
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
File: 682125602A4311EBBD69BE46C4F9AE02.roa (raw, json)
Hash identifier: s9m5MA/YhpH+FpVir7bX1Gnp+fOQDHAC585kZczTBcA=
Subject key identifier: B1:2B:8A:12:56:D9:81:F4:F2:48:42:4E:73:6C:56:D5:8A:A4:E9:4B
Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial: 0A26
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
Signing time: Tue 16 Jun 2026 21:25:29 +0000
ROA not before: Tue 16 Jun 2026 21:25:29 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 55932
IP address blocks: 203.151.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2598 (0xa26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Validity
Not Before: Jun 16 21:25:29 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a31bf49-df70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:c8:f3:f6:42:9c:1c:c7:2d:b6:9f:a8:e6:
3d:19:de:a5:9e:35:87:47:ab:11:e1:72:f8:4a:c9:
da:4c:e0:9f:03:98:9a:0f:01:85:68:98:a4:b1:df:
83:7e:13:95:fb:11:dd:20:a9:4a:02:c3:55:e2:f5:
19:0b:3f:27:7a:8e:11:b1:9e:0a:a4:d4:ea:5a:02:
28:7e:38:ac:ba:b6:da:2d:f0:bd:cf:cb:1f:b5:5d:
ca:b9:84:9e:72:fb:cd:3a:8c:3a:50:70:14:75:e5:
6a:0b:0b:68:66:0f:c5:89:52:a4:51:cd:21:cc:12:
f0:48:00:20:04:83:0c:67:fd:23:74:83:60:f2:f7:
9b:f7:05:3a:96:5a:80:2a:84:6a:da:4c:45:08:b9:
f1:6b:cb:89:51:f3:36:fd:ec:4e:55:fa:62:5a:5a:
82:0f:78:5f:ab:a3:96:e2:29:d1:9a:32:84:c6:dc:
fb:f6:a3:04:60:95:67:a5:28:3f:fe:83:2c:1c:2e:
67:f6:51:7c:10:65:7b:d3:d5:a4:cc:b4:c0:b4:a8:
3e:8b:81:0b:db:0a:6c:79:15:8a:15:7c:e5:60:73:
13:56:e7:0e:bb:fd:77:ab:f7:66:9f:90:b4:39:53:
82:2b:9e:a6:a6:1a:89:83:93:ee:df:15:5f:3c:0f:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2B:8A:12:56:D9:81:F4:F2:48:42:4E:73:6C:56:D5:8A:A4:E9:4B
X509v3 Authority Key Identifier:
keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.151.159.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:03:52:f1:ad:0c:20:c7:e4:87:22:b4:72:a4:b8:75:95:11:
69:6b:67:59:eb:a7:3e:82:81:8a:54:fd:28:2d:f7:43:57:96:
6a:1f:57:8f:7e:43:3b:8d:ed:e4:e2:1a:32:f0:d8:93:3f:8a:
75:8f:b1:f6:49:fe:55:e4:09:54:8b:69:65:95:53:36:25:ca:
13:c9:27:61:5a:d3:9d:8a:f0:a9:6b:5d:62:e2:7d:2b:95:0b:
4d:c7:06:5f:3e:de:1f:e6:cf:7c:ee:71:4f:1c:96:16:d6:1c:
f3:68:05:ac:43:44:94:5b:bd:ac:8e:0b:0d:71:cf:2a:57:1d:
02:79:07:78:3e:55:52:8b:d4:6b:3e:67:3f:c5:cd:d1:1a:da:
23:40:b5:98:31:c5:00:1e:9b:d9:0a:dd:e0:f8:17:11:61:c1:
ee:27:57:17:54:af:ad:80:e5:32:c8:1c:e2:97:1e:fd:d7:0f:
b1:f3:bb:9c:3d:94:12:ec:9b:96:52:03:72:d3:a3:6f:01:50:
2f:29:18:47:6b:35:82:b9:c9:10:bc:e1:6e:bd:36:c7:f7:fa:
1f:60:3b:f8:2a:6f:ba:f5:cf:87:28:3e:4c:27:99:fb:e0:fd:
29:fd:c4:ec:00:71:67:fd:db:61:1c:14:c9:92:13:88:ee:b5:
64:39:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 20:27:00 2026 by rpki-client