
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/36AA48F2D55E11EAB56B562AC4F9AE02.roa
File: 36AA48F2D55E11EAB56B562AC4F9AE02.roa (raw, json)
Hash identifier: 6HKilC9X65Chh8mBRFdkqn+pK8KsykPmYrk7ySOOG08=
Subject key identifier: DB:76:29:4F:0A:B3:A7:CE:99:EE:6F:23:A2:FC:92:61:17:4A:CF:47
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 202D
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/36AA48F2D55E11EAB56B562AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:12:23 +0000
ROA not before: Sat 30 Aug 2025 16:35:15 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133775
IP address blocks: 125.77.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8237 (0x202d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Aug 30 16:35:15 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48f97-f796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:42:fe:84:49:f4:4d:94:99:46:65:38:14:
1a:6f:b3:df:66:d5:cb:66:6b:b5:75:be:95:41:6f:
5e:23:54:b5:ed:fc:6b:69:85:78:93:39:7b:b3:65:
37:47:c0:14:74:b5:17:15:68:1d:42:72:4d:b6:a3:
c3:52:d1:fd:9d:cf:86:3a:1e:bc:63:f8:8b:f9:49:
71:55:e7:5e:c9:cc:cd:a2:b8:f4:d2:c4:f1:a3:41:
27:c2:91:b2:31:25:f5:2b:af:6d:13:54:2e:d9:9f:
8c:0a:64:7d:fe:d9:9e:49:ac:47:a8:2e:54:1d:d2:
0e:d3:88:49:31:2a:bc:77:f3:5d:ea:42:54:d9:2f:
7f:d3:92:42:cc:8f:b8:0b:dc:e5:2a:2b:25:64:53:
ed:fe:6e:34:26:ca:fa:c9:5a:44:26:7f:d2:63:ca:
64:84:2a:7b:97:d8:ae:4e:41:24:b0:a7:6a:7c:10:
cf:08:44:78:88:1b:e4:4a:67:61:aa:38:6d:fb:fa:
61:81:96:aa:aa:38:d0:a0:41:6c:5d:98:3b:52:e4:
9b:fb:ab:38:89:cd:ac:b4:50:1c:eb:dc:dc:3e:d4:
ac:fa:10:33:74:41:38:ef:1c:1f:35:ec:b4:ad:5b:
48:a0:cc:77:f9:57:d1:b3:b6:d0:ce:41:41:a5:79:
2d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:76:29:4F:0A:B3:A7:CE:99:EE:6F:23:A2:FC:92:61:17:4A:CF:47
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/36AA48F2D55E11EAB56B562AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
125.77.192.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:91:f9:ab:4f:2c:e1:30:fa:46:58:c0:8a:00:9d:7d:59:c5:
4d:0b:c6:a7:3f:43:38:dc:9b:33:d8:27:d0:05:ae:9f:27:8b:
39:fb:46:8f:3b:fe:e9:6c:7b:7a:e3:39:70:c2:e8:29:69:c9:
6d:25:7b:d6:2b:96:b2:5e:c8:44:a6:88:f7:b6:a4:b7:4c:23:
28:3b:16:81:62:ea:3a:e7:a3:ab:d1:e3:0c:f9:dd:e8:bd:7b:
06:bc:83:ee:6e:77:d5:35:04:3b:f8:46:b4:7b:c3:b5:c3:52:
2a:11:6d:54:cd:a3:1b:62:de:d2:03:d3:d3:5b:ab:58:97:a4:
b7:53:4e:4f:c1:c5:57:65:14:b5:16:37:15:e7:ec:04:a6:c5:
e1:b3:99:2e:8f:38:79:87:5b:61:e8:e5:e0:d5:f1:82:0c:44:
45:cc:6d:88:08:28:60:2b:05:e4:25:73:34:9f:d1:ef:a8:6f:
3b:d5:e0:10:9e:cc:8b:65:fd:5d:85:4b:c4:c6:3d:b1:7b:f4:
f9:7d:7a:15:fc:1e:37:6d:3b:94:a7:21:a7:2f:cc:22:93:91:
77:23:6f:90:98:46:7e:e8:8b:a8:1f:3a:16:a4:6f:cc:fc:ed:
48:75:bd:e6:38:24:36:8b:22:f9:e6:9e:e0:2d:4d:ee:93:74:
39:4d:8c:04
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjUwODMwMTYzNTE1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGY5Ny1mNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ZNC/oRJ9E2UmUZlOBQab7PfZtXLZmu1db6VQW9eI1S17fxraYV4kzl7s2U3
R8AUdLUXFWgdQnJNtqPDUtH9nc+GOh68Y/iL+UlxVedeyczNorj00sTxo0EnwpGy
MSX1K69tE1Qu2Z+MCmR9/tmeSaxHqC5UHdIO04hJMSq8d/Nd6kJU2S9/05JCzI+4
C9zlKislZFPt/m40Jsr6yVpEJn/SY8pkhCp7l9iuTkEksKdqfBDPCER4iBvkSmdh
qjht+/phgZaqqjjQoEFsXZg7UuSb+6s4ic2stFAc69zcPtSs+hAzdEE47xwfNey0
rVtIoMx3+VfRs7bQzkFBpXktTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNt2KU8K
s6fOme5vI6L8kmEXSs9HMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvMzZBQTQ4RjJE
NTVFMTFFQUI1NkI1NjJBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDfU3AMA0GCSqGSIb3DQEBCwUAA4IBAQBakfmrTyzhMPpGWMCKAJ19
WcVNC8anP0M43Jsz2CfQBa6fJ4s5+0aPO/7pbHt64zlwwugpacltJXvWK5ayXshE
poj3tqS3TCMoOxaBYuo656Or0eMM+d3ovXsGvIPubnfVNQQ7+Ea0e8O1w1IqEW1U
zaMbYt7SA9PTW6tYl6S3U05PwcVXZRS1FjcV5+wEpsXhs5kujzh5h1th6OXg1fGC
DERFzG2ICChgKwXkJXM0n9HvqG871eAQnsyLZf1dhUvExj2xe/T5fXoV/B43bTuU
pyGnL8wik5F3I2+QmEZ+6IuoHzoWpG/M/O1Idb3mOCQ2iyL55p7gLU3uk3Q5TYwE
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:45:19 2026 by rpki-client