
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2E31B8FCB57211EEBB68526DC4F9AE02.roa
File: 2E31B8FCB57211EEBB68526DC4F9AE02.roa (raw, json)
Hash identifier: KgiFn2JDnQbMiTSP1itjG4XdcrHVh1Ue7B/XnPt0zdY=
Subject key identifier: 16:79:DF:0E:68:49:F5:78:3B:30:8A:14:A3:E8:D8:69:59:6A:9E:21
Certificate issuer: /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Certificate serial: 01B8
Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2E31B8FCB57211EEBB68526DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:15:34 +0000
ROA not before: Fri 15 Aug 2025 05:12:58 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 6461
IP address blocks: 64.124.188.0/23 maxlen: 23
216.200.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Validity
Not Before: Aug 15 05:12:58 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a58d76-c484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:1e:df:9c:8f:84:65:06:d6:23:86:2f:97:
3c:96:bb:2b:d3:44:64:56:0e:57:aa:ed:e4:cf:b9:
3e:fd:d9:71:42:0f:9c:11:88:7e:a5:a2:6b:bb:a1:
d8:e3:de:34:e1:8a:20:d0:70:6e:68:a8:66:17:20:
04:b4:fb:c1:47:87:5a:cd:b5:b4:ea:46:04:20:23:
d4:07:4b:77:1d:de:2b:09:e2:4b:81:58:7d:c5:51:
14:d5:ac:d7:65:69:b5:a5:ad:17:b6:4b:43:ab:8b:
3c:9f:d4:b2:0b:c8:28:f7:d2:8d:9a:26:38:30:1b:
12:5d:52:8e:bf:ca:3e:cf:48:a0:77:00:a4:3c:14:
1f:a2:e0:78:d9:5b:ec:f6:eb:4e:4a:52:7e:9a:e5:
ac:17:41:36:c3:d5:a3:4c:b6:3f:4c:03:2e:2c:11:
82:4f:a1:76:3c:af:5b:f2:22:8a:5a:80:30:7b:f7:
fe:ac:79:e9:8c:47:d4:35:f5:6b:ad:e6:b9:c4:e1:
0c:64:43:6b:d1:2f:8d:17:41:10:af:eb:1f:9e:78:
7c:ba:8d:18:b4:88:70:37:ca:61:70:ba:6a:95:d0:
0f:73:fb:12:34:c0:d3:23:ce:27:d3:26:5b:e9:db:
72:df:43:f9:ad:2d:a4:f2:51:b5:94:62:ab:b2:ee:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:DF:0E:68:49:F5:78:3B:30:8A:14:A3:E8:D8:69:59:6A:9E:21
X509v3 Authority Key Identifier:
keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2E31B8FCB57211EEBB68526DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
64.124.188.0/23
216.200.188.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:8e:16:12:a2:bd:41:81:d1:38:90:46:8f:cb:70:ca:a7:c3:
f6:60:c9:5d:3f:4e:f4:16:22:6a:ea:e6:e5:3e:59:90:1f:13:
eb:4a:cd:9c:60:25:61:d3:16:29:60:8f:a6:d2:c0:0c:60:9d:
89:cb:b1:5d:69:40:0a:78:22:d2:82:fe:e9:43:ec:da:a6:11:
88:1c:8c:8a:b6:d9:5c:21:55:7e:a7:60:05:b8:33:78:bc:f9:
ae:3a:08:b9:ce:0e:d4:dc:c7:7e:26:b9:17:92:f6:3a:d1:0b:
34:12:b9:4b:89:80:96:50:bd:ca:ca:32:6b:0b:57:26:e1:b6:
93:00:00:c9:e7:38:ce:16:52:c5:4e:a9:9a:a2:ef:36:5a:52:
ce:fe:2c:b9:a5:95:45:46:a0:e0:7f:17:0f:8c:7a:3e:4b:a5:
39:55:b1:48:d5:95:61:a3:2d:93:1c:a9:17:6d:75:21:89:dd:
93:40:68:0e:28:a5:67:2d:09:a3:2f:84:d8:2e:76:77:8e:b5:
11:f2:70:d7:8a:d8:ae:08:47:82:1c:98:2d:df:12:75:cc:e6:
d3:80:2b:d1:e1:34:44:e1:39:f7:c8:f9:5a:30:e0:12:33:19:
e8:78:23:88:31:68:cf:da:bf:d8:ef:98:4e:ab:0e:7a:1f:1c:
9d:7f:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:59 2026 by rpki-client