
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/31554CBC1D8A11EA8ECDAA75C4F9AE02.roa
File: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (raw, json)
Hash identifier: Jt3VRF7pIPibDQxsqo2vMT73+WNWdhXQx0TVNAZBgDA=
Subject key identifier: 59:13:14:ED:3D:0B:75:AE:5E:30:5C:E1:B4:04:48:C8:C4:12:4D:28
Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Certificate serial: 0D0F
Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/31554CBC1D8A11EA8ECDAA75C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:36:27 +0000
ROA not before: Fri 14 Mar 2025 19:19:11 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 55639
IP address blocks: 111.90.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Mar 2026 18:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3343 (0xd0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Validity
Not Before: Mar 14 19:19:11 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a5a06b-e21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:93:ce:fd:75:08:6c:90:0b:ce:88:fb:78:
69:89:40:de:f7:1c:52:c5:67:66:25:e2:f5:cc:61:
af:0b:8f:55:15:3e:9e:50:3d:2e:43:af:ef:0f:8a:
65:69:9b:54:84:cb:b1:e0:11:07:e2:f2:db:e7:9c:
c4:73:5b:90:9d:a3:2a:c8:16:ce:ce:1d:56:ea:d0:
71:63:e0:48:b9:f3:aa:29:39:60:2b:27:fd:ec:af:
58:bf:79:9a:e6:c6:81:90:d8:8b:08:42:2f:f5:14:
7e:3a:09:7e:49:79:2b:6d:86:ff:6b:c4:81:68:96:
02:51:3b:97:11:97:80:7f:c1:e6:cb:05:73:fb:77:
ed:37:0f:68:be:e5:a7:fb:31:ce:fb:c7:28:77:41:
ee:d9:a7:d7:1c:44:26:54:14:42:ad:86:b6:45:35:
b0:a9:10:2c:19:d1:02:eb:a2:c6:cf:91:dc:dc:29:
bd:8f:30:a0:ae:46:34:94:d5:90:cb:df:37:e7:0c:
38:87:70:4e:b4:b0:79:07:5d:a7:f0:2d:32:b4:3f:
7b:1c:70:a2:44:b6:0f:32:9b:fc:96:d9:6f:a8:89:
76:3f:4f:c7:65:5f:a1:df:f6:26:5a:e1:7d:bc:b3:
5a:be:80:ae:fb:b4:25:3f:2d:07:a8:a6:55:a4:50:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:14:ED:3D:0B:75:AE:5E:30:5C:E1:B4:04:48:C8:C4:12:4D:28
X509v3 Authority Key Identifier:
keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/31554CBC1D8A11EA8ECDAA75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
111.90.157.0/24
Signature Algorithm: sha256WithRSAEncryption
16:2c:0b:24:97:34:09:09:f3:41:bf:1c:ad:46:b6:46:91:49:
d7:4e:e3:f8:e6:34:40:03:d6:24:70:b3:87:cf:c2:98:48:bb:
46:17:28:d7:29:63:87:fa:6f:42:03:f8:f2:17:0c:20:e1:bf:
97:3d:5a:98:69:a6:b4:37:2a:7d:b4:d0:18:c6:23:23:be:00:
09:d1:f1:f4:d2:c5:47:b3:4b:dc:45:d4:28:89:f8:a0:90:30:
08:3c:42:40:18:85:71:6b:ec:fb:fb:5a:51:8a:9d:1d:9f:6d:
85:47:f2:eb:e3:70:76:17:60:2f:ab:65:8b:66:2a:12:05:9a:
96:43:60:27:7d:13:d7:06:c2:09:62:10:b0:de:b2:8e:fa:0c:
d4:0c:d6:93:3b:5f:ce:e0:9c:ee:47:bb:20:05:b9:b5:40:a0:
74:81:90:6b:dc:e8:ca:e4:7a:fa:55:28:c5:98:a8:8b:9f:10:
64:fb:9c:c8:63:83:94:b5:a8:25:c5:39:9a:8b:b1:f7:33:1c:
e5:7b:4f:88:a8:1b:05:d6:f3:e1:d5:77:12:e4:ea:11:51:a1:
e8:bd:21:ac:00:f4:85:26:28:e9:d2:e9:63:85:08:f2:b7:7c:
82:4d:a8:af:ad:ea:e5:82:2e:c0:b2:c1:8c:a1:a7:51:82:9b:
eb:2c:45:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 00:38:01 2026 by rpki-client