
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/0333AD1461FE11ECBD833921C4F9AE02.roa
File: 0333AD1461FE11ECBD833921C4F9AE02.roa (raw, json)
Hash identifier: /shRGgwZ3mbHAgKktUyEwuWZHd2hVreg4D00pNYllXE=
Subject key identifier: E5:27:5E:14:1A:92:61:B6:21:54:53:E5:B4:0D:64:C4:4B:1E:5D:96
Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial: 1A33
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/0333AD1461FE11ECBD833921C4F9AE02.roa
Signing time: Fri 02 Oct 2026 17:30:08 +0000
ROA not before: Fri 02 Oct 2026 17:30:08 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 16625
IP address blocks: 126.147.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6707 (0x1a33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Validity
Not Before: Oct 2 17:30:08 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abfea20-6cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:db:9b:22:57:af:23:6c:b1:a9:e5:3f:47:
58:bf:39:86:f3:a0:68:f7:88:da:fa:f2:69:51:91:
0f:43:2e:9c:33:89:91:d2:90:9c:be:23:4b:bd:83:
3c:fd:c5:86:41:7f:a0:54:9a:4e:bf:aa:95:ea:1d:
b7:34:91:8d:ae:7f:9c:b4:50:39:f3:8b:7e:de:a1:
80:99:19:7d:5e:45:da:41:cd:4e:87:b6:69:05:19:
a6:42:c1:8d:9e:5d:37:5a:49:b1:5a:b2:c8:6b:47:
aa:ab:57:5a:7c:6d:a5:74:f7:48:0f:79:19:86:8b:
8b:2c:52:3f:06:9c:01:65:08:57:ed:ac:b8:76:65:
f0:6b:a7:a5:21:de:6b:27:8f:06:c3:1f:ec:90:04:
fa:37:aa:ac:6a:51:b0:07:a3:ca:db:91:8d:d7:3e:
74:fd:ba:df:c9:45:8a:00:02:be:97:2e:d3:43:36:
d3:ab:af:ab:ec:7f:33:f8:67:84:50:fb:47:57:b1:
af:a7:15:3e:ee:a6:70:6e:ad:41:17:68:d8:89:c9:
27:40:23:6a:d2:56:5b:78:16:a0:ab:4f:5c:15:31:
34:5a:a7:44:5a:9e:88:64:1a:a8:ee:72:54:0e:6a:
43:05:f1:f6:dc:2e:16:3d:9a:e3:34:15:ee:d8:ed:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:27:5E:14:1A:92:61:B6:21:54:53:E5:B4:0D:64:C4:4B:1E:5D:96
X509v3 Authority Key Identifier:
keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/0333AD1461FE11ECBD833921C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
126.147.252.0/22
Signature Algorithm: sha256WithRSAEncryption
31:8c:00:85:fa:39:65:20:7e:2e:e5:10:88:07:4d:e4:18:c0:
42:76:9f:44:58:62:4f:c3:9f:d2:af:d1:74:db:d9:3a:6e:f2:
e7:5b:83:ca:61:6e:cd:f9:ac:7e:84:1c:79:a3:8f:87:5f:69:
4d:52:51:92:5a:20:7b:70:e2:4d:22:1a:ef:12:6a:96:26:bf:
46:de:ff:a3:07:91:62:b0:58:49:18:c8:df:18:1b:fd:08:ff:
f0:dc:e2:c0:b6:6a:06:7d:6f:66:28:69:2d:69:cf:21:0f:3e:
be:e5:5a:2e:60:bb:d2:52:8b:47:cf:d5:51:b4:f5:78:99:81:
b3:cd:e4:d9:5e:1f:73:2c:99:2b:a1:d4:4c:6d:d6:16:01:06:
2e:b0:d9:83:fc:16:f0:65:26:41:ac:df:e0:ec:a3:a0:0a:b7:
0f:a9:5a:0f:bf:ad:9a:13:e5:62:d8:14:9c:72:58:e0:9d:5e:
41:c9:b8:3a:93:c8:f2:e9:9c:86:87:7b:bd:21:7e:1c:97:8e:
23:b3:ab:be:d6:c9:eb:4b:9c:88:22:09:13:81:0b:b6:f1:0a:
b7:09:9f:54:b9:a8:8c:f0:7f:67:16:b4:4e:0c:fc:58:b0:61:
08:df:ef:df:ed:cb:cd:cc:54:dd:59:a1:c7:3b:8c:2c:b7:3d:
a7:1f:1b:b9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND
RjJBNEU2NEUwHhcNMjYxMDAyMTczMDA4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmZWEyMC02Y2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn6/bmyJXryNssanlP0dYvzmG86Bo94ja+vJpUZEPQy6cM4mR0pCcviNLvYM8
/cWGQX+gVJpOv6qV6h23NJGNrn+ctFA584t+3qGAmRl9XkXaQc1Oh7ZpBRmmQsGN
nl03WkmxWrLIa0eqq1dafG2ldPdID3kZhouLLFI/BpwBZQhX7ay4dmXwa6elId5r
J48Gwx/skAT6N6qsalGwB6PK25GN1z50/brfyUWKAAK+ly7TQzbTq6+r7H8z+GeE
UPtHV7GvpxU+7qZwbq1BF2jYicknQCNq0lZbeBagq09cFTE0WqdEWp6IZBqo7nJU
DmpDBfH23C4WPZrjNBXu2O3whwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOUnXhQa
kmG2IVRT5bQNZMRLHl2WMB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0
NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTNBRTEvNjM4NDNFRDA5NDQwMTFFN0JDOTlDMTFBQzRGOUFFMDIvMDMzM0FEMTQ2
MUZFMTFFQ0JEODMzOTIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCfpP8MA0GCSqGSIb3DQEBCwUAA4IBAQAxjACF+jllIH4u5RCIB03k
GMBCdp9EWGJPw5/Sr9F029k6bvLnW4PKYW7N+ax+hBx5o4+HX2lNUlGSWiB7cOJN
IhrvEmqWJr9G3v+jB5FisFhJGMjfGBv9CP/w3OLAtmoGfW9mKGktac8hDz6+5Vou
YLvSUotHz9VRtPV4mYGzzeTZXh9zLJkrodRMbdYWAQYusNmD/BbwZSZBrN/g7KOg
CrcPqVoPv62aE+Vi2BSccljgnV5Bybg6k8jy6ZyGh3u9IX4cl44js6u+1snrS5yI
IgkTgQu28Qq3CZ9UuaiM8H9nFrRODPxYsGEI3+/f7cvNzFTdWaHHO4wstz2nHxu5
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:41:28 2026 by rpki-client