
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2E6008624A5711F0BD4BC13AC4F9AE02.roa
File: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (raw, json)
Hash identifier: FHMJGrrxUvRBeY9Ihx5SI/go/dc2sMa74hHT1NwYti8=
Subject key identifier: 27:6A:13:82:7C:41:0F:06:CA:44:A0:B2:3F:08:F2:8B:DE:D5:6A:A5
Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial: 08BC
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2E6008624A5711F0BD4BC13AC4F9AE02.roa
Signing time: Mon 10 Aug 2026 20:41:02 +0000
ROA not before: Mon 10 Aug 2026 20:41:02 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 24181
IP address blocks: 202.49.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236 (0x8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Validity
Not Before: Aug 10 20:41:02 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7a375e-ab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:9f:20:b6:f0:5a:4b:a4:56:13:f0:26:74:
a3:3e:ad:95:8e:b9:40:71:af:45:fa:2f:e7:40:32:
5b:fa:bc:73:ab:34:d2:b0:e6:85:dd:2d:87:bd:2a:
f6:f8:c1:d3:16:3f:12:15:07:57:d3:b0:39:38:aa:
b1:ad:24:e2:68:3f:06:db:6b:cb:77:4d:13:34:f1:
8c:fe:4f:fa:f4:1a:35:7e:4c:3f:f3:2e:f6:db:37:
1e:1a:1a:46:9d:67:c9:e8:cb:1d:ab:02:ee:82:b2:
65:06:db:0f:5b:64:d7:35:bd:b6:10:16:68:b1:e8:
7a:e5:6d:dc:7e:8a:f2:ca:ce:a3:11:05:1e:c4:81:
60:e6:e1:ca:65:cd:b0:39:57:44:e6:7a:e5:f7:75:
cf:d0:1c:14:de:16:c4:f0:cf:6a:58:6e:97:ac:aa:
e5:3f:bb:9d:b7:8b:95:0b:86:59:c1:9c:45:74:6f:
b7:3f:cf:0c:49:5a:3f:d7:58:18:ca:97:d0:79:7a:
78:57:4a:0f:dd:08:a1:35:96:ef:b2:7f:21:7b:90:
19:d1:70:e3:11:a3:27:03:1d:86:b1:19:b1:6f:19:
aa:a7:07:0e:b6:14:38:55:07:ec:8c:ec:58:fd:dd:
bd:f2:d0:08:7a:71:f2:10:a7:0b:8c:b3:75:cc:c5:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6A:13:82:7C:41:0F:06:CA:44:A0:B2:3F:08:F2:8B:DE:D5:6A:A5
X509v3 Authority Key Identifier:
keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2E6008624A5711F0BD4BC13AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.49.16.0/22
Signature Algorithm: sha256WithRSAEncryption
80:15:74:51:04:a0:5f:76:c4:37:11:54:ca:19:87:d1:d4:0b:
17:bc:09:aa:a8:19:df:74:16:be:34:34:02:1c:36:20:07:cd:
74:6d:5b:0a:d1:a7:ae:f7:80:af:2e:e2:95:b2:4c:b5:7e:d8:
0f:c6:ac:e1:6b:49:13:0e:85:26:4c:57:0d:ae:70:3e:25:38:
f8:12:b0:81:98:09:ca:e3:db:52:c5:37:92:a0:1c:8b:31:6d:
c4:65:7e:10:58:fe:0b:10:8b:3a:68:ca:64:98:a8:76:59:8a:
c5:f3:e8:69:49:e7:84:00:3f:28:93:ae:ec:76:cc:9a:1b:76:
f1:2f:61:ed:4c:47:1a:a4:55:e4:09:39:3a:5c:bc:e7:a2:d5:
17:50:21:ff:ca:11:6c:10:53:dc:cb:be:a2:42:9b:59:6b:6a:
4a:1b:04:42:51:b5:31:12:61:02:cf:7a:d5:09:db:98:b2:22:
4b:1e:4e:87:8f:65:27:83:94:a9:6b:87:42:5d:10:2e:90:ff:
56:af:3d:fa:3d:72:7e:61:41:b2:61:7d:e6:fd:78:6d:54:40:
a1:0e:c9:dd:ab:7d:8e:9a:8c:c3:2d:30:b4:e5:15:60:42:a9:
04:ad:30:38:79:06:d8:d9:06:ef:3b:43:8a:60:a2:03:ab:41:
ca:b4:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:53:11 2026 by rpki-client