
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/C6E6A146171011F1BE8A5674053D8C67.roa
File: C6E6A146171011F1BE8A5674053D8C67.roa (raw, json)
Hash identifier: GdJrwOcBSARq4/FNK6vVvRNfwD4ouN5tI56UpTBLQoQ=
Subject key identifier: 70:CC:2C:32:C1:C2:81:A5:78:D6:7D:AC:C2:27:BC:65:9D:CA:9C:4C
Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial: 09A3
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/C6E6A146171011F1BE8A5674053D8C67.roa
Signing time: Sun 30 Aug 2026 20:41:09 +0000
ROA not before: Sun 30 Aug 2026 20:41:09 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 16509
IP address blocks: 202.173.24.0/24 maxlen: 24
202.173.26.0/24 maxlen: 24
202.173.27.0/24 maxlen: 24
202.173.28.0/24 maxlen: 24
202.173.29.0/24 maxlen: 24
202.173.30.0/24 maxlen: 24
202.173.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2467 (0x9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Validity
Not Before: Aug 30 20:41:09 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a949565-0d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:6c:42:5d:b1:d7:42:fb:95:5d:fb:85:9f:
33:08:bd:31:9d:33:cf:73:68:67:c9:62:ed:e0:3b:
d9:f2:8c:a8:c2:78:14:45:05:c8:28:0e:d7:b4:92:
d9:90:7e:d8:e0:a2:83:0f:5c:4c:ab:59:de:c3:00:
00:6a:c2:41:96:02:df:69:c8:87:1f:be:51:03:38:
2f:7f:93:a3:6f:37:cd:f5:63:b7:8e:ce:a6:3d:7d:
7c:b9:85:c2:88:2c:09:18:e6:f2:20:c8:4c:5d:b1:
c7:e6:8e:e2:11:a9:fc:dd:1c:0f:31:8c:fe:34:89:
b5:43:48:b6:52:97:f1:e9:25:68:d1:8c:7a:f8:5f:
ab:9b:ab:54:7a:34:0a:ed:10:88:f5:1c:fd:74:41:
62:6f:ea:b0:22:7a:20:cf:20:e9:25:49:26:a3:cc:
82:6f:60:ab:a4:76:3b:42:ea:7a:f1:2b:57:cf:a2:
33:db:1f:77:59:83:70:5e:67:73:c7:f2:50:44:69:
5a:0a:70:0d:70:1d:a8:42:4e:21:af:6b:46:79:bb:
c1:d6:e4:65:23:86:ac:8b:d4:a6:6e:8f:20:f8:06:
de:0f:8d:fa:7a:5c:a6:9e:13:52:ba:25:2d:b0:30:
7d:5c:22:35:d1:91:8c:ed:68:1f:6e:ad:97:5b:fd:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:2C:32:C1:C2:81:A5:78:D6:7D:AC:C2:27:BC:65:9D:CA:9C:4C
X509v3 Authority Key Identifier:
keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/C6E6A146171011F1BE8A5674053D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
202.173.24.0/24
202.173.26.0-202.173.31.255
Signature Algorithm: sha256WithRSAEncryption
81:36:3e:ba:a5:2a:86:f4:af:71:91:93:f1:d3:a7:02:89:aa:
79:bd:ae:df:fa:76:2d:9e:ef:6e:46:fa:9a:0d:f0:20:87:be:
af:c5:1b:0d:bd:a6:f8:74:04:d2:fb:fa:32:69:8c:96:14:2a:
fe:09:d4:37:d0:d3:5c:05:cd:e7:f1:24:c1:8f:d1:9c:7b:0b:
a2:95:ed:94:50:fa:4f:14:14:09:58:88:8a:8b:e8:26:28:65:
c5:4a:76:00:12:ac:24:e0:8c:ae:a1:e3:c6:5e:6a:49:04:48:
83:8a:33:26:15:c6:f7:7c:b5:f2:e3:b3:c0:8e:77:df:f1:97:
73:a4:21:81:6e:a9:9a:bf:54:f9:19:8a:a3:03:95:7a:f7:8c:
f7:ec:92:09:c2:d9:1a:aa:f9:01:f3:4f:6c:43:38:12:2c:97:
69:68:0d:0d:9f:b3:97:61:29:c2:25:d9:9a:7d:5a:81:37:71:
b2:fd:4d:c2:8d:90:c8:a1:73:4a:16:ed:00:25:aa:3a:b4:b1:
63:a0:e6:c6:4f:66:cf:68:f9:4e:3b:1d:40:fa:1c:28:6e:1d:
5b:26:6c:6b:4f:88:d8:cd:9b:0c:25:0e:d3:22:19:c3:3a:55:
f1:d2:5e:a1:f5:49:2c:cf:1c:1f:8e:af:ed:98:83:3c:ad:f3:
8a:f9:c5:93
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICCaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1
NDE0MTNFRDAwHhcNMjYwODMwMjA0MTA5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0OTU2NS0wZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtyBsQl2x10L7lV37hZ8zCL0xnTPPc2hnyWLt4DvZ8oyowngURQXIKA7XtJLZ
kH7Y4KKDD1xMq1newwAAasJBlgLfaciHH75RAzgvf5OjbzfN9WO3js6mPX18uYXC
iCwJGObyIMhMXbHH5o7iEan83RwPMYz+NIm1Q0i2Upfx6SVo0Yx6+F+rm6tUejQK
7RCI9Rz9dEFib+qwInogzyDpJUkmo8yCb2CrpHY7Qup68StXz6Iz2x93WYNwXmdz
x/JQRGlaCnANcB2oQk4hr2tGebvB1uRlI4asi9Smbo8g+AbeD436elymnhNSuiUt
sDB9XCI10ZGM7Wgfbq2XW/1g0wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFHDMLDLB
woGleNZ9rMInvGWdypxMMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1
RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDIyNDEvNEY3Qjk4NjZDNUY3MTFFQUJBOUQyMDgxQzRGOUFFMDIvQzZFNkExNDYx
NzEwMTFGMUJFOEE1Njc0MDUzRDhDNjcucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQAyq0YMAwDBAHKrRoDBAXKrQAwDQYJKoZIhvcNAQELBQADggEBAIE2
PrqlKob0r3GRk/HTpwKJqnm9rt/6di2e725G+poN8CCHvq/FGw29pvh0BNL7+jJp
jJYUKv4J1DfQ01wFzefxJMGP0Zx7C6KV7ZRQ+k8UFAlYiIqL6CYoZcVKdgASrCTg
jK6h48ZeakkESIOKMyYVxvd8tfLjs8COd9/xl3OkIYFuqZq/VPkZiqMDlXr3jPfs
kgnC2Rqq+QHzT2xDOBIsl2loDQ2fs5dhKcIl2Zp9WoE3cbL9TcKNkMihc0oW7QAl
qjq0sWOg5sZPZs9o+U47HUD6HChuHVsmbGtPiNjNmwwlDtMiGcM6VfHSXqH1SSzP
HB+Or+2Ygzyt84r5xZM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:17:13 2026 by rpki-client