+xtUbZc0GLoio6ks=
Subject key identifier: 7A:5A:76:FA:7D:60:C2:34:BB:8E:8C:9C:CD:5F:50:E1:26:F0:3E:F5
Certificate issuer: /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Certificate serial: 0127
Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/17AF252C605A11EFB7F45361C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:24:11 +0000
ROA not before: Thu 25 Sep 2025 06:26:11 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 153304
IP address blocks: 160.30.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189B41, serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Validity
Not Before: Sep 25 06:26:11 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a59d8a-2a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:21:81:fe:87:01:07:e5:9d:b2:7f:8f:b8:
bb:fe:9a:85:ba:6f:9a:16:57:97:fa:7a:90:83:40:
79:32:31:c4:1a:ee:43:06:73:e1:79:9a:53:79:2e:
95:44:c1:48:5c:79:3e:68:50:02:f8:b5:eb:e7:4e:
a6:30:df:81:cd:de:82:07:47:a6:3d:5b:5b:a3:16:
5a:5d:e8:2d:84:5b:e1:8b:01:0e:81:53:94:3e:fa:
a9:8f:c4:f1:3f:17:26:e6:b5:ab:07:ef:f0:16:ed:
35:4d:33:5f:fd:d7:cf:91:0a:03:cf:82:75:53:f3:
de:05:77:c1:1d:5a:67:12:66:8c:a3:3c:48:d2:6a:
de:37:2d:25:c0:72:1f:2c:3f:d6:49:6c:61:3e:29:
11:3d:1b:4e:e1:07:e0:04:d5:69:a6:3d:73:b0:59:
fc:81:af:99:6e:57:7f:dc:a8:c2:22:0c:db:5c:64:
c8:e0:15:9e:11:f1:42:8c:25:fb:80:ee:3c:c3:5e:
23:72:3d:11:86:48:4f:f5:14:db:f3:f3:fe:91:dd:
23:6b:6a:7f:34:30:a9:6c:b4:16:e8:f5:dd:d5:fa:
b0:ea:c8:9a:eb:24:9b:b7:00:17:fe:5c:04:15:3f:
0f:8b:e8:28:44:fd:fb:fa:5c:9b:8d:bf:a3:50:6d:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5A:76:FA:7D:60:C2:34:BB:8E:8C:9C:CD:5F:50:E1:26:F0:3E:F5
X509v3 Authority Key Identifier:
keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/17AF252C605A11EFB7F45361C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.176.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:92:44:57:27:a9:e1:5b:9c:4a:bc:89:ea:11:73:96:17:64:
89:64:aa:fb:67:b5:ff:8f:19:fb:fd:dc:ef:45:29:0a:d4:25:
4f:d8:e5:a5:cb:af:22:e9:a7:24:e0:e8:0f:c1:c5:6c:ac:56:
9d:49:e9:8d:23:1e:ea:52:93:05:ed:b0:9f:2e:d1:62:af:07:
aa:b4:e1:7a:01:2e:5c:23:bc:c8:55:85:22:bf:94:2a:f5:f8:
99:d3:c7:1d:d4:dc:4e:b4:ad:2e:da:07:6c:86:13:70:f5:cb:
0d:25:53:6d:c1:22:61:49:32:a1:70:82:35:d7:66:fd:b2:e5:
48:43:0c:6f:9c:13:f9:10:2e:8b:82:f9:0d:b5:b8:a8:59:78:
84:6c:70:6a:8a:88:f7:af:36:1c:dd:29:a4:c4:cd:54:ac:7c:
34:a9:36:79:d5:51:be:6b:eb:c2:b7:07:a6:22:a9:1b:d8:a6:
c5:70:ba:b2:c3:c2:cb:b4:47:ac:53:ca:59:00:7f:2c:24:d7:
c6:66:38:d0:ff:9d:3e:5c:42:c8:2c:fc:64:35:64:ad:3c:1b:
5b:0e:a4:44:99:1d:f4:50:78:82:17:43:a6:1d:55:f1:89:d0:
23:d7:44:c7:db:26:93:9f:93:aa:3c:89:94:ea:54:af:f0:ec:
04:a2:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:58:00 2026 by rpki-client