
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa
File: 6F5F30B8B56111EE91C72951C4F9AE02.roa (raw, json)
Hash identifier: dah/3/ypf+hEWNUOIDeyyUD/b92XWbsj2RzQqTtYlqg=
Subject key identifier: 28:C0:33:7F:54:C7:74:BB:E4:61:D5:A2:0B:11:A3:18:55:10:8C:45
Certificate issuer: /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Certificate serial: 01B6
Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:15:32 +0000
ROA not before: Fri 15 Aug 2025 05:12:56 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 13517
IP address blocks: 64.124.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Validity
Not Before: Aug 15 05:12:56 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a58d74-8dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:21:65:9d:01:2b:39:5d:a7:82:70:98:63:
df:e0:9c:94:1f:6a:be:6f:2c:f4:76:f9:92:16:ee:
ec:a4:97:75:73:66:38:02:6c:ba:ae:38:74:e3:81:
00:b4:f6:bf:cc:ce:be:c2:a5:86:1e:7b:2b:ce:b2:
0c:1c:8f:a1:02:a7:02:f7:2d:9b:68:fc:5a:30:56:
84:d8:42:ff:38:e7:18:17:a0:7a:32:4f:c0:61:34:
99:9b:06:3b:ca:0c:ea:ac:b0:d7:26:bb:40:5f:6a:
44:7a:85:e8:da:85:4f:a4:f7:e0:35:32:ac:fb:4b:
e5:72:ef:c2:b1:fb:36:d7:f5:0f:2f:0b:6e:67:56:
a7:13:04:03:54:d4:aa:b8:73:01:49:d4:ec:ed:cd:
4b:8c:46:e7:3f:59:75:66:c2:b7:14:4a:07:11:9a:
84:ba:a3:d6:6b:6b:13:37:ab:5d:ef:6c:36:3a:4e:
07:6f:65:85:d0:44:97:55:7c:e7:82:64:fb:95:58:
8d:00:bf:59:49:35:42:f5:7d:c6:2f:4d:57:d5:b2:
47:54:6f:b4:d3:ba:59:f7:a2:e3:cd:e1:7e:fd:93:
32:19:f9:21:de:37:db:e3:0c:f8:03:71:8b:0a:a8:
62:a4:31:bd:a6:82:f1:d5:54:7d:a0:82:92:c9:54:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C0:33:7F:54:C7:74:BB:E4:61:D5:A2:0B:11:A3:18:55:10:8C:45
X509v3 Authority Key Identifier:
keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
64.124.189.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f4:e1:69:40:07:d9:53:06:e9:8e:cc:a7:7b:54:7f:82:bb:
34:6b:94:5f:d0:66:26:8b:5e:00:05:d3:46:2c:e4:e2:51:6e:
04:f7:de:6b:fe:2e:36:2f:70:de:bd:33:85:c9:73:fe:37:58:
2a:7d:a3:ed:4a:7f:14:8d:ce:07:55:ff:11:dd:73:10:03:5d:
25:f6:0c:bb:06:1d:88:75:24:09:63:89:15:da:99:b0:ea:5a:
27:5c:85:45:d3:06:b8:f8:a8:25:32:47:54:99:6c:29:1c:9d:
0d:dd:08:e9:5a:51:7c:fb:00:4a:5a:7c:c4:d6:7c:eb:9d:cd:
04:8f:2e:16:ec:a1:55:41:44:c3:af:45:14:59:e9:a5:15:6f:
42:ba:f8:c1:2f:fc:d4:63:12:a6:f4:8d:d6:92:46:fc:57:f7:
1d:b4:5e:b0:67:2f:2c:4a:34:63:c8:10:38:ad:2a:29:77:ea:
3b:82:9c:a7:42:42:7c:98:a5:92:fc:f7:bc:19:f8:32:9a:c1:
ad:ea:e1:21:cf:ee:54:a3:a5:69:10:42:f5:2b:6c:b5:ae:f3:
f3:71:b0:84:15:65:c0:d7:c3:db:a9:48:04:8b:da:a7:92:ef:
23:20:91:28:7e:d6:13:72:18:61:17:31:14:27:77:f5:ab:f0:
30:0b:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:57 2026 by rpki-client