
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa
File: 4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa (raw, json)
Hash identifier: VM+ufWIxL8v6s4z+EhTaWud7bus1nKbI0TTrUJfbrMY=
Subject key identifier: 54:9D:4B:3E:96:E9:D2:C5:02:C4:75:67:E0:28:B5:94:A4:01:8F:CF
Certificate issuer: /CN=A9122342/serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1
Certificate serial: 0A41
Authority key identifier: CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa
Signing time: Tue 12 May 2026 20:24:43 +0000
ROA not before: Tue 12 May 2026 20:24:43 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 140603
IP address blocks: 203.24.61.0/24 maxlen: 24
2001:df3:8f80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl
rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122342, serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1
Validity
Not Before: May 12 20:24:43 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a038c8b-e5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:42:e1:0e:8c:e5:e1:e1:5d:cf:eb:6e:c7:dd:
6d:44:e4:c8:65:82:80:44:cd:a2:57:14:e2:5d:31:
df:ab:95:69:fd:af:49:32:d8:47:ab:cb:2f:62:b4:
2c:c2:30:da:82:ce:fc:a8:ba:73:90:38:7c:db:2d:
1e:82:1e:d2:84:00:53:78:57:9c:a9:a1:91:b8:06:
55:b7:10:63:36:de:30:ae:15:36:3b:41:6b:d9:cc:
66:9f:5d:e4:67:5f:1a:10:7b:dd:fd:ce:91:c1:e1:
bd:fa:26:bb:ef:c7:e7:4d:71:8e:a0:e5:96:78:37:
a4:fd:34:7b:81:59:23:76:00:08:a0:d4:8f:7a:ac:
e0:11:08:ae:cc:43:45:07:60:7e:3c:fb:5d:81:29:
ea:c8:6e:2b:75:cb:59:9c:a1:62:e2:96:6e:6d:ad:
fd:68:d2:c5:11:5a:b7:ea:56:f5:70:47:b9:d6:22:
c7:6e:53:86:7f:17:e5:c7:8f:fd:bc:49:e6:1e:55:
09:8c:8b:da:3e:12:8c:ef:17:ee:e7:2b:8a:11:57:
67:4a:c9:30:94:da:70:7a:0f:15:4b:95:6d:62:63:
ef:e4:4c:c8:db:4d:e5:7d:2d:b7:18:bb:df:88:4e:
e3:49:ac:dc:be:c4:e0:45:22:47:e6:70:d5:b2:ec:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9D:4B:3E:96:E9:D2:C5:02:C4:75:67:E0:28:B5:94:A4:01:8F:CF
X509v3 Authority Key Identifier:
keyid:CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.24.61.0/24
IPv6:
2001:df3:8f80::/48
Signature Algorithm: sha256WithRSAEncryption
48:ec:48:33:c5:a1:e0:9f:81:55:51:22:a8:3a:f4:b0:89:42:
81:cf:bb:c8:98:c1:92:53:ac:20:6c:9d:e4:11:c5:9c:9a:33:
e8:03:87:d7:01:81:be:60:9a:61:f0:a9:84:f9:f9:6c:1d:60:
bb:00:0c:7a:85:1f:9b:a5:25:bd:7d:18:44:05:79:c4:36:6d:
d6:0e:3d:2d:d8:39:35:10:5c:a6:01:6d:e6:ea:40:f6:62:84:
3d:89:96:23:fa:5a:0b:95:94:94:cc:6c:0a:f4:67:06:89:ac:
ba:a0:8c:90:43:fd:11:ae:2b:01:3a:29:98:14:bb:27:7e:54:
25:67:ec:aa:16:23:81:96:54:be:15:21:2c:4a:45:07:44:40:
b8:f6:91:1b:68:ca:0f:cf:e5:ba:1f:99:23:d3:de:6c:93:0e:
dd:4e:0f:58:d8:93:12:56:a1:c4:f6:ca:e5:aa:41:47:09:3e:
73:9b:b6:d4:3a:27:46:b7:82:b3:a5:75:a2:5f:81:7e:a0:f7:
2b:b9:a6:d5:2d:e5:c6:5e:ad:67:41:4d:57:9f:54:94:d3:26:
75:07:59:a5:48:fb:88:f9:ff:b1:81:a8:79:f2:04:70:8e:16:
44:a8:d5:5e:7b:c7:ae:d2:59:d3:a0:1e:5b:a4:55:74:7d:77:
88:b2:f3:c2
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIzNDIxMTAvBgNVBAUTKENCMjRDRjMzMTJBMTYyNzE1OENDM0FEQTg4OEU1QkNC
MEM2N0NFQTEwHhcNMjYwNTEyMjAyNDQzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTAzOGM4Yi1lNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ELhDozl4eFdz+tux91tROTIZYKARM2iVxTiXTHfq5Vp/a9JMthHq8svYrQs
wjDags78qLpzkDh82y0egh7ShABTeFecqaGRuAZVtxBjNt4wrhU2O0Fr2cxmn13k
Z18aEHvd/c6RweG9+ia778fnTXGOoOWWeDek/TR7gVkjdgAIoNSPeqzgEQiuzENF
B2B+PPtdgSnqyG4rdctZnKFi4pZuba39aNLFEVq36lb1cEe51iLHblOGfxflx4/9
vEnmHlUJjIvaPhKM7xfu5yuKEVdnSskwlNpweg8VS5VtYmPv5EzI203lfS23GLvf
iE7jSazcvsTgRSJH5nDVsuxntwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFSdSz6W
6dLFAsR1Z+AotZSkAY/PMB8GA1UdIwQYMBaAFMskzzMSoWJxWMw62oiOW8sMZ86h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM0Mi8wQjQxMDBDMDhF
OEMxMUVBQkQzNDU4MTFDNEY5QUUwMi95eVRQTXhLaFluRll6RHJhaUk1Ynl3eG56
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l5VFBNeEtoWW5GWXpEcmFpSTVieXd4bnpxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjIzNDIvMEI0MTAwQzA4RThDMTFFQUJEMzQ1ODExQzRGOUFFMDIvNEQyM0E3N0U4
RThGMTFFQUIzMERDQTFBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAyxg9MA8EAgACMAkDBwAgAQ3zj4AwDQYJKoZIhvcNAQELBQADggEB
AEjsSDPFoeCfgVVRIqg69LCJQoHPu8iYwZJTrCBsneQRxZyaM+gDh9cBgb5gmmHw
qYT5+WwdYLsADHqFH5ulJb19GEQFecQ2bdYOPS3YOTUQXKYBbebqQPZihD2JliP6
WguVlJTMbAr0ZwaJrLqgjJBD/RGuKwE6KZgUuyd+VCVn7KoWI4GWVL4VISxKRQdE
QLj2kRtoyg/P5bofmSPT3myTDt1OD1jYkxJWocT2yuWqQUcJPnObttQ6J0a3grOl
daJfgX6g9yu5ptUt5cZerWdBTVefVJTTJnUHWaVI+4j5/7GBqHnyBHCOFkSo1V57
x67SWdOgHlukVXR9d4iy88I=
-----END CERTIFICATE-----
Generated at Wed May 13 14:06:37 2026 by rpki-client