
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/4E2597ACB30F11EDA610E01FC4F9AE02.roa
File: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (raw, json)
Hash identifier: /uBQS6rvlPVfxCTq43rNp7qVxtyOlHCMz4YKadti9q8=
Subject key identifier: 05:1D:EC:D9:C5:F1:DA:BF:1A:9A:E4:B6:72:5A:2C:71:BF:92:5D:15
Certificate issuer: /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
Certificate serial: 02B8
Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/4E2597ACB30F11EDA610E01FC4F9AE02.roa
Signing time: Thu 29 Oct 2026 02:49:28 +0000
ROA not before: Thu 29 Oct 2026 02:49:28 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 4826
IP address blocks: 203.19.224.0/24 maxlen: 24
203.19.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl
rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
Validity
Not Before: Oct 29 02:49:28 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ae2b438-3850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:85:63:c2:48:51:ee:5e:0f:01:f1:4f:8e:
cc:36:96:ed:9f:ac:10:2d:5c:90:5e:93:c6:aa:97:
14:bb:2c:42:f2:90:e3:1f:7f:d8:8f:54:13:76:e6:
2c:e9:d5:71:c8:1e:dd:91:8f:5f:23:54:a4:fa:24:
b5:74:4a:57:1a:33:c5:78:45:48:c9:30:05:21:76:
80:3b:13:f1:0f:eb:11:9c:b8:e1:4c:d7:d2:08:6c:
12:51:af:1b:c0:4c:06:c8:9f:7e:a6:7f:55:23:55:
9c:40:0b:af:21:24:49:36:e2:46:bf:7a:22:a2:f0:
46:61:c6:43:5e:80:ca:2c:06:07:d6:4b:69:6f:6a:
a4:85:16:a9:34:0c:87:09:a8:8e:f8:28:9f:55:60:
5b:70:b9:8b:ad:80:e9:3d:17:a5:dc:78:a0:cd:ec:
29:77:bf:14:41:50:37:89:4a:d7:05:12:72:8e:7b:
4a:f1:b1:c0:b3:76:f6:20:2b:6f:0c:e7:f6:9e:58:
6a:9d:31:7e:51:b1:5d:03:20:3f:6b:c2:ab:bd:0b:
73:24:a7:13:cb:f9:a4:12:da:28:8e:8d:68:64:7d:
55:71:ff:c2:c8:d9:3d:e8:bd:e2:10:d8:56:52:42:
1f:31:90:31:33:fa:7e:db:27:ed:aa:90:83:ff:0c:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1D:EC:D9:C5:F1:DA:BF:1A:9A:E4:B6:72:5A:2C:71:BF:92:5D:15
X509v3 Authority Key Identifier:
keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/4E2597ACB30F11EDA610E01FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.19.224.0/23
Signature Algorithm: sha256WithRSAEncryption
99:62:66:56:41:88:1e:51:8f:4f:4b:0e:f2:04:ba:28:7f:60:
6a:1a:fb:9a:c4:70:24:a2:bc:c7:dc:6f:0f:dd:b6:4c:60:46:
cf:97:88:26:c3:f5:53:07:6a:45:70:7c:f8:0e:ad:de:03:a4:
48:47:ca:35:ab:71:03:98:39:c4:98:61:7d:59:81:da:0b:11:
60:02:8a:c7:39:0c:0c:b2:28:3f:e7:06:67:05:14:59:89:26:
14:fa:45:e2:97:09:24:c9:71:47:e8:45:cf:9e:74:d8:20:37:
60:bc:20:1d:c7:53:f8:6d:35:22:d7:8c:29:81:96:06:80:31:
cc:80:a7:de:29:f7:db:0e:5b:e2:ee:8e:5f:8f:a3:b7:57:4c:
95:a5:ef:89:ff:88:b4:b4:34:2b:78:45:35:12:4a:67:a1:b1:
e8:36:bc:db:a3:0f:5e:04:ab:fc:f8:73:89:19:8f:5b:36:38:
9a:fc:bb:f6:35:92:62:68:c5:db:b6:9e:45:84:42:90:0f:83:
20:b0:f6:a4:d1:27:3b:b5:41:a1:2c:75:d2:29:42:9c:8b:26:
45:67:f4:e5:34:25:43:26:2a:f1:0d:6d:f7:b2:39:fb:af:ae:
91:74:16:b1:52:21:a1:c8:22:e5:76:84:5e:5d:90:fc:a7:92:
4f:6c:ca:c1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNDNjQxMTAvBgNVBAUTKEE3QzE4MkNCMEM1NkVDQzY4RDc0OTFBMjkxNDE0NEI0
Nzc0Rjc3MzIwHhcNMjYxMDI5MDI0OTI4WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWUyYjQzOC0zODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApU+FY8JIUe5eDwHxT47MNpbtn6wQLVyQXpPGqpcUuyxC8pDjH3/Yj1QTduYs
6dVxyB7dkY9fI1Sk+iS1dEpXGjPFeEVIyTAFIXaAOxPxD+sRnLjhTNfSCGwSUa8b
wEwGyJ9+pn9VI1WcQAuvISRJNuJGv3oiovBGYcZDXoDKLAYH1ktpb2qkhRapNAyH
CaiO+CifVWBbcLmLrYDpPRel3Higzewpd78UQVA3iUrXBRJyjntK8bHAs3b2ICtv
DOf2nlhqnTF+UbFdAyA/a8KrvQtzJKcTy/mkEtoojo1oZH1Vcf/CyNk96L3iENhW
UkIfMZAxM/p+2yftqpCD/wx3aQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAUd7NnF
8dq/GprktnJaLHG/kl0VMB8GA1UdIwQYMBaAFKfBgssMVuzGjXSRopFBRLR3T3cy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0M2NC9BNkRFRjFFRUIz
MEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdNYU5kSkdpa1VGRXRIZFBk
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A4R0N5d3hXN01hTmRKR2lrVUZFdEhkUGR6SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzNDNjQvQTZERUYxRUVCMzBCMTFFRDlFODRERjE5QzRGOUFFMDIvNEUyNTk3QUNC
MzBGMTFFREE2MTBFMDFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQByxPgMA0GCSqGSIb3DQEBCwUAA4IBAQCZYmZWQYgeUY9PSw7yBLoo
f2BqGvuaxHAkorzH3G8P3bZMYEbPl4gmw/VTB2pFcHz4Dq3eA6RIR8o1q3EDmDnE
mGF9WYHaCxFgAorHOQwMsig/5wZnBRRZiSYU+kXilwkkyXFH6EXPnnTYIDdgvCAd
x1P4bTUi14wpgZYGgDHMgKfeKffbDlvi7o5fj6O3V0yVpe+J/4i0tDQreEU1Ekpn
obHoNrzbow9eBKv8+HOJGY9bNjia/Lv2NZJiaMXbtp5FhEKQD4MgsPak0Sc7tUGh
LHXSKUKciyZFZ/TlNCVDJirxDW33sjn7r66RdBaxUiGhyCLldoReXZD8p5JPbMrB
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:18:25 2026 by rpki-client